Re: Wai Tuck's GSOC status report #13 of 17
Athanasios Manolis <[email protected]>
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <CAM=22vhWzWZSJ9i8ft2AbzA-=kDgskq0EpHf634Bw592aDmYZQ@mail.gmail.com> |
Στις 8 Αυγ 2017 08:45, ο χρήστης "Wong Wai Tuck" <[email protected]> έγραψε: > Was working on SMBloris this week, and it turns out to be much more > difficult to reliably implement than expected... > > Accomplishments > - Made pull request for exploit.lua [1] > - Read through marcan's implementation of smbloris [2] and attempted to > implement smbloris with raw tcp packets - stopped when I saw zerosum0x0 > publish his version of the script [3] > - Read through zerosum0x0's original implementation of smbloris and > reimplemented it in NSE, but I do not get the same reliable results (I can > only get ~700mb - 3Gb utilized, depending on the level of max-parallelism) > despite the same code - I believe this has to do with how NSE handles > threads and may think of a way to work around that soon! > > Priorities > - Make pwdprofiling library > - Finish smbloris script > > [1]: https://github.com/nmap/nmap/pull/960 > [2]: https://gist.github.com/marcan/6a2d14b0e3eaa5de1795a763fb58641e > [3]: https://github.com/rapid7/metasploit-framework/pull/8796 > > Wai Tuck > > _______________________________________________ > Sent through the dev mailing list > https://nmap.org/mailman/listinfo/dev > Archived at http://seclists.org/nmap-dev/ > _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/