SMB/Windows Admin Shares

Use valid local or domain accounts to access Windows administrative SMB shares such as C$ and ADMIN$ on a remote host for file operations and, with sufficient administrative and service-control rights, remote command execution. This can be performed from an Internet-connected host only when the target exposes SMB to that host (normally TCP 445); valid credentials and target permissions are still required.