Indent - fix
parent
f149053dfe
commit
d9021ee637
|
@ -1,11 +1,10 @@
|
|||
id: smb-anonymous-access
|
||||
|
||||
info:
|
||||
name: SMB Anonymous Access - Detect
|
||||
name: SMB Anonymous Access Detection
|
||||
author: pussycat0x
|
||||
severity: high
|
||||
description: |
|
||||
smb anonymous access detect
|
||||
Detects anonymous access to SMB shares on a remote server.
|
||||
reference:
|
||||
- https://wadcoms.github.io/wadcoms/SMBClient-List-Shares-Anonymous/
|
||||
metadata:
|
||||
|
@ -14,25 +13,24 @@ info:
|
|||
tags: js,network,smb,enum,misconfig
|
||||
|
||||
javascript:
|
||||
- pre-condition: |
|
||||
- pre-condition: |
|
||||
var m = require("nuclei/smb");
|
||||
var c = m.SMBClient();
|
||||
c.ListSMBv2Metadata(Host, Port);
|
||||
|
||||
code: |
|
||||
code: |
|
||||
var m = require("nuclei/smb");
|
||||
var c = m.SMBClient();
|
||||
var response = c.ListShares(Host, Port, User, Pass);
|
||||
log(to_json(response));
|
||||
|
||||
args:
|
||||
args:
|
||||
Host: "{{Host}}"
|
||||
Port: "5432"
|
||||
User: " "
|
||||
Pass: " "
|
||||
|
||||
extractors:
|
||||
extractors:
|
||||
- type: json
|
||||
name: SMB Shares
|
||||
json:
|
||||
- '.[]'
|
||||
- '.[]'
|
|
@ -1,7 +1,6 @@
|
|||
id: smb-share
|
||||
|
||||
info:
|
||||
name: SMB Shares - Enumeration
|
||||
name: SMB Shares - Enumeration
|
||||
author: pussycat0x
|
||||
severity: low
|
||||
description: |
|
||||
|
@ -14,24 +13,24 @@ info:
|
|||
tags: js,network,smb,enum
|
||||
|
||||
javascript:
|
||||
- pre-condition: |
|
||||
- pre-condition: |
|
||||
var m = require("nuclei/smb");
|
||||
var c = m.SMBClient();
|
||||
c.ListSMBv2Metadata(Host, Port);
|
||||
|
||||
code: |
|
||||
code: |
|
||||
var m = require("nuclei/smb");
|
||||
var c = m.SMBClient();
|
||||
var response = c.ListShares(Host, Port, User, Pass);
|
||||
to_json(response);
|
||||
|
||||
args:
|
||||
args:
|
||||
Host: "{{Host}}"
|
||||
Port: "445"
|
||||
User: "test"
|
||||
Pass: "test"
|
||||
|
||||
extractors:
|
||||
extractors:
|
||||
- type: json
|
||||
name: SMB Shares
|
||||
json:
|
||||
|
|
|
@ -1,5 +1,4 @@
|
|||
id: smb-signing-not-required
|
||||
|
||||
info:
|
||||
name: SMB Signing not required
|
||||
author: pussycat0x
|
||||
|
@ -15,27 +14,26 @@ info:
|
|||
tags: js,network,smb,enum
|
||||
|
||||
javascript:
|
||||
- pre-condition: |
|
||||
- pre-condition: |
|
||||
var m = require("nuclei/smb");
|
||||
var c = m.SMBClient();
|
||||
c.ListSMBv2Metadata(Host, Port);
|
||||
|
||||
code: |
|
||||
code: |
|
||||
var m = require("nuclei/smb");
|
||||
var c = m.SMBClient();
|
||||
var response = c.ListSMBv2Metadata(Host, Port, User, Pass);
|
||||
to_json(response);
|
||||
|
||||
args:
|
||||
args:
|
||||
Host: "{{Host}}"
|
||||
Port: "5432"
|
||||
User: "test"
|
||||
Pass: "test"
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- '"SigningEnabled": true'
|
||||
- '"SigningRequired": false'
|
||||
condition: and
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- '"SigningEnabled": true'
|
||||
- '"SigningRequired": false'
|
||||
condition: and
|
Loading…
Reference in New Issue