github/Responder
1
0
Fork 0
mirror of https://github.com/lgandx/Responder.git synced 2025-07-13 16:43:04 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Several Bugfix

Browse source
This commit is contained in:
lgandx 2017-09-04 18:50:04 -03:00
parent ffca0e2a92
commit 75aa21bbb9
1 changed files with 18 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

39
servers/MSSQL.py
View file

@ -120,35 +120,32 @@ def ParseClearTextSQLPass(data, client):
# MSSQL Server class # MSSQL Server class
class MSSQL(BaseRequestHandler): class MSSQL(BaseRequestHandler):
def handle(self): def handle(self):
if settings.Config.Verbose:
print text("[MSSQL] Received connection from %s" % self.client_address[0])
try: try:
while True: data = self.request.recv(1024)
data = self.request.recv(1024) if settings.Config.Verbose:
self.request.settimeout(0.1) print text("[MSSQL] Received connection from %s" % self.client_address[0])
Challenge = RandomChallenge()
if data[0] == "\x12": # Pre-Login Message if data[0] == "\x12": # Pre-Login Message
Buffer = str(MSSQLPreLoginAnswer()) Buffer = str(MSSQLPreLoginAnswer())
self.request.send(Buffer)
data = self.request.recv(1024)
if data[0] == "\x10": # NegoSSP
if re.search("NTLMSSP",data):
Challenge = RandomChallenge()
Packet = MSSQLNTLMChallengeAnswer(ServerChallenge=Challenge)
Packet.calculate()
Buffer = str(Packet)
self.request.send(Buffer) self.request.send(Buffer)
data = self.request.recv(1024) data = self.request.recv(1024)
else:
ParseClearTextSQLPass(data,self.client_address[0])
if data[0] == "\x10": # NegoSSP if data[0] == "\x11": # NegoSSP Auth
if re.search("NTLMSSP",data): ParseSQLHash(data,self.client_address[0],Challenge)
Packet = MSSQLNTLMChallengeAnswer(ServerChallenge=Challenge)
Packet.calculate()
Buffer = str(Packet)
self.request.send(Buffer)
data = self.request.recv(1024)
else:
ParseClearTextSQLPass(data,self.client_address[0])
if data[0] == "\x11": # NegoSSP Auth
ParseSQLHash(data,self.client_address[0])
except: except:
self.request.close()
pass pass
# MSSQL Server Browser class # MSSQL Server Browser class