// ENUMSMB
#BASH
#SMB
#SMBCLIENT
#WINDOWS
EnumSMB is a weaponized, standalone wrapper written in Bash to automate the SMB file share auditing lifecycle. Moving beyond generic script execution, it abstracts away complex structural formatting constraints to provide zero-dependency folder auditing, deep-nested path resolution, and multi-vector authentication coercion. Its signature mechanic relies on deep recursive validation loops and embedded layout templates to evaluate background parsing behavior across hidden network layers.
Core Architecture
- Pre-Flight & Interface Engine: Implements automatic non-administrative share mapping alongside a dedicated Admin Share Fast-Track that instantly verifies Local Admin privileges without triggering noisy, recursive crawls across the entire system drive. It also features path healing routines that strip carriage returns and trailing backslashes to safeguard subshell execution.
- Coercion & Ingestion Layer: Chains embedded template engines across multiple desktop shell and XML storage structures (including .url, .scf, and .library-ms) to inject context-aware variables like attacker IPs and custom share handles dynamically on the fly.
- Enumeration Engine: Integrates safe, non-destructive probing using operational mkdir/rmdir loops to explicitly map actual read/write access states deep within tree hierarchies rather than trusting superficial share-level flags.
Technical Roadmap
- Automated target scope selection and administrative share filtering.
- Admin Share Fast-Tracking for instant OPSEC-safe Local Admin verification.
- Deep-nested tree traversal via recursive parsing loops.
- Operational non-destructive verification checks (mkdir/rmdir loops).
- Integrated basic multi-vector coercion templates (.url, .scf, .library-ms, .search-ms, .searchConnector-ms, .search).
- Dynamic parameter interfacing with automated variable expansion ($USER_IP, $SHARE).
- Global multi-extension sweep capability for post-engagement clean mode (.background-image.*).
- Integrate advanced binary shortcut and disk container formats (.lnk, .vhd, .vhdx, .iso).
- Add Microsoft Office template and unmanaged add-in vector extensions (.xll, .dot, .dotm, .dotx).
- Implement multi-threaded parallel target scanning across massive network blocks.