

Ĭlambling has the ability to enumerate network shares. Ĭhimera has used net share and net view to identify network shares of interest. īitPaymer can search for network shares on the domain or workgroup using net view. īazar can enumerate shared drives on the domain. īad Rabbit enumerates open SMB shares on internal victim networks. īabuk has the ability to enumerate network shares. Īvaddon has enumerated shared folders and mapped volumes.

ĪPT41 used the net share command as part of network reconnaissance. ĪPT39 has used the post exploitation tool CrackMapExec to enumerate network shares. ĪPT38 has enumerated network shares on a compromised host. ĪPT32 used the net view command to show all shares available, including the administrative shares such as C$ and ADMIN$.
