-x question

[bongobongoland]

@XiaoliChan
Can't figure this out.
how to I execute the following command (using -x or -X)

\\192.168.1.1\share\whoami.exe

?

I'm getting all sorts of errors.

I've tried \\\\192.168.1.1\\share\\whoami.exe
I get access denied.
Do I need to use " or ' or both?

[XiaoliChan]

How did you run the smbserver?

Sometimes it may not work, but you can use net use to mount the shares. (please check more videos from ippsec)

[bongobongoland]

The issues is that I can access the share folder easily via PS or cmd. just running \192.168.1.1\share\whoami.exe works fine. so the share is working fine. but if I try to use -x, I get access denied...

[XiaoliChan]

The issues is that I can access the share folder easily via PS or cmd. just running \192.168.1.1\share\whoami.exe works fine. so the share is working fine. but if I try to use -x, I get access denied...

Maybe got AV detection?

I always don't use this technique

[bongobongoland]

AV? I guess that's possible!

[XiaoliChan]

Yes, UNC has already mark as high risky many years ago, I can tell you the defender can do scanning on your shares when you access it.