SMBTransport instead of RPCTransport?

byt3bl33d3r / ItWasAllADream

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

778 stars 119 forks source link

Open derrickberg-dev opened 3 years ago

derrickberg-dev commented 3 years ago

Could we use encrypted SMBv3 traffic as a transport instead of RPC?

byt3bl33d3r commented 3 years ago

Wdym? What impacket calls SMBTransport is already being used for the MS-RPRN check (Does RPC over SMB named pipes).

The MS-PAR check on the other hand is "plain" RPC.