Class: Exploit::Remote::Relay::NTLM::HashCapture::HashCaptureNTLMProvider

Inherits:
RubySMB::Gss::Provider::NTLM
  • Object
show all
Defined in:
lib/msf/core/exploit/remote/relay/ntlm/hash_capture.rb

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(allow_anonymous: false, allow_guests: false, default_domain: 'WORKGROUP', listener: nil, ntlm_type3_status: ::WindowsError::NTStatus::STATUS_ACCESS_DENIED, service_name:) ⇒ HashCaptureNTLMProvider

Returns a new instance of HashCaptureNTLMProvider.

Parameters:

  • ntlm_type3_status (::WindowsError::NTStatus) (defaults to: ::WindowsError::NTStatus::STATUS_ACCESS_DENIED) —

    A specific NT Status to return as the response to the NTLM type 3 message. If this value is nil, the message will be processed as normal.



180
181
182
183
184
185
 
# File 'lib/msf/core/exploit/remote/relay/ntlm/hash_capture.rb', line 180

def initialize(allow_anonymous: false, allow_guests: false, default_domain: 'WORKGROUP', listener: nil, ntlm_type3_status: ::WindowsError::NTStatus::STATUS_ACCESS_DENIED, service_name:)
  super(allow_anonymous: allow_anonymous, allow_guests: allow_guests, default_domain: default_domain)
  @listener = listener
  @ntlm_type3_status = ntlm_type3_status
  @service_name = service_name
end

Instance Attribute Details

#listener ⇒ Object (readonly)

Returns the value of attribute listener.



194
195
196
 
# File 'lib/msf/core/exploit/remote/relay/ntlm/hash_capture.rb', line 194

def listener
  @listener
end

#ntlm_type3_status ⇒ Object

Returns the value of attribute ntlm_type3_status.



195
196
197
 
# File 'lib/msf/core/exploit/remote/relay/ntlm/hash_capture.rb', line 195

def ntlm_type3_status
  @ntlm_type3_status
end

#service_name ⇒ Object

Returns the value of attribute service_name.



195
196
197
 
# File 'lib/msf/core/exploit/remote/relay/ntlm/hash_capture.rb', line 195

def service_name
  @service_name
end

Instance Method Details

#new_authenticator(server_client) ⇒ Object

Needs overwritten to ensure our version of Authenticator is returned



188
189
190
191
192
 
# File 'lib/msf/core/exploit/remote/relay/ntlm/hash_capture.rb', line 188

def new_authenticator(server_client)
  # build and return an instance that can process and track stateful information for a particular connection but
  # that's backed by this particular provider
  HashCaptureAuthenticator.new(self, server_client)
end