search

ShawnDEvans / smbmap

SMBMap is a handy SMB enumeration tool
GNU General Public License v3.0
1.76k stars 343 forks source link

SMB Permission Clarification #76

Open theredmoose opened 2 years ago

theredmoose commented 2 years ago

Hi, This is more clarification than an bug or issue. I want to use SMBmap to enumerate all the shares that are set to "everyone" access write permission. However, if I use a basic domain user then we have to guess the share names. If I use a admin user the shares will can be enumerated but the permissions are reflecting that of the admin user not an everyone account. Is this correct?

ShawnDEvans commented 2 years ago

The permissions are unfortunately not that granular. There are checks to determine if the user is able to READ, WRITE or READ/WRITE - but that is about as deep as it gets. That said, if you're using a user that is only part of the "EVERYONE" group, that user should still be able to return a list of shared SMB resources on any given server within the domain. However, they may not have READ access to the underlying data. I hope this helps answer your question!