swisskyrepo
/
NetExec
mirror of https://github.com/swisskyrepo/NetExec.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update ntlmv1.py 

Update the module as it was not working anymore and the values were not accurate 

Signed-off-by: Deft_ <aurelien.chalot@protonmail.com>
main
Deft_ 2024-02-08 11:54:08 +01:00 committed by GitHub
parent 1645f672d3
commit d6dae9c605
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
nxc/modules/ntlmv1.py
View File

@ -7,10 +7,11 @@ class NXCModule:
""" """
Detect if the target's LmCompatibilityLevel will allow NTLMv1 authentication Detect if the target's LmCompatibilityLevel will allow NTLMv1 authentication
Module by @Tw1sm Module by @Tw1sm
Modified by Deft (08/02/2024)
""" """
name = "ntlmv1" name = "ntlmv1"
description = "Detect if lmcompatibilitylevel on the target is set to 0 or 1" description = "Detect if lmcompatibilitylevel on the target is set to lower than 3 (which means ntlmv1 is enabled)"
supported_protocols = ["smb"] supported_protocols = ["smb"]
opsec_safe = True opsec_safe = True
multiple_hosts = True multiple_hosts = True
@ -32,19 +33,22 @@ class NXCModule:
"SYSTEM\\CurrentControlSet\\Control\\Lsa", "SYSTEM\\CurrentControlSet\\Control\\Lsa",
) )
key_handle = ans["phkResult"] key_handle = ans["phkResult"]
rtype = None rtype = data = None
data = None
try: try:
rtype, data = rrp.hBaseRegQueryValue( rtype, data = rrp.hBaseRegQueryValue(
remote_ops._RemoteOperations__rrp, remote_ops._RemoteOperations__rrp,
key_handle, key_handle,
"lmcompatibilitylevel\x00", "lmcompatibilitylevel\x00",
) )
except rrp.DCERPCSessionError: except rrp.DCERPCSessionError:
context.log.debug("Unable to reference lmcompatabilitylevel, which probably means ntlmv1 is not set") context.log.debug("Unable to reference lmcompatabilitylevel, which probably means ntlmv1 is not set")
if rtype and data and int(data) in [0, 1, 2]: # Changed by Defte
# Unless this keys is set to 3 or higher, NTLMv1 can be used
if data in [0, 1, 2]:
context.log.highlight(self.output.format(connection.conn.getRemoteHost(), data)) context.log.highlight(self.output.format(connection.conn.getRemoteHost(), data))
except DCERPCSessionError as e: except DCERPCSessionError as e:
context.log.debug(f"Error connecting to RemoteRegistry: {e}") context.log.debug(f"Error connecting to RemoteRegistry: {e}")
finally: finally: