Question: Mapping an SMB drive

[Arno0x]

Hi Kevin,

Thanks for sharing your fantastic work. Been testing it successfully in my own lab environment, it's amazing.

I was wondering if there's any chance that your tools can be extended/modified to simply map a network share on a server that is not a Windows one, but still uses Windows domain credentials and SMB/NTLM authentication, typically a SAMBA server integrated to ActiveDirectory.

Thanks,
Regards,
Arno

[Kevin-Robertson]

Hi Arno,

I have not forgot about your Inveigh-Relay feature request:) I have been reworking Inveigh-Relay (switching to unprivileged host side and adding SMB2 support) for Inveigh 1.3 alongside working on Invoke-TheHash. Once I have the new relay finished, my plan is to start looking at file share related stuff as an unprivileged path for both Invoke-TheHash and Inveigh-Relay. I'll see if I can get whatever I come up with working against SAMBA also.

[Arno0x]

I'm feeling like a spoiled kid asking for free gifts :-) But thanks !

By the way, using other tools like pth-smbclient or Impacket smbclient.py against my SAMBA server works straight away and doesn't really make a difference whether it's a Windows or Samba behind.

[Kevin-Robertson]

Nope, thank you, awesome ideas are greatly appreciated:)

Yeah, it should work for both. I cheat a lot though with the protocols to do as little as possible since I'm not tapping into full protocol implementations (Impacket is incredible!). There is always the chance that something little could throw it off if it's not accounted for.

[Kevin-Robertson]

I just added my first pass at file share related tasks. I don't have anything that just maps a drive. I would need to find some way to make Windows aware of the pass the hash auth from TCPClient. The new function, Invoke-SMBClient, just interacts directly with shares.

I haven't performed much testing against SAMBA. The main requirement right now is SMB 2.1 support.