Skip to content

feature: add smb_brute command #1070

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Conversation

NtAlexio2
Copy link
Contributor

@NtAlexio2 NtAlexio2 commented May 9, 2025

Proposed change

This PR adds a new module to bruteforce credentials on SMB protocol. It uses Impacket library as core.
sample output:

(nettacker-py3.11) root@2cffc506e9ef:/usr/src/owaspnettacker# python nettacker.py -m smb_brute -i 172.16.5.41 -d
   ______          __      _____ _____
  / __ \ \        / /\    / ____|  __ \
 | |  | \ \  /\  / /  \  | (___ | |__) |
 | |  | |\ \/  \/ / /\ \  \___ \|  ___/
 | |__| | \  /\  / ____ \ ____) | |     Version 0.4.0
  \____/   \/  \/_/    \_\_____/|_|     QUIN
                          _   _      _   _             _
                         | \ | |    | | | |           | |
  github.com/OWASP       |  \| | ___| |_| |_ __ _  ___| | _____ _ __
  owasp.org              | . ` |/ _ \ __| __/ _` |/ __| |/ / _ \ '__|
  z3r0d4y.com            | |\  |  __/ |_| || (_| | (__|   <  __/ |
                         |_| \_|\___|\__|\__\__,_|\___|_|\_\___|_|

[2025-05-08 14:12:24][+] Nettacker engine started ...
[2025-05-08 14:12:27][+] 113 modules loaded ...
[2025-05-08 14:12:31][+] ScanID: wbckqplowzykuvqctcbfxlcbdewbtmne
[2025-05-08 14:12:31][+] regrouping targets based on hardware resources!
[2025-05-08 14:12:31][+] Removing old database record for selected targets and modules.
[2025-05-08 14:12:31][+] imported 1 targets in 1 process(es).
[2025-05-08 14:12:33][+++] process-0|smb_brute|172.16.5.41|module-thread 1/1|request-thread 16/6018|host: 172.16.5.41 method: brute_force password: Password@123 port: 445 timeout: 3.0 username: administrator|
success_condition (s):
conditions: host: 172.16.5.41 password: Password@123 port: 445 username: administrator
[2025-05-08 14:13:25][+] building graph ...
[2025-05-08 14:13:25][+] finish building graph!
+----------------------------+-------------+-------------+------+----------+
|            date            |    target   | module_name | port |   logs   |
+============================+=============+=============+======+==========+
| 2025-05-08 14:12:33.511223 | 172.16.5.41 | smb_brute   | 445  | Detected |
+----------------------------+-------------+-------------+------+----------+

Software Details: OWASP Nettacker version 0.4.0 [QUIN] in 2025-05-08 14:13:26
[2025-05-08 14:13:26][+] report saved in /usr/src/owaspnettacker/.data/results/results_2025_05_08_14_12_24_shkurenwob.html and database
[2025-05-08 14:13:26][+] ScanID: wbckqplowzykuvqctcbfxlcbdewbtmne done!
(nettacker-py3.11) root@2cffc506e9ef:/usr/src/owaspnettacker#

Type of change

  • New core framework functionality
  • Bugfix (non-breaking change which fixes an issue)
  • Code refactoring without any functionality changes
  • New or existing module/payload change
  • Localization improvement
  • Dependency upgrade
  • Documentation improvement

Checklist

  • I've followed the contributing guidelines
  • I've run make pre-commit, it didn't generate any changes
  • I've run make test, all tests passed locally

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant