Merge pull request #109 from T1erno/fix-smb-session-port

Use session port for SMB exec methods

Author: Hackndo

lsassy/exec/smb.py

@@ -88,7 +88,7 @@ def exec(self, command):
             stringbinding = r"ncacn_np:%s[\pipe\svcctl]" % self.session.address
             lsassy_logger.debug("StringBinding %s" % stringbinding)
             self._rpctransport = transport.DCERPCTransportFactory(stringbinding)
-            self._rpctransport.set_dport(445)
+            self._rpctransport.set_dport(self.session.port)
             self._rpctransport.setRemoteHost(self.session.address)
             if hasattr(self._rpctransport, "set_credentials"):
                 # This method exists only for selected protocol sequences.

lsassy/exec/smb_stealth.py

@@ -121,7 +121,7 @@ def exec(self, command):
             stringbinding = r"ncacn_np:%s[\pipe\svcctl]" % self.session.address
             lsassy_logger.debug("StringBinding %s" % stringbinding)
             self._rpctransport = transport.DCERPCTransportFactory(stringbinding)
-            self._rpctransport.set_dport(445)
+            self._rpctransport.set_dport(self.session.port)
             self._rpctransport.setRemoteHost(self.session.address)
             if hasattr(self._rpctransport, "set_credentials"):
                 # This method exists only for selected protocol sequences.