Skip to content

Ruby SMB Client is incompatible with Msf::Exploit::Remote::SMB::RelayServer #19951

Open
@jheysel-r7

Description

@jheysel-r7

Metasploit's SMB::RelayServer is currently unable to successfully relay NTLM authentication which originates from the Ruby SMBClient. The relay server works without issue when the auth attempt is sent from a Windows host using the net use command.

Steps to reproduce

  • Use smb_relay (or any of Metasploit's modules which relay SMB authentication)
  • Set the RHOST value to a HTTP server
  • In a separate msfconsole window use smb_login
  • With valid credentials attempt to relay the authentication attempt from the smb_login through the smb_relay module and see that it fails.
  • On a windows with valid credentials attempt to relay the authentication attempt from the net use command through the smb_relay module and see that runs successfully.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

  • Status

    No status

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions