# Commands ```bash # Null Session # Connecting to the Share smbclient -N -L //<IP> # login smbclient -L //$IP/ -U 'user%pwd' smbclient //$IP/share -U 'user%pwd' # PtH smbclient \\\\$IP\\share -U Administrator --pw-nt-hash <NTLM> ``` Download Files from SMB ```bash smb: \> get <file> # smbclient allows us to execute local system commands using an ! at the beginning smb: \> !<cmd> smb: \> !cat abc.txt # we can see who, from which host, and which share the client is connected. smb: \> smbstatus # disables the interactive prompting for each file during mget. prompt OFF # enables recursive mode for mget and mput recurse ON lcd /home/wook/smb_backup recurse prompt mget * ```