mirror of
https://github.com/fortra/impacket
synced 2026-06-08 14:15:13 +00:00
Davide Ornaghi
b6993a1e41
* Added flag to drop SSP from Net-NTLMv1 auth * Rebased with the latest version * Removed whitespaces * Removed duplicated code caused by merge --------- Co-authored-by: Davide Ornaghi <ornaghi@intre.it> Co-authored-by: alexisbalbachan <alexisbalbachan@gmail.com>
108 lines
4.4 KiB
Python
Executable File
108 lines
4.4 KiB
Python
Executable File
#!/usr/bin/env python
|
|
# Impacket - Collection of Python classes for working with network protocols.
|
|
#
|
|
# Copyright Fortra, LLC and its affiliated companies
|
|
#
|
|
# All rights reserved.
|
|
#
|
|
# This software is provided under a slightly modified version
|
|
# of the Apache Software License. See the accompanying LICENSE file
|
|
# for more information.
|
|
#
|
|
# Description:
|
|
# Simple SMB Server example.
|
|
#
|
|
# Author:
|
|
# Alberto Solino (@agsolino)
|
|
#
|
|
|
|
import sys
|
|
import argparse
|
|
import logging
|
|
|
|
from impacket.examples import logger
|
|
from impacket import smbserver, version
|
|
from impacket.ntlm import compute_lmhash, compute_nthash
|
|
|
|
if __name__ == '__main__':
|
|
|
|
# Init the example's logger theme
|
|
print(version.BANNER)
|
|
|
|
parser = argparse.ArgumentParser(add_help = True, description = "This script will launch a SMB Server and add a "
|
|
"share specified as an argument. Usually, you need to be root in order to bind to port 445. "
|
|
"For optional authentication, it is possible to specify username and password or the NTLM hash. "
|
|
"Example: smbserver.py -comment 'My share' TMP /tmp")
|
|
|
|
parser.add_argument('shareName', action='store', help='name of the share to add')
|
|
parser.add_argument('sharePath', action='store', help='path of the share to add')
|
|
parser.add_argument('-comment', action='store', help='share\'s comment to display when asked for shares')
|
|
parser.add_argument('-username', action="store", help='Username to authenticate clients')
|
|
parser.add_argument('-password', action="store", help='Password for the Username')
|
|
parser.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes for the Username, format is LMHASH:NTHASH')
|
|
parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
|
|
parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
|
|
parser.add_argument('-ip', '--interface-address', action='store', default='0.0.0.0', help='ip address of listening interface')
|
|
parser.add_argument('-port', action='store', default='445', help='TCP port for listening incoming connections (default 445)')
|
|
parser.add_argument('-dropssp', action='store_true', default=False, help='Disable NTLM ESS/SSP during negotiation')
|
|
parser.add_argument('-smb2support', action='store_true', default=False, help='SMB2 Support (experimental!)')
|
|
parser.add_argument('-outputfile', action='store', default=None, help='Output file to log smbserver output messages')
|
|
|
|
if len(sys.argv)==1:
|
|
parser.print_help()
|
|
sys.exit(1)
|
|
|
|
try:
|
|
options = parser.parse_args()
|
|
except Exception as e:
|
|
logging.critical(str(e))
|
|
sys.exit(1)
|
|
|
|
logger.init(options.ts, options.debug)
|
|
|
|
if options.comment is None:
|
|
comment = ''
|
|
else:
|
|
comment = options.comment
|
|
|
|
server = smbserver.SimpleSMBServer(listenAddress=options.interface_address, listenPort=int(options.port))
|
|
|
|
if options.outputfile:
|
|
logging.info('Switching output to file %s' % options.outputfile)
|
|
server.setLogFile(options.outputfile)
|
|
|
|
server.addShare(options.shareName.upper(), options.sharePath, comment)
|
|
server.setSMB2Support(options.smb2support)
|
|
server.setDropSSP(options.dropssp)
|
|
|
|
# If a user was specified, let's add it to the credentials for the SMBServer. If no user is specified, anonymous
|
|
# connections will be allowed
|
|
if options.username is not None:
|
|
# we either need a password or hashes, if not, ask
|
|
if options.password is None and options.hashes is None:
|
|
from getpass import getpass
|
|
password = getpass("Password:")
|
|
# Let's convert to hashes
|
|
lmhash = compute_lmhash(password)
|
|
nthash = compute_nthash(password)
|
|
elif options.password is not None:
|
|
lmhash = compute_lmhash(options.password)
|
|
nthash = compute_nthash(options.password)
|
|
else:
|
|
lmhash, nthash = options.hashes.split(':')
|
|
|
|
server.addCredential(options.username, 0, lmhash, nthash)
|
|
|
|
# Here you can set a custom SMB challenge in hex format
|
|
# If empty defaults to '4141414141414141'
|
|
# (remember: must be 16 hex bytes long)
|
|
# e.g. server.setSMBChallenge('12345678abcdef00')
|
|
server.setSMBChallenge('')
|
|
|
|
# Rock and roll
|
|
try:
|
|
server.start()
|
|
except KeyboardInterrupt:
|
|
print("\nInterrupted, exiting...")
|
|
sys.exit(130)
|