Implement better windows os enumeration with checking the build version

fortra / impacket

Impacket is a collection of Python classes for working with network protocols.

https://www.coresecurity.com

Other

13k stars 3.5k forks source link

Implement better windows os enumeration with checking the build version #1699

Closed NeffIsBack closed 3 months ago

NeffIsBack commented 4 months ago

This PR will use the provided build number to better detect possible versions of windows OS. Tho there are sometimes two OS versions (Home users and Server versions) for one build number it still narrows down the actual OS version. If it can't find a matching build version it will display the version number in the old style ("Windows . Build )

This is only applicable to SMBv2 and SMBv3 as SMBv1 already provides the OS as plaintext in the SMB handshake.

Before and after example:

NeffIsBack commented 3 months ago

Closing as this was merged with: https://github.com/fortra/impacket/pull/1721