smbclient-ng

smbclient-ng

912 Stars

smbclient-ng, a fast and user friendly way to interact with SMB shares.

p0dalirius
May 27, 2025
912 stars
Category
Active-directory
GitHub Stars
912
Project Added On
May 27, 2025
Contributors
11

smbclient-ng, a fast and user friendly way to interact with SMB shares.
GitHub release (latest by date) PyPI YouTube Channel Subscribers

Features

  • [x] acls: List ACLs of files and folders in cwd. Syntax: acls
  • [x] bat: Pretty prints the contents of a file. Syntax: bat <file>
  • [x] bhead: Pretty prints the first n lines of a file. Syntax: bhead <file>
  • [x] btail: Pretty prints the last n lines of a file. Syntax: btail <file>
  • [x] cat: Get the contents of a file. Syntax: cat <file>
  • [x] cd: Change the current working directory. Syntax: cd <directory>
  • [x] close: Closes the SMB connection to the remote machine. Syntax: close
  • [x] connect: Connect to the remote machine (useful if connection timed out). Syntax: connect
  • [x] dir: List the contents of the current working directory. Syntax: dir
  • [x] exit: Exits the smbclient-ng script. Syntax: exit
  • [x] get: Get a remote file. Syntax: get [-r] <directory or file>
  • [x] help: Displays this help message. Syntax: help
  • [x] head: Get the first n lines of a remote file. Syntax: head <file>
  • [x] history: Displays the command history. Syntax: history
  • [x] info: Get information about the server and or the share. Syntax: info [server|share]
  • [x] lbat: Pretty prints the contents of a local file. Syntax: lbat <file>
  • [x] lcat: Print the contents of a local file. Syntax: lcat <file>
  • [x] lcd: Changes the current local directory. Syntax: lcd <directory>
  • [x] lcp: Create a copy of a local file. Syntax: lcp <srcfile> <dstfile>
  • [x] lls: Lists the contents of the current local directory. Syntax: lls
  • [x] lmkdir: Creates a new local directory. Syntax: lmkdir <directory>
  • [x] lpwd: Shows the current local directory. Syntax: lpwd
  • [x] lrename: Renames a local file. Syntax: lrename <oldfilename> <newfilename>
  • [x] lrm: Removes a local file. Syntax: lrm <file>
  • [x] lrmdir: Removes a local directory. Syntax: lrmdir <directory>
  • [x] ls: List the contents of the current remote working directory. Syntax: ls
  • [x] ltree: Displays a tree view of the local directories. Syntax: ltree [directory]
  • [x] metadata: Get metadata about a file or directory. Syntax: metadata <file|directory>
  • [x] mkdir: Creates a new remote directory. Syntax: mkdir <directory>
  • [x] module: Loads a specific module for additional functionalities. Syntax: module <name>
  • [x] mount: Creates a mount point of the remote share on the local machine. Syntax: mount <remote_path> <local_mountpoint>
  • [x] put: Put a local file or directory in a remote directory. Syntax: put [-r] <directory or file>
  • [x] reconnect: Reconnect to the remote machine (useful if connection timed out). Syntax: reconnect
  • [x] reset: Reset the TTY output, useful if it was broken after printing a binary file on stdout. Syntax: reset
  • [x] rm: Removes a remote file. Syntax: rm <file>
  • [x] rmdir: Removes a remote directory. Syntax: rmdir <directory>
  • [x] sessions: Manage the SMB sessions. Syntax: sessions [interact|create|delete|execute|list]
  • [x] shares: Lists the SMB shares served by the remote machine. Syntax: shares
  • [x] sizeof: Recursively compute the size of a folder. Syntax: sizeof [directory|file]
  • [x] tail: Get the last n lines of a remote file. Syntax: tail <file>
  • [x] tree: Displays a tree view of the remote directories. Syntax: tree [directory]
  • [x] umount: Removes a mount point of the remote share on the local machine. Syntax: umount <local_mount_point>
  • [x] use: Use a SMB share. Syntax: use <sharename>

Install

To install smbclient-ng, you can use pip, pip3 or pipx. You can run any of the following command in your terminal to install smbclient-ng :

  • With pip:
    python3 -m pip install smbclientng

  • With pip3:
    pip3 install smbclientng

  • With pipx:
    pipx install smbclientng

Demonstration

Usage

$ ./smbclient-ng.py 
               _          _ _            _
 ___ _ __ ___ | |__   ___| (_) ___ _ __ | |_      _ __   __ _
/ __| '_ ` _ \| '_ \ / __| | |/ _ \ '_ \| __|____| '_ \ / _` |
\__ \ | | | | | |_) | (__| | |  __/ | | | ||_____| | | | (_| |
|___/_| |_| |_|_.__/ \___|_|_|\___|_| |_|\__|    |_| |_|\__, |
    by @podalirius_                             v2.1.8  |___/

usage: smbclientng [-h] [--debug] [--no-colors] [-l LOGFILE] [-T TIMEOUT] [-a ADVERTISED_NAME] [-C COMMAND] [-S STARTUP_SCRIPT] [-N] -H HOST [-P PORT] [-d DOMAIN] [-u USER]
                   [-p [PASSWORD] | --no-pass | --hashes [LMHASH:]NTHASH | --aes-key HEXKEY | -k | --kdcHost KDCHOST]

smbclient-ng, a fast and user-friendly way to interact with SMB shares.

options:
  -h, --help            show this help message and exit

Config:
  --debug               Enable debug mode.
  --no-colors           Disable colored output.
  -l LOGFILE, --logfile LOGFILE
                        Log file path.
  -T TIMEOUT, --timeout TIMEOUT
                        Timeout for SMB connections (default: 3s)
  -a ADVERTISED_NAME, --advertised-name ADVERTISED_NAME
                        Advertised machine name.

Commands:
  -C COMMAND, --command COMMAND
                        smbclient-ng commands to execute.
  -S STARTUP_SCRIPT, --startup-script STARTUP_SCRIPT
                        Startup script with commands.
  -N, --not-interactive
                        Non-interactive mode.

Target:
  -H HOST, --host HOST  Target SMB Server IP or hostname.
  -P PORT, --port PORT  Target SMB Server port (default: 445).

Authentication & Connection:
  -d DOMAIN, --domain DOMAIN
                        Authentication domain.
  -u USER, --user USER  Username for authentication.

Secrets:
  -p [PASSWORD], --password [PASSWORD]
                        Password.
  --no-pass             Do not prompt for a password.
  --hashes [LMHASH:]NTHASH
                        NT/LM hashes.
  --aes-key HEXKEY      AES key for Kerberos authentication.
  -k, --kerberos        Use Kerberos authentication.
  --kdcHost KDCHOST     Fully qualified domain name (FQDN) of key distribution center (KDC) for Kerberos.

Quick start commands

  • Connect to a remote SMB server:
    smbclient-ng -d "LAB" -u "Administrator" -p 'Admin123!' --host "10.0.0.201"

Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.

Tool Information

Author

p0dalirius

Project Added On

May 27, 2025

License

Open Source

Tags

security tool