o àý°jã @s¨ddlZddlZddlZddlmZddlmZmZddlm Z m Z e dkrRe ej ƒejdddZejd d d d ejd d dd ejdd dd ejdd dd ejdd dd ejdd dd ejdd dd ejdd dd ejdd dd ejdd dd ejdd dd ejd d d!d"d#ejd$d%d&d ejd'd%d(d ejd)d*d ejd+d,ejd-d%d.d ejd/d%d0d ejd1d%d2d ejd3d d4d5d,ejd6d%d7d8d,ejd9d:d%d;d ejdd dd?d,eejƒd@kre ¡e d@¡ze ¡ZWney*Zze eeƒ¡e d@¡WYdZ[ndZ[wwe ejej¡ejdurej?ej@gZAejBejCejDgZEeFeAƒr1ej6re dM¡e d@¡eGeAƒse dN¡e d@¡eFeEƒs!e dO¡e d@¡e% Hej>ejBejCejDej?ej@¡e% IdA¡ze% J¡WdSeKyQe dPƒe dQ¡YdSwdS)RéN)Úlogger)Ú smbserverÚversion)Úcompute_lmhashÚcompute_nthashÚ__main__TaThis script will launch a SMB Server and add a share specified as an argument. Usually, you need to be root in order to bind to port 445. For optional authentication, it is possible to specify username and password or the NTLM hash. Example: smbserver.py -comment 'My share' TMP /tmp)Úadd_helpÚ descriptionÚ shareNameÚstorezname of the share to add)ÚactionÚhelpÚ sharePathzpath of the share to addz-commentz0share's comment to display when asked for sharesz -usernamez Username to authenticate clientsz -passwordzPassword for the Usernamez-computeraccountnamezZcomputer account name to authenticate arbitrary clients with signing via NetLogon/Kerberosz-computeraccounthashz]computer account NT hash to authenticate arbitrary clients with signing via NetLogon/Kerberosz-computeraccountaesz]computer account AES key to authenticate arbitrary clients with signing via NetLogon/Kerberosz-computeraccountpasswordz-computeraccountdomainz\computer account domain to authenticate arbitrary clients with signing via NetLogon/Kerberosz-dc-ipz\IP of domain controller to authenticate arbitrary clients with signing via NetLogon/Kerberosz-hashesz LMHASH:NTHASHz5NTLM hashes for the Username, format is LMHASH:NTHASH)r Úmetavarr z-tsÚ store_truez&Adds timestamp to every logging outputz-debugzTurn DEBUG output ONz-ipz--interface-addressz@ip address of listening interface ("0.0.0.0" or "::" if omitted))r Údefaultr z -readonlyzOnly allow reading of filesz-disablekerberosz$Do not offer Kerberos authenticationz -disablentlmz Do not offer NTLM authenticationz-portÚ445z9TCP port for listening incoming connections (default 445)z-dropsspFz'Disable NTLM ESS/SSP during negotiationz-6z--ipv6zListen on IPv6z -smb2supportzSMB2 Support (experimental!)z -outputfilez,Output file to log smbserver output messageséÚÚinterface_addressz::z0.0.0.0)Ú listenAddressÚ listenPortÚipv6zSwitching output to file %sÚyesÚno)ÚreadOnly)Úgetpassz Password:ú:zTYou cannot use account credentials AND computer account credentials at the same timez¥All of the following options need to be set for accepting signed connections from arbitrary users in the domain: -computeraccountname, -computeraccountdomain, -dc-ipz½At least one of the following options need to be set for accepting signed connections from arbitrary users in the domain: -computeraccounthash, -computeraccountaes, -computeraccountpasswordz Interrupted, exiting...é‚)LÚsysÚargparseÚloggingÚimpacket.examplesrÚimpacketrrÚ impacket.ntlmrrÚ__name__ÚprintÚBANNERÚArgumentParserÚparserÚ add_argumentÚSUPPRESSÚlenÚargvÚ print_helpÚexitÚ parse_argsÚoptionsÚ ExceptionÚeÚcriticalÚstrÚinitÚtsÚdebugÚcommentrrÚSimpleSMBServerÚintÚportÚserverÚ outputfileÚinfoÚ setLogFileÚaddSharer ÚupperrÚreadonlyÚsetSMB2SupportÚ smb2supportÚ setDropSSPÚdropsspÚsetKerberosSupportÚdisablekerberosÚsetNTLMSupportÚ disablentlmÚusernameÚpasswordÚhashesrÚlmhashÚnthashÚsplitÚ addCredentialÚcomputeraccountnameÚcomputeraccountdomainÚdc_ipÚrequired_secure_server_optionsÚcomputeraccounthashÚcomputeraccountaesÚcomputeraccountpasswordÚ"at_least_one_secure_server_optionsÚanyÚallÚsetComputerAccountÚsetSMBChallengeÚstartÚKeyboardInterrupt©raraú‰/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/../../../bin/smbserver.pyÚs²     €þ   &                   þ“