-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Added working and tested base for impacket, smbserver and fixed an is… (
#23) * Added working and tested base for impacket, smbserver and fixed an issue in lib * Added impacket's smbserver to tools.json
- Loading branch information
Showing
8 changed files
with
267 additions
and
25 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -68,6 +68,9 @@ | |
| }, | ||
| { | ||
| "tool_name": "apktool" | ||
| }, | ||
| { | ||
| "tool_name": "impacket-smbserver" | ||
| } | ||
| ] | ||
| } | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| install.sh | ||
| run.sh | ||
| test.sh | ||
| README.md |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,34 @@ | ||
| FROM debian:bullseye-slim as build | ||
|
|
||
| ENV DEBIAN_FRONTEND=noninteractive | ||
| RUN apt update \ | ||
| && apt install -y \ | ||
| wget \ | ||
| build-essential \ | ||
| python3-dev \ | ||
| python3-venv \ | ||
| libssl-dev \ | ||
| cargo \ | ||
| unzip \ | ||
| && rm -rf /var/cache/apt/* | ||
|
|
||
| WORKDIR /src | ||
|
|
||
| ARG IMPACKET_VERSION=0_11_0 | ||
|
|
||
| RUN wget https://github.com/fortra/impacket/archive/refs/tags/impacket_${IMPACKET_VERSION}.zip -O /src/impacket.zip && \ | ||
| unzip /src/impacket.zip && mv impacket-impacket_${IMPACKET_VERSION} impacket | ||
|
|
||
| RUN python3 -m venv /src/impacket/venv && \ | ||
| /src/impacket/venv/bin/pip install /src/impacket/ | ||
|
|
||
| WORKDIR /src/impacket | ||
|
|
||
| FROM gcr.io/distroless/python3 | ||
| LABEL org.opencontainers.image.authors="Arqsz" | ||
|
|
||
| COPY --from=build /src/impacket /src/impacket | ||
|
|
||
| ENV PATH="/src/impacket/venv/bin:$PATH" | ||
|
|
||
| ENTRYPOINT ["/src/impacket/venv/bin/smbserver.py"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,155 @@ | ||
| # Containerized impacket's smbserver | ||
|
|
||
| ## Basic info | ||
|
|
||
| - **Current version**: 0.11.0 | ||
| - **Source**: https://github.com/fortra/impacket/archive/refs/tags/impacket_0_11_0.zip | ||
|
|
||
| ## Use indepentendly to [containers4pentesters](https://github.com/TheArqsz/containers4pentesters) project | ||
|
|
||
| ### CLI | ||
|
|
||
| Use in CLI directly as a pull from the DockerHub: | ||
|
|
||
| ```bash | ||
| docker pull containers4pentesters/impacket-smbserver | ||
| docker run -it --rm --name impacket-smbserver \ | ||
| --user `id -u`:`id -g` \ | ||
| --volume "$HOME":"$HOME" \ | ||
| --volume "$(pwd)":"$(pwd)" \ | ||
| --volume /tmp:/tmp \ | ||
| -e HOME="$HOME" \ | ||
| -e TERM=$TERM \ | ||
| --network host containers4pentesters/impacket-smbserver \ | ||
| --help | ||
| ``` | ||
|
|
||
| or as a build (with [containers4pentesters](https://github.com/TheArqsz/containers4pentesters) repository cloned): | ||
|
|
||
| ```bash | ||
| docker build -q -t containers4pentesters/impacket-smbserver:latest /opt/containers4pentesters/tools/impacket-smbserver/ | ||
| docker run -it --rm --name impacket-smbserver \ | ||
| --user `id -u`:`id -g` \ | ||
| --volume "$HOME":"$HOME" \ | ||
| --volume "$(pwd)":"$(pwd)" \ | ||
| --volume /tmp:/tmp \ | ||
| -e HOME="$HOME" \ | ||
| -e TERM=$TERM \ | ||
| --network host containers4pentesters/impacket-smbserver:latest \ | ||
| --help | ||
| ``` | ||
|
|
||
| ### As a script | ||
|
|
||
| You can create a script `/usr/local/bin/impacket-smbserver` with given content (pulling from the DockerHub): | ||
|
|
||
| ```bash | ||
| #!/usr/bin/env bash | ||
|
|
||
| docker pull -q containers4pentesters/impacket-smbserver:latest | ||
| docker run -it --rm --name impacket-smbserver \ | ||
| --user `id -u`:`id -g` \ | ||
| --volume "$HOME":"$HOME" \ | ||
| --volume "$(pwd)":"$(pwd)" \ | ||
| --volume /tmp:/tmp \ | ||
| -e HOME="$HOME" \ | ||
| -e TERM=$TERM \ | ||
| --network host containers4pentesters/impacket-smbserver \ | ||
| "$@" | ||
| ``` | ||
|
|
||
| or as a build process (with [containers4pentesters](https://github.com/TheArqsz/containers4pentesters) repository cloned): | ||
|
|
||
| ```bash | ||
| #!/usr/bin/env bash | ||
|
|
||
| docker build -q -t containers4pentesters/impacket-smbserver:latest /opt/containers4pentesters/tools/impacket-smbserver/ | ||
| docker run -it --rm --name impacket-smbserver \ | ||
| --user `id -u`:`id -g` \ | ||
| --volume "$HOME":"$HOME" \ | ||
| --volume "$(pwd)":"$(pwd)" \ | ||
| --volume /tmp:/tmp \ | ||
| -e HOME="$HOME" \ | ||
| -e TERM=$TERM \ | ||
| --network host containers4pentesters/impacket-smbserver \ | ||
| "$@" | ||
| ``` | ||
|
|
||
