---
id: 8206
title: "10 Places to Stick Your UNC Path"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/10-places-to-stick-your-unc-path/"
published_at: "2015-07-22T00:00:00Z"
tags: ["pentesting", "smb", "xxe", "unc-path", "credential-harvesting", "hash-capture"]
phying_url: "https://phying.com/item/8206"
lang: en
---

# 10 Places to Stick Your UNC Path

## Summary

Catalogs ten injection points for UNC paths that force SMB authentication back to an attacker, including XXE, broken IMG tags, traversals, database queries, and SharePoint.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2015-07-22T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/10-places-to-stick-your-unc-path/
- **Phying News:** https://phying.com/item/8206