SMB Signing question

• Responder

  5 3,498 0.0 Python

  Discontinued Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. (by SpiderLabs)

  

Also I kind of don't understand the distinction between victim and server in your post. But the basic idea for it is that first we get the remote machine to access arbitrary locations. We start "responder". Then ask the remote machine to access our machine. Responder gives us the authentication challenge as a hash. John the ripper was used to crack the hash. (You might use a supplied word list for John, some sort of lookup or something here if you are in class). Now you have the credentials to access it directly.

• impacket

  25 12,694 8.2 Python

  Impacket is a collection of Python classes for working with network protocols.

  

https://github.com/fortra/impacket/blob/master/examples/ntlmrelayx.py. (see the docs at the top of the program)

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project