Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support SMB Relay Net NTLM Downgrading #19754

Open
smcintyre-r7 opened this issue Dec 19, 2024 · 0 comments
Open

Support SMB Relay Net NTLM Downgrading #19754

smcintyre-r7 opened this issue Dec 19, 2024 · 0 comments
Labels
suggestion-feature New feature suggestions

Comments

@smcintyre-r7
Copy link
Contributor

We should update our SMB/NTLM relaying support to allow downgrading NetNTLMv2 to NetNTLMv1. I don't think this can be done automatically in which case we should offer a datastore option to toggle it. If it is possible to do so automatically, we'd want to try the downgrade initially to obtain the NetNTLMv1 hash which is easier for our users to work with. If that fails and the client will re-attempt the authentication flow, we should fall back to the NetNTLMv2 authentication process without tampering with it. This would require some testing.

Making this work would likely involve some updates to the server-client code that handles the NTLM requests and dispatches them to the protocol-specific relay connections.

https://github.com/rapid7/metasploit-framework/blob/master/lib/msf/core/exploit/remote/smb/relay/ntlm/server_client.rb

@smcintyre-r7 smcintyre-r7 added the suggestion-feature New feature suggestions label Dec 19, 2024
@smcintyre-r7 smcintyre-r7 changed the title Support SMB Net NTLM Downgrading Support SMB Relay Net NTLM Downgrading Dec 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
suggestion-feature New feature suggestions
Projects
None yet
Development

No branches or pull requests

1 participant