Metasploit mailing list archives

problems using SMB_enumshares on Windows 2008R2?


From: "Mee, John H" <jmee () kpmg com>
Date: Thu, 2 Feb 2012 10:46:53 -0500

I cannot get a list of known shares on a Windows 2008R2 Datacenter
edition. I get messages indicating that it successfully scanned the
server (this is test server in my lab), and I can get to a known share
via "net use" and nMap shows it is alive and well, but likewise, it does
not return any shares.

Based on the .pcap files, it appears that smb_enumshares uses lanman and
2008R2 uses smb2 queries.

Are there any alternatives, fixes, etc. that will get around this
problem? Unfortunately, I am not conversant in ruby and the network
protocol to be able to fix this myself...

--------------------------------------
John Mee
KPMG LLP
400 Capitol Mall, Suite 800
Sacramento
Ca. 95814
Voice  (916)387-5079
Mobile (916) 812-8679
Fax (916) 720-0337 

<html>
<body>
<p>***********************************************************************</p>
<p>The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else is
unauthorized. If you are not the intended recipient, any disclosure, copying,
distribution or any action taken or omitted to be taken in reliance on it, is
prohibited and may be unlawful. When addressed to our clients any opinions or
advice contained in this email are subject to the terms and conditions
expressed in the governing KPMG client engagement letter.</p>
<p>***********************************************************************</p>
</body>
</html>

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


Current thread: