> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/ports-and-services/smb-445.md).

# SMB - 445

SMB 是 Windows 环境中价值最高的服务之一。请检查空会话、共享、签名、RID 暴力破解、可读文件、凭据复用、管理员访问，以及诸如 MS17-010 等已知漏洞。

## 备注

<table data-view="cards" data-full-width="false" data-search="false"><thead><tr><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><strong>CrackMapExec</strong></td><td>枚举主机、用户、共享、凭据和提权访问。</td><td><a href="/pages/15cc623531ed977bcf91cf8e27864cb7aca46134">/pages/15cc623531ed977bcf91cf8e27864cb7aca46134</a></td></tr><tr><td><strong>PsExec</strong></td><td>使用凭据或 NTLM 哈希远程执行命令。</td><td><a href="/pages/121c03e208e214b08a5def3dcf35d08c05dfce30">/pages/121c03e208e214b08a5def3dcf35d08c05dfce30</a></td></tr><tr><td><strong>SMBMap</strong></td><td>查看共享权限、列出文件并下载目标。</td><td><a href="/pages/354614002cd96160dd24173e8f4be0eb429f4ca9">/pages/354614002cd96160dd24173e8f4be0eb429f4ca9</a></td></tr><tr><td><strong>smbclient</strong></td><td>从命令行列出并访问 SMB 共享。</td><td><a href="/pages/6a456f16ce6db26f10c6f14d2772e82adbd60a8e">/pages/6a456f16ce6db26f10c6f14d2772e82adbd60a8e</a></td></tr><tr><td><strong>rpcclient</strong></td><td>使用空会话和 RPC 调用枚举用户和组。</td><td><a href="/pages/e7e568e4f0301f650122bc72abad8669d36c8e9d">/pages/e7e568e4f0301f650122bc72abad8669d36c8e9d</a></td></tr><tr><td><strong>NetExec</strong></td><td>枚举 AD 用户并查找敏感描述信息。</td><td><a href="/pages/c909e80671f3bbc614ba2ae540e24b306f14ab14">/pages/c909e80671f3bbc614ba2ae540e24b306f14ab14</a></td></tr><tr><td><strong>SMBServer</strong></td><td>搭建一个临时 SMB 共享用于文件传输。</td><td><a href="/pages/e9956d5e50a370e49a71763e04fe31cfa8733146">/pages/e9956d5e50a370e49a71763e04fe31cfa8733146</a></td></tr><tr><td><strong>EternalBlue</strong></td><td>验证并利用易受攻击的 SMB 目标上的 MS17-010。</td><td><a href="/pages/6eeecf05892235fba5c44633ca9d46a7b05e54a0">/pages/6eeecf05892235fba5c44633ca9d46a7b05e54a0</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/zh/ports-and-services/smb-445.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.