CORP-DC01

If you don't have much patience, use the following command to download all files recursively from a SMB share: ``` smbclient //<IP>/<SHARE> -c "prompt OFF; mget *" -N ```

You may find more than one set of credentials during SMB enumeration, but not every account is equally useful for direct shell access. Think about credential reuse between network shares and local users. A service account can sometimes be a better pivot than an apparent administrator account.