RunFinger
Responder comes with a small SMB scanner called RunFinger.py. This utility is located in the tools/ folder and can accurately scan an entire class C network in less than 5 seconds.
This script allows you to quickly discover any SMB server on the provided CIDR and can be launched like this:
./RunFinger.py -i 192.168.0.0/24
The tool will output:
- SMB signing On/Off
- Null sessions possible or not
- If that server running RDP
- Server bootime/last restart
- If SMBv1 is enabled or not
- Domain name for worstations joined to a domain
- OS version and built number
