Wai Tuck's GSOC status report #13 of 17

Wong Wai Tuck <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CAP9R1M_ni0KvPkvuQThsEKUPbv5B1KNehBwtWBjac8q5cERhvQ@mail.gmail.com>
Was working on SMBloris this week, and it turns out to be much more
difficult to reliably implement than expected...

Accomplishments
- Made pull request for exploit.lua [1]
- Read through marcan's implementation of smbloris [2] and attempted to
implement smbloris with raw tcp packets - stopped when I saw zerosum0x0
publish his version of the script [3]
- Read through zerosum0x0's original implementation of smbloris and
reimplemented it in NSE, but I do not get the same reliable results (I can
only get ~700mb - 3Gb utilized, depending on the level of max-parallelism)
despite the same code - I believe this has to do with how NSE handles
threads and may think of a way to work around that soon!

Priorities
- Make pwdprofiling library
- Finish smbloris script

[1]: https://github.com/nmap/nmap/pull/960
[2]: https://gist.github.com/marcan/6a2d14b0e3eaa5de1795a763fb58641e
[3]: https://github.com/rapid7/metasploit-framework/pull/8796

Wai Tuck

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.