From fcf704558567d14ad305d7052173b6924426142f Mon Sep 17 00:00:00 2001 From: secf00tprint Date: Thu, 19 Nov 2020 22:57:34 +0100 Subject: [PATCH] add smb data exfiltration memo --- 2020_11_18_55th/smb_data_exfiltration_windows.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 2020_11_18_55th/smb_data_exfiltration_windows.md diff --git a/2020_11_18_55th/smb_data_exfiltration_windows.md b/2020_11_18_55th/smb_data_exfiltration_windows.md new file mode 100644 index 0000000..9fabd2f --- /dev/null +++ b/2020_11_18_55th/smb_data_exfiltration_windows.md @@ -0,0 +1,16 @@ +# Data exfiltration + +# SMB + +# Impacket + +https://github.com/SecureAuthCorp/impacket +https://www.openhub.net/p/SecureAuthCorp-impacket + +# Demo + +- Local User +- AD User + +# Switches SMB1 allowed / not allowd +- cmd -> optionalfeatures.exe -> SMB