Skip to content

Conversation

@snovvcrash
Copy link

@snovvcrash snovvcrash commented Aug 25, 2020

Hello there,

In this PR I would like to propose some features for pentest/redteam engagements:

  • automatic "crawl & dump" function to spider the SMB share searching for files by a given pattern and download them to disk;
  • blind share enumeration with a brute force attack by a wordlist containing some commonly used hostnames;
  • encoding fix to allow download files with non-en-US characters in a pathname;
  • fake legitimate identifiers (device model, user-agent, etc.) in order to avoid being quarantined by a Blue Team.

There are quite a few changes as well as README.md modifications (was just editing a cheatsheet for myself), so I suppose you might want to create a separate branch for this PR. Let me know if you find it acceptable and I will pull this request once again for a new branch.

More information about the changes: https://snovvcrash.github.io/2020/08/22/tuning-peas-for-fun-and-profit.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant