Address WMI hanging

[ilija-lazoroski]

What does this PR do?

Fixes part of #3654 .

We can live without the dcom_firewall_checker if we address impacket/#1600. Until we make a PR, get review, merge, release and relock, this is the solution.

Special thanks to @XiaoliChan for the suggested solution.

PR Checklist

• Have you added an explanation of what your changes do and why you'd like to include them?
• Is the TravisCI build passing?
• Was the CHANGELOG.md updated to reflect the changes?
• Was the documentation framework updated to reflect the changes?
• Have you checked that you haven't introduced any duplicate code?

Testing Checklist

• Added relevant unit tests?
• Do all unit tests pass?
• Do all end-to-end tests pass?
• Any other testing performed?

  Tested by {Running the Monkey locally with relevant config/running Island/...}

• If applicable, add screenshots or log transcripts of the feature working

30 seconds timeout

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (21d44ee) 77.57% compared to head (9240c90) 77.49%.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop    #3978      +/-   ##
===========================================
- Coverage    77.57%   77.49%   -0.09%     
===========================================
  Files          467      467              
  Lines        14759    14787      +28     
===========================================
+ Hits         11450    11459       +9     
- Misses        3309     3328      +19     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[shreyamalviya]

So this is essentially establishing another connection and then immediately disconnecting? Isn't there another way to add a timeout?

[ilija-lazoroski]

Not that I found.

[shreyamalviya]

I'm not a fan of the logic (new connection that we're disconnecting immediately) but I don't think it's worth any more time if we're going to fix fortra/impacket#1600 eventually.

[ilija-lazoroski]

I'm not a fan of the logic (new connection that we're disconnecting immediately) but I don't think it's worth any more time if we're going to fix fortra/impacket#1600 eventually.

This logic is used in a couple other projects that are using impacket for WMI. We will need to fix that eventually.