Re: Wai Tuck's GSOC status report #13 of 17

Athanasios Manolis <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CAM=22vhWzWZSJ9i8ft2AbzA-=kDgskq0EpHf634Bw592aDmYZQ@mail.gmail.com>
Στις 8 Αυγ 2017 08:45, ο χρήστης "Wong Wai Tuck" <[email protected]>
έγραψε:

> Was working on SMBloris this week, and it turns out to be much more
> difficult to reliably implement than expected...
>
> Accomplishments
> - Made pull request for exploit.lua [1]
> - Read through marcan's implementation of smbloris [2] and attempted to
> implement smbloris with raw tcp packets - stopped when I saw zerosum0x0
> publish his version of the script [3]
> - Read through zerosum0x0's original implementation of smbloris and
> reimplemented it in NSE, but I do not get the same reliable results (I can
> only get ~700mb - 3Gb utilized, depending on the level of max-parallelism)
> despite the same code - I believe this has to do with how NSE handles
> threads and may think of a way to work around that soon!
>
> Priorities
> - Make pwdprofiling library
> - Finish smbloris script
>
> [1]: https://github.com/nmap/nmap/pull/960
> [2]: https://gist.github.com/marcan/6a2d14b0e3eaa5de1795a763fb58641e
> [3]: https://github.com/rapid7/metasploit-framework/pull/8796
>
> Wai Tuck
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
>

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.