Re: SMBRelay issues

From: Thomas Springer (tuev@serveraudit.net)
Date: 12/13/01 

Date: Thu, 13 Dec 2001 11:11:53 +0100
To: pen-test@securityfocus.com
From: Thomas Springer <tuev@serveraudit.net>

At 12:17 12.12.2001 -0800, you wrote:
>Has anyone successfully used SMBRelay to gather any

Its definitely no snake-oil - sometimes it works, sometimes not - you might
need to play around with the options. Have a second machine connected to
the network to check, if you get any passwords upon connection-attempts.
I got it to work within domains, within workgroups, even with
token-ring-networks, but in some environments it just seems do nothing. But
anyway, smbrelay made up some really nice experiences after sending out
emails with connect-pixels.
A successful startup doesn't mean that you get any results from
connection-attempts. Check with a second machine, if your trap works.
You might also have a look at cdt-website, new versions seem to appear
without any notice.

ts

Thomas Springer

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/