Overview
The NetworkShares command enumerates network shares exposed by the system via WMI. This reveals shared folders, their paths, permissions, and descriptions, helping identify data exposure risks and potential lateral movement opportunities.Syntax
Remote Execution
Output
Returns network share information:- Share name
- Share path
- Share description
- Share type
- Current connections
Use Cases
- Red Team
- Blue Team
- Discover accessible file shares
- Identify data exfiltration targets
- Find writable shares for payload delivery
- Locate administrative shares (C)
- Map file server topology
Example Output
Remote Execution
This command supports remote execution using the
-computername parameter.Detection Considerations
Low detection risk - queries WMI for share information.
Related Commands
- NetworkProfiles - Network profiles
- LocalGroups - Local group membership
- Processes - Running processes