github/Responder
1
0
Fork 0
mirror of https://github.com/lgandx/Responder.git synced 2025-07-13 00:23:05 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

added smb filetime support

Browse source
This commit is contained in:
lgandx 2021-02-08 22:18:41 -03:00
parent 4bddf50b5c
commit b0f044fe4e
3 changed files with 20 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

18
packets.py
View file

@ -18,10 +18,10 @@
import struct import struct
import settings import settings
import codecs import codecs
from os import urandom
from base64 import b64decode, b64encode from base64 import b64decode, b64encode
from odict import OrderedDict from odict import OrderedDict
from utils import HTTPCurrentDate, RespondWithIPAton, StructPython2or3, NetworkRecvBufferPython2or3, StructWithLenPython2or3 from utils import HTTPCurrentDate, SMBTime, RespondWithIPAton, StructPython2or3, NetworkRecvBufferPython2or3, StructWithLenPython2or3
# Packet class handling all packet generation (see odict.py). # Packet class handling all packet generation (see odict.py).
class Packet(): class Packet():
@ -980,7 +980,7 @@ class SMBNegoAnsLM(Packet):
("Maxrawbuff", "\x00\x00\x01\x00"), ("Maxrawbuff", "\x00\x00\x01\x00"),
("Sessionkey", "\x00\x00\x00\x00"), ("Sessionkey", "\x00\x00\x00\x00"),
("Capabilities", "\xfc\x3e\x01\x00"), ("Capabilities", "\xfc\x3e\x01\x00"),
("Systemtime", "\x84\xd6\xfb\xa3\x01\x35\xcd\x01"), ("Systemtime", SMBTime()),
("Srvtimezone", "\x2c\x01"), ("Srvtimezone", "\x2c\x01"),
("Keylength", "\x08"), ("Keylength", "\x08"),
("Bcc", "\x10\x00"), ("Bcc", "\x10\x00"),
@ -1009,11 +1009,11 @@ class SMBNegoAns(Packet):
("MaxRawBuff", "\x00\x00\x01\x00"), ("MaxRawBuff", "\x00\x00\x01\x00"),
("SessionKey", "\x00\x00\x00\x00"), ("SessionKey", "\x00\x00\x00\x00"),
("Capabilities", "\xfd\xf3\x01\x80"), ("Capabilities", "\xfd\xf3\x01\x80"),
("SystemTime", "\x84\xd6\xfb\xa3\x01\x35\xcd\x01"), ("SystemTime", SMBTime()),
("SrvTimeZone", "\xf0\x00"), ("SrvTimeZone", "\xf0\x00"),
("KeyLen", "\x00"), ("KeyLen", "\x00"),
("Bcc", "\x57\x00"), ("Bcc", "\x57\x00"),
("Guid", "\xc8\x27\x3d\xfb\xd4\x18\x55\x4f\xb2\x40\xaf\xd7\x61\x73\x75\x3b"), ("Guid", urandom(16).decode('latin-1')),
("InitContextTokenASNId", "\x60"), ("InitContextTokenASNId", "\x60"),
("InitContextTokenASNLen", "\x5b"), ("InitContextTokenASNLen", "\x5b"),
("ThisMechASNId", "\x06"), ("ThisMechASNId", "\x06"),
@ -1076,7 +1076,7 @@ class SMBNegoKerbAns(Packet):
("SrvTimeZone", "\xf0\x00"), ("SrvTimeZone", "\xf0\x00"),
("KeyLen", "\x00"), ("KeyLen", "\x00"),
("Bcc", "\x57\x00"), ("Bcc", "\x57\x00"),
("Guid", "\xc8\x27\x3d\xfb\xd4\x18\x55\x4f\xb2\x40\xaf\xd7\x61\x73\x75\x3b"), ("Guid", urandom(16).decode('latin-1')),
("InitContextTokenASNId", "\x60"), ("InitContextTokenASNId", "\x60"),
("InitContextTokenASNLen", "\x5b"), ("InitContextTokenASNLen", "\x5b"),
("ThisMechASNId", "\x06"), ("ThisMechASNId", "\x06"),
@ -1377,8 +1377,8 @@ class SMB2NegoAns(Packet):
("MaxTransSize", "\x00\x00\x10\x00"), ("MaxTransSize", "\x00\x00\x10\x00"),
("MaxReadSize", "\x00\x00\x10\x00"), ("MaxReadSize", "\x00\x00\x10\x00"),
("MaxWriteSize", "\x00\x00\x10\x00"), ("MaxWriteSize", "\x00\x00\x10\x00"),
("SystemTime", "\x27\xfb\xea\xd7\x50\x09\xd2\x01"), ("SystemTime", SMBTime()),
("BootTime", "\x22\xfb\x80\x01\x40\x09\xd2\x01"), ("BootTime", SMBTime()),
("SecBlobOffSet", "\x80\x00"), ("SecBlobOffSet", "\x80\x00"),
("SecBlobLen", "\x78\x00"), ("SecBlobLen", "\x78\x00"),
("Reserved2", "\x00\x00\x00\x00"), ("Reserved2", "\x00\x00\x00\x00"),
@ -1522,7 +1522,7 @@ class SMB2Session1Data(Packet):
("NTLMSSPNTLMChallengeAVPairs5UnicodeStr","SMB3.local"), ("NTLMSSPNTLMChallengeAVPairs5UnicodeStr","SMB3.local"),
("NTLMSSPNTLMChallengeAVPairs7Id","\x07\x00"), ("NTLMSSPNTLMChallengeAVPairs7Id","\x07\x00"),
("NTLMSSPNTLMChallengeAVPairs7Len","\x08\x00"), ("NTLMSSPNTLMChallengeAVPairs7Len","\x08\x00"),
("NTLMSSPNTLMChallengeAVPairs7UnicodeStr","\xc0\x65\x31\x50\xde\x09\xd2\x01"), ("NTLMSSPNTLMChallengeAVPairs7UnicodeStr",SMBTime()),
("NTLMSSPNTLMChallengeAVPairs6Id","\x00\x00"), ("NTLMSSPNTLMChallengeAVPairs6Id","\x00\x00"),
("NTLMSSPNTLMChallengeAVPairs6Len","\x00\x00"), ("NTLMSSPNTLMChallengeAVPairs6Len","\x00\x00"),
]) ])

2
settings.py
View file

@ -23,7 +23,7 @@ import subprocess
from utils import * from utils import *
__version__ = 'Responder 3.0.2.0' __version__ = 'Responder 3.0.3.0'
class Settings: class Settings:

10
utils.py
View file

@ -24,6 +24,7 @@ import settings
import datetime import datetime
import codecs import codecs
import struct import struct
from calendar import timegm
def RandomChallenge(): def RandomChallenge():
if settings.Config.PY2OR3 == "PY3": if settings.Config.PY2OR3 == "PY3":
@ -50,6 +51,15 @@ def RandomChallenge():
def HTTPCurrentDate(): def HTTPCurrentDate():
Date = datetime.datetime.utcnow().strftime('%a, %d %b %Y %H:%M:%S GMT') Date = datetime.datetime.utcnow().strftime('%a, %d %b %Y %H:%M:%S GMT')
return Date return Date
def SMBTime():
dt = datetime.datetime.now()
dt = dt.replace(tzinfo=None)
if settings.Config.PY2OR3 == "PY3":
return struct.pack("<Q",116444736000000000 + (timegm(dt.timetuple()) * 10000000)).decode('latin-1')
else:
return struct.pack("<Q",116444736000000000 + (timegm(dt.timetuple()) * 10000000))
try: try:
import sqlite3 import sqlite3
except: except: