mirrors/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2025-07-16 06:12:34 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update smb2.go

Browse Source
This commit is contained in:
影舞者 2023-11-13 11:24:44 +08:00 committed by GitHub
parent dd1fc49f01
commit 29beca41d0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 66 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

87
Plugins/smb2.go
View File

@ -2,40 +2,39 @@ package Plugins
import ( import (
"fmt" "fmt"
"github.com/shadow1ng/fscan/common"
"net" "net"
"os" "os"
"strings" "strings"
"time" "time"
"github.com/shadow1ng/fscan/common"
"github.com/hirochachacha/go-smb2" "github.com/hirochachacha/go-smb2"
) )
func SmbScan2(info common.HostInfo, flags common.Flags) (tmperr error) { func SmbScan2(info *common.HostInfo) (tmperr error) {
if flags.IsBrute { if common.IsBrute {
return nil return nil
} }
hasprint := false hasprint := false
starttime := time.Now().Unix() starttime := time.Now().Unix()
hash := flags.HashBytes hash := common.HashBytes
for _, user := range common.Userdict["smb"] { for _, user := range common.Userdict["smb"] {
PASS: PASS:
for _, pass := range common.Passwords { for _, pass := range common.Passwords {
pass = strings.Replace(pass, "{user}", user, -1) pass = strings.Replace(pass, "{user}", user, -1)
flag, err, flag2 := Smb2Con(info, flags, user, pass, hash, hasprint) flag, err, flag2 := Smb2Con(info, user, pass, hash, hasprint)
if flag2 { if flag2 {
hasprint = true hasprint = true
} }
if flag { if flag == true {
var result string var result string
if flags.Domain != "" { if common.Domain != "" {
result = fmt.Sprintf("[+] SMB2:%v:%v:%v\\%v ", info.Host, info.Ports, flags.Domain, user) result = fmt.Sprintf("[+] SMB2 %v:%v:%v\\%v ", info.Host, info.Ports, common.Domain, user)
} else { } else {
result = fmt.Sprintf("[+] SMB2:%v:%v:%v ", info.Host, info.Ports, user) result = fmt.Sprintf("[+] SMB2 %v:%v:%v ", info.Host, info.Ports, user)
} }
if len(hash) > 0 { if len(hash) > 0 {
result += "hash: " + flags.Hash result += "hash: " + common.Hash
} else { } else {
result += pass result += pass
} }
@ -43,8 +42,8 @@ func SmbScan2(info common.HostInfo, flags common.Flags) (tmperr error) {
return err return err
} else { } else {
var errlog string var errlog string
if len(flags.Hash) > 0 { if len(common.Hash) > 0 {
errlog = fmt.Sprintf("[-] smb2 %v:%v %v %v %v", info.Host, 445, user, flags.Hash, err) errlog = fmt.Sprintf("[-] smb2 %v:%v %v %v %v", info.Host, 445, user, common.Hash, err)
} else { } else {
errlog = fmt.Sprintf("[-] smb2 %v:%v %v %v %v", info.Host, 445, user, pass, err) errlog = fmt.Sprintf("[-] smb2 %v:%v %v %v %v", info.Host, 445, user, pass, err)
} }
@ -54,11 +53,11 @@ func SmbScan2(info common.HostInfo, flags common.Flags) (tmperr error) {
if common.CheckErrs(err) { if common.CheckErrs(err) {
return err return err
} }
if time.Now().Unix()-starttime > (int64(len(common.Userdict["smb"])*len(common.Passwords)) * flags.Timeout) { if time.Now().Unix()-starttime > (int64(len(common.Userdict["smb"])*len(common.Passwords)) * common.Timeout) {
return err return err
} }
} }
if len(flags.Hash) > 0 { if len(common.Hash) > 0 {
break PASS break PASS
} }
} }
@ -66,8 +65,8 @@ func SmbScan2(info common.HostInfo, flags common.Flags) (tmperr error) {
return tmperr return tmperr
} }
func Smb2Con(info common.HostInfo, flags common.Flags, user string, pass string, hash []byte, hasprint bool) (flag bool, err error, flag2 bool) { func Smb2Con(info *common.HostInfo, user string, pass string, hash []byte, hasprint bool) (flag bool, err error, flag2 bool) {
conn, err := net.DialTimeout("tcp", info.Host+":445", time.Duration(flags.Timeout)*time.Second) conn, err := net.DialTimeout("tcp", info.Host+":445", time.Duration(common.Timeout)*time.Second)
defer func() { defer func() {
if conn != nil { if conn != nil {
conn.Close() conn.Close()
@ -78,7 +77,7 @@ func Smb2Con(info common.HostInfo, flags common.Flags, user string, pass string,
} }
initiator := smb2.NTLMInitiator{ initiator := smb2.NTLMInitiator{
User: user, User: user,
Domain: flags.Domain, Domain: common.Domain,
} }
if len(hash) > 0 { if len(hash) > 0 {
initiator.Hash = hash initiator.Hash = hash
@ -100,13 +99,13 @@ func Smb2Con(info common.HostInfo, flags common.Flags, user string, pass string,
} }
if !hasprint { if !hasprint {
var result string var result string
if flags.Domain != "" { if common.Domain != "" {
result = fmt.Sprintf("[*] SMB2-shares:%v:%v:%v\\%v ", info.Host, info.Ports, flags.Domain, user) result = fmt.Sprintf("[*] SMB2-shares:%v:%v:%v\\%v ", info.Host, info.Ports, common.Domain, user)
} else { } else {
result = fmt.Sprintf("[*] SMB2-shares:%v:%v:%v ", info.Host, info.Ports, user) result = fmt.Sprintf("[*] SMB2-shares:%v:%v:%v ", info.Host, info.Ports, user)
} }
if len(hash) > 0 { if len(hash) > 0 {
result += "hash: " + flags.Hash result += "hash: " + common.Hash
} else { } else {
result += pass result += pass
} }
@ -127,5 +126,51 @@ func Smb2Con(info common.HostInfo, flags common.Flags, user string, pass string,
defer f.Close() defer f.Close()
flag = true flag = true
return return
//bs, err := ioutil.ReadAll(f)
//if err != nil {
// return
//}
//fmt.Println(string(bs))
//return
} }
//if info.Path == ""{
//}
//path = info.Path
//f, err := fs.OpenFile(path, os.O_RDONLY, 0666)
//if err != nil {
// return
//}
//flag = true
//_, err = f.Seek(0, io.SeekStart)
//if err != nil {
// return
//}
//bs, err := ioutil.ReadAll(f)
//if err != nil {
// return
//}
//fmt.Println(string(bs))
//return
//f, err := fs.Create(`Users\Public\Videos\hello.txt`)
//if err != nil {
// return
//}
//flag = true
//
//_, err = f.Write([]byte("Hello world!"))
//if err != nil {
// return
//}
//
//_, err = f.Seek(0, io.SeekStart)
//if err != nil {
// return
//}
//bs, err := ioutil.ReadAll(f)
//if err != nil {
// return
//}
//fmt.Println(string(bs))
//return