mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-18 16:45:28 +00:00
2153cc6055
* switch dependency to projectdiscovery/go-smb2 + handle panics * bump projectdiscovery/go-smb2 * disable interactsh integration test
103 lines
2.8 KiB
Go
103 lines
2.8 KiB
Go
package smb
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/praetorian-inc/fingerprintx/pkg/plugins"
|
|
"github.com/projectdiscovery/go-smb2"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/protocols/common/protocolstate"
|
|
"github.com/zmap/zgrab2/lib/smb/smb"
|
|
)
|
|
|
|
// SMBClient is a client for SMB servers.
|
|
//
|
|
// Internally client uses github.com/zmap/zgrab2/lib/smb/smb driver.
|
|
// github.com/projectdiscovery/go-smb2 driver
|
|
type SMBClient struct{}
|
|
|
|
// ConnectSMBInfoMode tries to connect to provided host and port
|
|
// and discovery SMB information
|
|
//
|
|
// Returns handshake log and error. If error is not nil,
|
|
// state will be false
|
|
func (c *SMBClient) ConnectSMBInfoMode(host string, port int) (*smb.SMBLog, error) {
|
|
if !protocolstate.IsHostAllowed(host) {
|
|
// host is not valid according to network policy
|
|
return nil, protocolstate.ErrHostDenied.Msgf(host)
|
|
}
|
|
conn, err := protocolstate.Dialer.Dial(context.TODO(), "tcp", fmt.Sprintf("%s:%d", host, port))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
// try to get SMBv2/v3 info
|
|
result, err := c.getSMBInfo(conn, true, false)
|
|
_ = conn.Close() // close regardless of error
|
|
if err == nil {
|
|
return result, nil
|
|
}
|
|
|
|
// try to negotiate SMBv1
|
|
conn, err = protocolstate.Dialer.Dial(context.TODO(), "tcp", fmt.Sprintf("%s:%d", host, port))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer conn.Close()
|
|
result, err = c.getSMBInfo(conn, true, true)
|
|
if err != nil {
|
|
return result, nil
|
|
}
|
|
return result, nil
|
|
}
|
|
|
|
// ListSMBv2Metadata tries to connect to provided host and port
|
|
// and list SMBv2 metadata.
|
|
//
|
|
// Returns metadata and error. If error is not nil,
|
|
// state will be false
|
|
func (c *SMBClient) ListSMBv2Metadata(host string, port int) (*plugins.ServiceSMB, error) {
|
|
if !protocolstate.IsHostAllowed(host) {
|
|
// host is not valid according to network policy
|
|
return nil, protocolstate.ErrHostDenied.Msgf(host)
|
|
}
|
|
return collectSMBv2Metadata(host, port, 5*time.Second)
|
|
}
|
|
|
|
// ListShares tries to connect to provided host and port
|
|
// and list shares by using given credentials.
|
|
//
|
|
// Credentials cannot be blank. guest or anonymous credentials
|
|
// can be used by providing empty password.
|
|
func (c *SMBClient) ListShares(host string, port int, user, password string) ([]string, error) {
|
|
if !protocolstate.IsHostAllowed(host) {
|
|
// host is not valid according to network policy
|
|
return nil, protocolstate.ErrHostDenied.Msgf(host)
|
|
}
|
|
conn, err := protocolstate.Dialer.Dial(context.TODO(), "tcp", fmt.Sprintf("%s:%d", host, port))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer conn.Close()
|
|
|
|
d := &smb2.Dialer{
|
|
Initiator: &smb2.NTLMInitiator{
|
|
User: user,
|
|
Password: password,
|
|
},
|
|
}
|
|
s, err := d.Dial(conn)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer func() {
|
|
_ = s.Logoff()
|
|
}()
|
|
|
|
names, err := s.ListSharenames()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return names, nil
|
|
}
|