2023-09-16 16:02:17 +05:30
|
|
|
package smb
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"context"
|
|
|
|
|
"fmt"
|
|
|
|
|
"net"
|
|
|
|
|
"time"
|
|
|
|
|
|
|
|
|
|
"github.com/hirochachacha/go-smb2"
|
|
|
|
|
"github.com/praetorian-inc/fingerprintx/pkg/plugins"
|
2023-10-17 17:44:13 +05:30
|
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/protocols/common/protocolstate"
|
2023-09-16 16:02:17 +05:30
|
|
|
"github.com/zmap/zgrab2/lib/smb/smb"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
// SMBClient is a client for SMB servers.
|
|
|
|
|
//
|
|
|
|
|
// Internally client uses github.com/zmap/zgrab2/lib/smb/smb driver.
|
|
|
|
|
// github.com/hirochachacha/go-smb2 driver
|
|
|
|
|
type SMBClient struct{}
|
|
|
|
|
|
|
|
|
|
// ConnectSMBInfoMode tries to connect to provided host and port
|
|
|
|
|
// and discovery SMB information
|
|
|
|
|
//
|
|
|
|
|
// Returns handshake log and error. If error is not nil,
|
|
|
|
|
// state will be false
|
|
|
|
|
func (c *SMBClient) ConnectSMBInfoMode(host string, port int) (*smb.SMBLog, error) {
|
|
|
|
|
conn, err := protocolstate.Dialer.Dial(context.TODO(), "tcp", fmt.Sprintf("%s:%d", host, port))
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
defer conn.Close()
|
|
|
|
|
|
|
|
|
|
_ = conn.SetDeadline(time.Now().Add(10 * time.Second))
|
|
|
|
|
setupSession := true
|
|
|
|
|
|
|
|
|
|
result, err := smb.GetSMBLog(conn, setupSession, false, false)
|
|
|
|
|
if err != nil {
|
|
|
|
|
conn.Close()
|
|
|
|
|
conn, err = net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), 10*time.Second)
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
result, err = smb.GetSMBLog(conn, setupSession, true, false)
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
return result, nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// ListSMBv2Metadata tries to connect to provided host and port
|
|
|
|
|
// and list SMBv2 metadata.
|
|
|
|
|
//
|
|
|
|
|
// Returns metadata and error. If error is not nil,
|
|
|
|
|
// state will be false
|
|
|
|
|
func (c *SMBClient) ListSMBv2Metadata(host string, port int) (*plugins.ServiceSMB, error) {
|
|
|
|
|
if !protocolstate.IsHostAllowed(host) {
|
|
|
|
|
// host is not valid according to network policy
|
|
|
|
|
return nil, protocolstate.ErrHostDenied.Msgf(host)
|
|
|
|
|
}
|
|
|
|
|
return collectSMBv2Metadata(host, port, 5*time.Second)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// ListShares tries to connect to provided host and port
|
|
|
|
|
// and list shares by using given credentials.
|
|
|
|
|
//
|
|
|
|
|
// Credentials cannot be blank. guest or anonymous credentials
|
|
|
|
|
// can be used by providing empty password.
|
|
|
|
|
func (c *SMBClient) ListShares(host string, port int, user, password string) ([]string, error) {
|
|
|
|
|
conn, err := protocolstate.Dialer.Dial(context.TODO(), "tcp", fmt.Sprintf("%s:%d", host, port))
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
defer conn.Close()
|
|
|
|
|
|
|
|
|
|
d := &smb2.Dialer{
|
|
|
|
|
Initiator: &smb2.NTLMInitiator{
|
|
|
|
|
User: user,
|
|
|
|
|
Password: password,
|
|
|
|
|
},
|
|
|
|
|
}
|
|
|
|
|
s, err := d.Dial(conn)
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
defer func() {
|
|
|
|
|
_ = s.Logoff()
|
|
|
|
|
}()
|
|
|
|
|
|
|
|
|
|
names, err := s.ListSharenames()
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
return names, nil
|
|
|
|
|
}
|