| You can use the script as if it was a native tool | ||
|
|
||
| > This example assumes usage of port **445/tcp** (you need to have root rights) | ||
| *Server:* | ||
| ```console | ||
| $ mkdir /tmp/smbserver-test | ||
| $ echo 1234 > /tmp/smbserver-test/myfile.txt | ||
| $ sudo su | ||
| $ id | ||
| uid=0(root) gid=0(root) groups=0(root) | ||
| $ /usr/local/bin/impacket-smbserver -smb2support -username user -password pass TMP /tmp/smbserver-test/ | ||
| [xxxx/xx/xx xx:xx:xx][INFO] You are using host network - exposing all ports | ||
| Impacket v0.11.0 - Copyright 2023 Fortra | ||
|
|
||
| [*] Config file parsed | ||
| ... | ||
| ``` | ||
|
|
||
| *Client:* | ||
| ```console | ||
| $ smbclient //localhost/TMP --user user --password pass | ||
| Try "help" to get a list of possible commands. | ||
| smb: \> dir | ||
| myfile.txt AN 5 xxx xxx x xx:xx:xx 2024 | ||
| ``` | ||
|
|
||
| ## Known issues | ||
|
|
||
| ### `Permission denied` when starting the smbserver | ||
|
|
||
| ```python | ||
| Traceback (most recent call last): | ||
| File "/src/impacket/venv/bin/smbserver.py", line 71, in <module> | ||
| server = smbserver.SimpleSMBServer(listenAddress=options.interface_address, listenPort=int(options.port)) | ||
| File "/src/impacket/venv/lib/python3.9/site-packages/impacket/smbserver.py", line 4870, in __init__ | ||
| self.__server = SMBSERVER((listenAddress, listenPort), config_parser=self.__smbConfig) | ||
| File "/src/impacket/venv/lib/python3.9/site-packages/impacket/smbserver.py", line 3965, in __init__ | ||
| socketserver.TCPServer.__init__(self, server_address, handler_class) | ||
| File "/usr/lib/python3.9/socketserver.py", line 452, in __init__ | ||
| self.server_bind() | ||
| File "/usr/lib/python3.9/socketserver.py", line 466, in server_bind | ||
| self.socket.bind(self.server_address) | ||
| PermissionError: [Errno 13] Permission denied | ||
| ``` | ||
|
|
||
| This issue occurs because low privileged user has no rights to use TCP ports under 1024 (which 445 definitely is). By default, smbserver uses port 445/tcp. | ||
|
|
||
| There are 3 solutions: | ||
| - You can change the default port: | ||
| ```console | ||
| $ impacket-smbserver -port 1445 TMP /tmp | ||
| [YYYY/MM/DD HH:mm:SS][INFO] You are using host network - exposing all ports | ||
| Impacket v0.11.0 - Copyright 2023 Fortra | ||
|
|
||
| [*] Config file parsed | ||
| ``` | ||
|
|
||
| - You should start the impacket-smbserver as a root user (it will use port 445/tcp): | ||
| ```console | ||
| $ sudo su | ||
| $ impacket-smbserver TMP /tmp | ||
| [YYYY/MM/DD HH:mm:SS][INFO] You are using host network - exposing all ports | ||
| Impacket v0.11.0 - Copyright 2023 Fortra | ||
|
|
||
| [*] Config file parsed | ||
| ``` | ||
|
|
||
| > If you want to use it through c4p project, you can copy .c4p_config yourself or simply run the c4p installation one more time | ||
| - You can change docker's network type and the TCP port to a number above 1024: | ||
| ```console | ||
| $ DOCKER_NETWORK_TYPE=bridge SMB_PORT=1445 impacket-smbserver TMP /tmp | ||
| [YYYY/MM/DD HH:mm:SS][WARN] Exposing port 1445/tcp as a port 445/tcp from the container | ||
| Impacket v0.11.0 - Copyright 2023 Fortra | ||
|
|
||
| [*] Config file parsed | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,16 @@ | ||
| #!/usr/bin/env bash | ||
|
|
||
| # This setting is valid only for 'bridge' type network. | ||
| # On 'host' type you can use any native port you want. | ||
| SMB_PORT=${SMB_PORT:-1445} | ||
|
|
||
| if [ "$DOCKER_NETWORK_TYPE" == "host" ]; then | ||
| log_info "You are using host network - exposing all ports" | ||
| else | ||
| if [[ $DOCKER_OPTIONS =~ '--publish '|'-p ' ]]; then | ||
| log_info "It seems that you want to expose some ports - using your configuration" | ||
| else | ||
| log_warn "Exposing port $SMB_PORT/tcp as a port 445/tcp from the container" | ||
| DOCKER_OPTIONS="$DOCKER_OPTIONS --publish $SMB_PORT:445" | ||
| fi | ||
| fi |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| #!/usr/bin/env bash | ||
|
|
||
| SCRIPT_PATH="$( cd -- "$(dirname "$0")" >/dev/null 2>&1 ; pwd -P )" | ||
| TOOLS_PATH="$(dirname $SCRIPT_PATH)" | ||
| LIB_PATH="$(dirname $TOOLS_PATH)/lib" | ||
| CURRENT_TOOL=$(basename $SCRIPT_PATH) | ||
| verify_if_installed=${1:-} | ||
|
|
||
| source "$LIB_PATH/test.sh" | ||
|
|
||
| command_output=$(bash $LIB_PATH/run.sh $CURRENT_TOOL --help) | ||
| pattern="usage: smbserver.py" | ||
|
|
||
| test_tool "$CURRENT_TOOL" "$command_output" "$pattern" "$verify_if_installed" |