Academy | Footprinting SMB 3d question

Off-topic
1

Hi, guys

Im stuck on 3d question on SMB footprinting part:

“Connect to the discovered share and find the flag.txt file. Submit the contents as the answer.”

Ive connected, found flag.txt file, but i cat neither “open” or “get” this file, getting the error:

“Error opening local file flag.txt” or “open file \contents\flag.txt: for read/write fnum 6”

So, i guess its coz i have no permisson for that.

Could u give me the right direction in my way? )

2

get flag.txt , it’s all

3

did u read my oroginal post attentively?
i cant get it

4

I have done it a few minutes ago, I have moved to the folder in question, I perform the “get”, then you read from your attacking machine the flag.txt
Sorry for my english

5

Look what i got when i try

smbclient \10.129.202.5\sambashare
Enter WORKGROUP\htb-ac616718’s password:
Try “help” to get a list of possible commands.
smb: > cd contents
smb: \contents> ls
. D 0 Mon Nov 8 13:43:45 2021
… D 0 Mon Nov 8 13:43:14 2021
flag.txt N 38 Mon Nov 8 13:43:45 2021

	4062912 blocks of size 1024. 414260 blocks available

smb: \contents>
smb: \contents> get flag.txt
Error opening local file flag.txt
smb: \contents>

Could you tell me what i do wrong?

6

Maybe
smbclient -U -L \10.129.202.5\sambashare

7

no. coz “-L” its just “list” folders and “-U” its “user” in that case means anonynous

i just get into the main folder “sambashare”

smbclient -U -L \10.129.202.5\sambashare
Enter WORKGROUP-L’s password: :
Try “help” to get a list of possible commands.
smb: >

smb: > ls
. D 0 Mon Nov 8 13:43:14 2021
… D 0 Mon Nov 8 15:53:19 2021
.profile H 807 Tue Feb 25 12:03:22 2020
contents D 0 Mon Nov 8 13:43:45 2021
.bash_logout H 220 Tue Feb 25 12:03:22 2020
.bashrc H 3771 Tue Feb 25 12:03:22 2020

	4062912 blocks of size 1024. 414296 blocks available

smb: >

8

Eventually, i found out that is a bug of virtual workstation. First, i tried browser version just right on the page and it didnt work. The command “get” didnt work

Then i tried the pop-up console of this workstation and finally got this flag

9

They asking for a password after this command smbmap -H 10.129.183.78

10

im still confused on this, what was the answer please?

11

When you enter the terminal go to cd Desktop/ for example so he knows where to transfer the file and then try “get flag.txt”.

12 
smbclient //10.129.134.24/sambashare
more contents\flag.txt
13

How did u find the contents directory??