proto-smb

Perform read-only SMB protocol security reviews for version exposure and vulnerabilities.

Updated Jul 30, 2026
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-smb
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: proto-smb
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/proto-smb
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-smb

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the risk of unmanaged SMB exposure by providing a structured, read-only assessment of protocol configurations, share permissions, and known vulnerabilities without resorting to destructive exploitation.

Core Features & Use Cases

  • Protocol Hardening Review: Identifies insecure SMB versions (SMBv1), missing signing requirements, and null-session exposure.
  • Vulnerability Detection: Safely detects presence of critical flaws like EternalBlue and SMBGhost through non-intrusive fingerprinting.
  • Use Case: A security engineer needs to audit a segment of the network for SMBv1 usage and null-session vulnerabilities before a compliance deadline, ensuring no sensitive data is accessed or modified during the process.

Quick Start

Use the proto-smb skill to perform a read-only security posture review of the target host at 192.168.1.50 including version fingerprinting and vulnerability detection.

Frequently Asked Questions about proto-smb

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a read-only SMB security audit without risking network disruption?▼

You can perform a safe, authorized SMB security audit using non-intrusive fingerprinting to check protocol configurations and detect vulnerabilities like EternalBlue without destructive exploitation.

Can I detect SMBv1 and null-session exposure safely during a network hardening review?▼

Yes, you can identify insecure SMB versions like SMBv1 and null-session exposure through structured, read-only configuration assessments designed specifically for safe network hardening workflows.

What is the best way to check for EternalBlue and SMBGhost vulnerabilities safely?▼

The best way to check for critical SMB flaws like EternalBlue and SMBGhost is through non-intrusive fingerprinting, which detects their presence without executing actual exploits.

Does this approach require destructive exploitation to identify known SMB vulnerabilities?▼

No, this approach strictly avoids destructive exploitation by using read-only vulnerability management methodologies and predefined safety gates to assess known SMB protocol flaws.

How do I verify SMB signing posture and version exposure for a compliance audit?▼

You can verify SMB signing posture and version exposure by running a structured, read-only protocol security review that fingerprints the target host and checks authorization gates.