Smbexec v2.0 released (rubified version)
A rapid tool based on psexec style attack with samba tools.
Key features
- Enumerate systems with domain admin logged in
- Grab hashes
- Extract cached creds (based on cachedump)
- Remote Login Validation
- Dump cleartext credentials
- Pop shells
Includes
- smbexec.sh
- installer.sh
- patches to compile binaries
- source for samba-3.6.9 and winexe-1.00
Credit where credit is due:
- wce.exe – Hernan Ochoa – An incredible tool that mimikatz CANNOT touch! – http://www.ampliasecurity.com
- smbclient & winexe Hash Passing patch – JoMo-kun -> http://www.foofus.net/~jmk/passhash.html – Patch updated for Samba 3.6.12 by exfil (Emilio Escobar)
- vanish.sh – Original concept Astr0baby stable version edits Vanish3r -> http://www.securitylabs.in/2011/12/easy-bypass-av-and-firewall.html
- www.samba.org
- winexe – ahajda -> http://sourceforge.net/users/ahajda
- Metasploit – www.metasploit.com (Thank you HD and team!)
- Nmap – nmap.org (Thank you Fydor!)
- Creddump – Brendan Dolan-Gavitt – http://code.google.com/p/creddump/
- NTDSXtract – Csaba Barta – http://www.ntdsxtract.com/
- libesedb – Joachim Metz – http://libesedb.googlecode.com/
About the Author
NJ Ouchn "Passion is needed for any great work, and for the revolution, passion and audacity are required in big doses"
Related Posts
Habu v0.0.45 – Python Network Hacking Toolkit →
The Social-Engineer Toolkit (SET) v7.7 “Blackout” Released →
Belati v.0.2.2-dev – swiss army knife for OSINT →
