Questions tagged [smb]
The smb tag has no usage guidance.
63 questions
1
vote
3
answers
1k
views
What do emails have to do with the spread of WannaCrypt?
After the recent spread of WannaCrypt, there has been a lot of warnings about the dangers of emails and clicking on links in them.
But the malware is spreading as a worm using SMB to infect other ...
- 977
2
votes
0
answers
771
views
Restrict SMBv1 on LAN while supporting v2/3
I have a network with several servers and I've disabled SMBv1 on every server except one because an office printer/scanner is used to scan documents to a shared folder over SMB. The printer is only ...
- 121
4
votes
1
answer
1k
views
How to check if Windows computer has SMB accessible over the internet?
The currently spreading ransomware WannaCry exploits SMB vulnerabilities to infect new computer.
Is this exploitation possible over the internet?
How to check if my computer has SMB accessible ...
- 143
2
votes
0
answers
3k
views
Unknown device in home network
I have a home network that is behind NAT. My router IP address is 192.168.0.1 and DHCP is configured to provide addresses from the 192.168.0.1/24 range.
My desktop is connected trough the ethernet ...
- 381
5
votes
4
answers
27k
views
Find SMBv1 status with Nmap
Is there a ready way with nmap's scripting option to find machines with SMB 1 still enabled server side? It'd be a whole lot faster for me to monitor my remediation if it is available.
I'd rather ...
- 3,792
9
votes
3
answers
16k
views
Is it risky to allow SMB traffic to the Internet
SMB is a well-known network file sharing protocol, and I assume it's supposed to be used internally only. At my company I found someone connecting to a share on a server on the Internet over port 445 ...
- 103
1
vote
1
answer
891
views
penetration testing: NBNS response on different network
I have a (test) setup where I want to respond to NBNS broadcasts. The clients sending out the broadcasts are on a different network. I can sniff the traffic using a pivot host on this network. So far ...
- 125
6
votes
1
answer
779
views
MS08-067.c fails at WNetAddConnection2()
I'm working with some exploit code for the MS08-067 vulnerability from ExploitDB.
The section:
WNetAddConnection2(&nr, "", "", 0)* fails with an error of 67 (ERROR_BAD_NET_NAME), but I don't ...
2
votes
1
answer
3k
views
How SMB signing works? [closed]
SMB signing is used to prevent illegitimate modification on SMB packets. It is also used to prevent attacks like SMB relay.
There is not much documentation on SMB signing. The only thing I understand ...
- 737
1
vote
1
answer
2k
views
Responder mitigation
The Responder tool can grab the netntlm hashes of clients on a Microsoft AD network by either using LLMNR to answer queries "accidentally" made by clients by responding as otherwise nonexistent SMB ...
- 34.4k
0
votes
1
answer
334
views
How to identify which SMB host can communicate one another? [closed]
I would like to know which hosts (on a local network) can communicate with one another.
That is to say: who is the server? who can communicates with him? Is it all the hosts with ports 139 and 445 ...
- 161
2
votes
1
answer
9k
views
Responder SMBv2 and cracking
So, doing some testing after seeing a Responder tweet where SMBv2 is supported (https://twitter.com/PythonResponder/status/774236707847704576) and testing a scenario with Windows 7 SMB lookup for an ...
- 121
1
vote
3
answers
836
views
Why am I unable to capture LM & LMHASH?
I'm running a simple test of Metasploit's auxiliary/server/capture/smb.
It works, but both LMHASH & LM are empty
[*] SMB Captured - 2016-09-27 16:49:31 +0800
NTLMv2 Response Captured from 172.16....
- 2,097