Download Recurisvely from smbclient

smb: \\> prompt
smb: \\> recurse
smb: \\> mget *

Bruteforce creds

crackmapexec smb IP -u users.txt(user) -p passwords.txt(password)

Enumerate SMB users via nmap

nmap -p 445 -script=smb-enum-users 10.1.1.68

Sometimes wireshark can be useful to find SMB Version (old ones)

Mount share

mount -t cifs //10.10.10.134/backups /mnt -o user=,password=