Onsdag – 1 · Frimurerlosjen, rom 2
Netsecurity, RedTeam
Egil has been doing IT since Monkey Island 1, Turbo Pascal and DOS. He is a member of the Netsecurity RedTeam and has worked in IT his whole life.
He takes these speaker biography descriptions as an opportunity to create a false image of himself, and he is usually recognized as the smartest and most handsome man in the room. He is also the strongest person on earth.
In this cloud-centric zero-access AI-driven passwordless SaaS/PaaS-lifted modern world, one stubborn old bastard from the 80s refuses to die on the Azure-deployed IaC servers: SMB shares. The backup of the Sharepoint lift and shift (aka the new common drive), the VHD dumps from 2019, the export files from the business app SaaS migration, the sql backup files, the Keepass exports... they live on these SMB shares with forgotten permission sets. As a red-team operator / pentester, digging through the piles of data can often yield treasure, but it slow and tedious, prone with false positives and manual typing. And painful to do over SOCKS proxies... until now!
This talk presents "smbhoarder" - a tool that perform threaded scans of SMB shares via Impacket, generates searchable indexes, and plugs directly into fzf for instant filtering by filename, extension, path patterns, and size/date. Key features:
* Threaded SMB enumeration towards hosts with tcp/445 open.
* Fuzzy search via fzf
* Download of one or several files from different SMB shares in one keycombo.
* Differential enumeration: quickly seeing what Account B can access that Account A cannot, useful when you’re latmoving/privescing.
* SOCKS proxy aware via proxychains-support.
The result is a practical "SMB search engine" you can run during an engagement. And did we mention it works flawlessly over SOCKS proxies?
Programmet er oppdatert.