search

mattwright324 / windows-smb-cracker

Crack Windows logins remotely through SMB/CIFS
MIT License
12 stars 2 forks source link

"No logins found" #3

Open dardoor opened 1 year ago

dardoor commented 1 year ago

Hi, I'm testing this now with two Windows 10 PCs. I can ping the other PC and I can access its shares with the right username and password.

I have entered the correct IP and I loaded the users and the passwords lists in the SMB cracker, but it always says "No logins found". The target user name and password are of course included in the lists.

mattwright324 commented 1 week ago

Hi @dardoor,

While looking at this project again and testing it between two Windows 11 PCs, I came across a similar issue and what appears to be happening is that every windows version since Windows 10 1709 and later no longer have SMB/CIFS enabled by default.

https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/smbv1-not-installed-by-default-in-windows

Additionally, after enabling it has worked a few times but there seems to be some additional protection against SMB bruteforcing. I'm not quite sure why its behaving the way it is though. The correct login to the Win11 PC has worked a few times but when I put the correct password a ways into a big list it does not work even when the SMB configuration says there is no invalid login delay InvalidAuthenticationDelayTimeInMs : 0. It appears that Windows Defender is also playing a part as connections with the correct login were failing until I disabled the firewall on the target machine.