Using smb_relay without admin access

[funk flavor <funkflavor () gmail com>]

Hi all,

I was guessing if the smb_relay module could be used even if the relayed
authentication was not an admin one.
Well I know the smb_relay module tries to connect to ADMIN$. But if the goal
of the test is only showing that NTLM authentication can be spoofed then the
module could be tweaked to map to another share, right ? Then instead of
uploading a payload it could just list the content of the share, still right
?

Thx !

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework