fortra / impacket

Impacket is a collection of Python classes for working with network protocols.
https://www.coresecurity.com
Other
13.1k stars 3.5k forks source link

Make an example script for Windows version detection #492

Closed maaaaz closed 2 months ago

maaaaz commented 5 years ago

Hello there,

Correct me if I'm wrong but there's not many tools or scripts to discover, without authentication, the precise version of a Windows asset. I can only list :

I can't list crackmapexec as it does not return the nature of the asset (server or workstation) but only the raw version, for instance Windows 6.1 and it can be ambiguous. This is a real lack for blue teams trying to map their assets' Windows version.

What do you think of making a impacket example script dedicated for this (obvious and simple) task ?

Cheers !

maaaaz commented 5 years ago

I propose this script https://github.com/SecureAuthCorp/impacket/pull/550

If you have a better name idea, I'm OK :)

Cheers.

anadrianmanrique commented 2 months ago

This is mostly addressed by https://github.com/fortra/impacket/blob/master/examples/DumpNTLMInfo.py and also be net exec. closing. Plaese reopen if needed