Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/the-useless-one/pywerview/llms.txt

Use this file to discover all available pages before exploring further.

get-netshare connects to a target Windows host over SMB and enumerates all network shares exposed by that machine. Unlike most PywerView commands that query a domain controller, this command targets individual hosts directly, making local credentials a valid alternative to domain credentials. The output includes each share name and its associated remark, which is useful for quickly identifying sensitive or hidden shares on a target system during an internal penetration test.

Flags

--computername
string
required
IP address or hostname of the target Windows host to query for shares.
-w, --workgroup
string
Name of the domain to authenticate with. Can be omitted when using local credentials.
-u, --user
string
Username for authentication. Accepts both domain accounts (DOMAIN\user) and local accounts.
-p, --password
string
Password associated with the specified username.
--hashes
string
NTLM hashes for pass-the-hash authentication. Format: [LMHASH:]NTHASH. The LM portion can be omitted or replaced with the empty LM hash.
-k
boolean
Use Kerberos authentication. Reads credentials from the ccache file pointed to by KRB5CCNAME. Falls back to the provided username and password if no valid ticket is found.
-l, --logging-level
string
Logging verbosity sent to stderr. Choices: CRITICAL (default), WARNING, DEBUG, ULTRA.
--json
boolean
Print results as JSON instead of the default human-readable format.

Examples

# List shares on a host using domain credentials
pywerview get-netshare --computername 192.168.1.10 -u alice -p 'P@ssw0rd' -w contoso.com

# Using local credentials (no domain required)
pywerview get-netshare --computername 192.168.1.10 -u Administrator -p 'LocalP@ss'

# Pass-the-hash authentication
pywerview get-netshare --computername 192.168.1.10 -u alice --hashes :aad3b435b51404eeaad3b435b51404ee -w contoso.com

# JSON output
pywerview get-netshare --computername 192.168.1.10 -u alice -p 'P@ssw0rd' -w contoso.com --json

Build docs developers (and LLMs) love