Open
Description
Metasploit's SMB::RelayServer
is currently unable to successfully relay NTLM authentication which originates from the Ruby SMBClient. The relay server works without issue when the auth attempt is sent from a Windows host using the net use
command.
Steps to reproduce
- Use
smb_relay
(or any of Metasploit's modules which relay SMB authentication) - Set the RHOST value to a HTTP server
- In a separate msfconsole window use
smb_login
- With valid credentials attempt to relay the authentication attempt from the
smb_login
through thesmb_relay
module and see that it fails. - On a windows with valid credentials attempt to relay the authentication attempt from the
net use
command through thesmb_relay
module and see that runs successfully.
Metadata
Metadata
Assignees
Type
Projects
Status
No status