I recently did a CTF involving a file on a samba share which had a password in an alternate data stream. To read it I had to connect using Windows, but I'm curious if there's any way to read ADS from linux, either using SMBclient or another tool.
Linux – Read alternate data streams over SMB with Linux
alternate-data-streamlinuxsambawindows
Related Question
- Linux – Mount Windows CIFS Share with smbclient
- How to configure Samba to share (read/write) any folder with root permissions
- Linux – Connecting with SMBCLIENT to Windows 7 produces error: “protocol negotiation failed: ERRDOS:ERRnomem”
- Windows – Alternate Data Stream “Win32App_1” attached to a large number of folders
Best Answer
Found a way to do this without mounting the drive.
smbclient -U USER //IP/Share -c 'allinfo "ADS_FILE"'
followed byget "ADS_FILE:PASSWORD:$DATA"
downloads the file.