mount -t cifs '//10.10.10.192/profiles$' /mnt
First we enumerate share using crackmapexec or smbclient. now we are mounting the share in /mnt for the sake of our easier work.
now lets say we have able to crack support user password. now we want to access the support user profile directory under profiles$. meaning under profiles$ directory there will be a directory called support.
mount -t cifs -o 'username=support,password=#00^BlackKnight' //10.10.10.192/profiles$ /mnt
Avi
Comments
Post a Comment