Skip to content

Fix session handling when SMB is not accessible but LDAP is #45

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Feb 23, 2024
Merged

Fix session handling when SMB is not accessible but LDAP is #45

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
dfc3b35
Fix session handling
cddmp Feb 12, 2024
85aa4ea
Fix session handling
cddmp Feb 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 11 additions & 3 deletions enum4linux-ng.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -350,14 +350,13 @@ class Target:
passed during the enumeration to the various modules. This allows to modify/update target information
during enumeration.
'''
def __init__(self, host, credentials, port=None, tls=None, timeout=None, samba_config=None, sessions={}):
def __init__(self, host, credentials, port=None, tls=None, timeout=None, samba_config=None):
self.host = host
self.creds = credentials
self.port = port
self.timeout = timeout
self.tls = tls
self.samba_config = samba_config
self.sessions = sessions

self.ip_version = None
self.smb_ports = []
Expand All @@ -367,6 +366,14 @@ def __init__(self, host, credentials, port=None, tls=None, timeout=None, samba_c
self.smb1_supported = False
self.smb1_only = False

self.sessions = {"sessions_possible":False,
AUTH_NULL:False,
AUTH_PASSWORD:False,
AUTH_KERBEROS:False,
AUTH_NTHASH:False,
"random_user":False,
}

result = self.valid_host(host)
if not result.retval:
raise Exception(result.retmsg)
Expand Down Expand Up @@ -2950,11 +2957,12 @@ def run_modules(self, modules):
if ENUM_SESSIONS in modules:
result = EnumSessions(self.target, self.creds).run()
self.output.update(result)
# Overwrite sessions
self.target.sessions = self.output.as_dict()['sessions']

# If sessions are not possible, we regenerate the list of modules again.
# This will only leave those modules in, which don't require authentication.
if self.target.sessions and not self.target.sessions[self.creds.auth_method]:
if not self.target.sessions[self.creds.auth_method]:
modules = self.get_modules(self.target.listeners, session=False)

# Try to get domain name and sid via lsaquery
Expand Down