search

cldrn / nmap-nse-scripts

My collection of nmap NSE scripts
http://calderonpale.com
954 stars 370 forks source link

smb-vuln-ms17-010: Could not connect to 'IPC$' #8

Closed TheSidd closed 7 years ago

TheSidd commented 7 years ago

Getting an error when I run it on vulnerable windows machine, I'm sure it is live cause I'm able to ping it.

Can you tell what I am missing here?

image

aaomidi commented 7 years ago

Run it with -d to see debug output.

TheSidd commented 7 years ago

I tried my best in hiding critical information

capture

capture1

aaomidi commented 7 years ago

The guest account is disabled, this script won't be able to check your SMB server.

There is a pull request that allows you to specify credentials.

robsoncloud commented 7 years ago

all my servers has the guest account disabled and in some worked and anothers didn't.

darkjames78 commented 7 years ago

How do i incorporate this pull request for the credentials ?

cldrn commented 7 years ago

Try the latest version of the script and smb library I posted a couple of days ago and read the notes here: https://github.com/cldrn/nmap-nse-scripts/wiki/Notes-about-smb-vuln-ms17-010

aaomidi commented 7 years ago

I know this is unrelated, but it might interest people who are here.

https://www.samba.org/samba/security/CVE-2017-7494.html

There is a security vulnerability in samba, you could be potentially using it.