Browse Exploit & Auxiliary Modules
The Metasploit Project hosts the world's largest database of quality assured exploits, including hundreds of remote exploits, auxiliary modules, and payloads. You can even review the Metasploit Framework source code of any module - or write your own.
Search for modules
SMB Negotiate SMB2 Dialect Corruption
This module sends a series of SMB negiotiate requests that advertise a SMB2 dialect with corrupted bytes.
Rank
- Normal
Authors
- hdm < hdm [at] metasploit.com >
Development
Similar Modules
- auxiliary/fuzzers/smb/smb_create_pipe
- auxiliary/fuzzers/smb/smb_create_pipe_corrupt
- auxiliary/fuzzers/smb/smb_negotiate_corrupt
- auxiliary/fuzzers/smb/smb_ntlm1_login_corrupt
- auxiliary/fuzzers/smb/smb_tree_connect
- auxiliary/fuzzers/smb/smb_tree_connect_corrupt
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use auxiliary/fuzzers/smb/smb2_negotiate_corrupt
msf auxiliary(smb2_negotiate_corrupt) > set RHOST [TARGET IP]
msf auxiliary(smb2_negotiate_corrupt) > run
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use auxiliary/fuzzers/smb/smb2_negotiate_corrupt
msf auxiliary(smb2_negotiate_corrupt) > set RHOST [TARGET IP]
msf auxiliary(smb2_negotiate_corrupt) > run
Module Options
| MAXDEPTH | Specify a maximum byte depth to test |
| RHOST | The target address |
| RPORT | The target port (default: 445) |
| CHOST | The local client address |
| CPORT | The local client port |
| ConnectTimeout | Maximum number of seconds to establish a TCP connection |
| FuzzChar | Sets the character to use for generating long strings |
| FuzzTracer | Sets the magic string to embed into fuzzer string inputs |
| Proxies | Use a proxy chain |
| SSL | Negotiate SSL for outgoing connections |
| SSLVersion | Specify the version of SSL that should be used (accepted: SSL2, SSL3, TLS1) |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |
| TCP::max_send_size | Maxiumum tcp segment size. (0 = disable) |
| TCP::send_delay | Delays inserted before every send. (0 = disable) |