fortra / impacket

Impacket is a collection of Python classes for working with network protocols.
https://www.coresecurity.com
Other
13.52k stars 3.58k forks source link

[*] SMBD-Thread-7 (process_request_thread): Connection from MARVEL/FCASTLE@192.168.10.144 controlled, attacking target smb://192.168.10.254 [-] Authenticating against smb://192.168.10.254 as MARVEL/FCASTLE FAILED #1494

Closed ilyesmsk closed 1 year ago

ilyesmsk commented 1 year ago

Could someone help me to fix this issue i don't know what is the problem the smb is off also the http is off i did the scan and i got the adresss ip 5 6 7 8 1

4 2 3

0xdeaddood commented 1 year ago

Hi @ilyesmsk

From what I can see, you're entering the wrong credentials when you try to access the remote server via File explorer. Pleas check that. Closing.

ilyesmsk commented 1 year ago

Hi what i should do please help me

noobhacker1 commented 8 months ago

hey i have the same issue, you found the solution yet? thank you

ilyesmsk commented 8 months ago

No unfortunately

Le ven. 8 mars 2024, 17:00, noobhacker1 @.***> a écrit :

hey i have the same issue, you found the solution yet? thank you

— Reply to this email directly, view it on GitHub https://github.com/fortra/impacket/issues/1494#issuecomment-1985952175, or unsubscribe https://github.com/notifications/unsubscribe-auth/A2JAXQHHYJ7J6M777JQVPC3YXHOBBAVCNFSM6AAAAAAVKQRKZSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSOBVHE2TEMJXGU . You are receiving this because you were mentioned.Message ID: @.***>

mubix commented 8 months ago

Windows 7 (I forget the exact timing) but that and above break accessing shares that allow guest access -> https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/guest-access-in-smb2-is-disabled-by-default

But if you give it FCASTLE's username and password that it's supposed to be it should work. That's what these flags are for:

  -username USERNAME    Username to authenticate clients
  -password PASSWORD    Password for the Username
0xmaximus commented 1 month ago

Hi what i should do please help me

Maybe you're trying to relay a computer's credentials back to itself, which isn't possible due to security patches.