[Smbexec v2.0] A rapid tool based on psexec style attack with samba tools
A rapid tool based on psexec style attack with samba tools.
Key features
- Enumerate systems with domain admin logged in
- Grab hashes
- Extract cached creds (based on cachedump)
- Remote Login Validation
- Dump cleartext credentials
- Pop shells
Includes
- smbexec.sh
- installer.sh
- patches to compile binaries
- source for samba-3.6.9 and winexe-1.00
Credit where credit is due:
- wce.exe – Hernan Ochoa – An incredible tool that mimikatz CANNOT touch! – http://www.ampliasecurity.com
- smbclient & winexe Hash Passing patch – JoMo-kun -> http://www.foofus.net/~jmk/passhash.html – Patch updated for Samba 3.6.12 by exfil (Emilio Escobar)
- vanish.sh – Original concept Astr0baby stable version edits Vanish3r -> http://www.securitylabs.in/2011/12/easy-bypass-av-and-firewall.html
- www.samba.org
- winexe – ahajda -> http://sourceforge.net/users/ahajda
- Metasploit – www.metasploit.com (Thank you HD and team!)
- Nmap – nmap.org (Thank you Fydor!)
- Creddump – Brendan Dolan-Gavitt – http://code.google.com/p/creddump/
- NTDSXtract – Csaba Barta – http://www.ntdsxtract.com/
- libesedb – Joachim Metz – http://libesedb.googlecode.com/
[Smbexec v2.0] A rapid tool based on psexec style attack with samba tools
![[Smbexec v2.0] A rapid tool based on psexec style attack with samba tools](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6RiuG0ZMP2NUdUkdPVT_GHk5AyqiBwVgDpmRtZt2IMmD6P8zDYEFW8hG-KM9DGz9Er4k9OI0xrZubQmiEyR737QosarVglVCLvtXoX0EmxiKc-Y4qLYI5YAsrZ5WRdDpcAm_D-gZnOUE/s72-c/samba_logo.png)
Reviewed by Zion3R
on
6:50 PM
Rating:
Reviewed by Zion3R
on
6:50 PM
Rating:
