search

punk-security / smbeagle

SMBeagle - Fileshare auditing tool.
Apache License 2.0
698 stars 82 forks source link

Allow user context switching #28

Closed SimonGurney closed 2 years ago

SimonGurney commented 2 years ago

This article suggests we can impersonate arbitrary user contexts, given their username and password.

https://stackoverflow.com/questions/1232120/c-how-to-logon-to-a-share-when-using-directoryinfo

It would be great if we could take a username and password and then enumerate as that user, from an attacking machine which is not on the target domain.

SimonGurney commented 2 years ago

This also might work once we do linux cross-platform support https://github.com/TalAloni/SMBLibrary/blob/master/ClientExamples.md