Deft_

Results 105 comments of Deft_

I'd keep the smbv1:true but remove the false. Because having SMBv1 enabled can mean a lot of things like not up to date server or missing GPO. At least if...

So are we good if I comit the following: - SigningReq:True/False - SMBv1 only printed if True ?

Okay you got me 🫡 But still I'd rather people know exactly what that means without having yo go on the wiki

Alright I have switched the code as discussed: I took the liberty of making the base code easier to read / extend :P

Hey guys! I watched this module and realized that it is doing a powershell command execution. It doesn't matter in most env's but wouldn't it be better to crawl directories...

See https://github.com/Pennyw0rth/NetExec/pull/444

Ah shit, just realised it breaks the enum_host when TLS is not required:

At this point: * Enforced ChannelBinding works: * TLS enforced without ChannelBinding works: * TLS not enforced works as well: Need to patch the Kerberos error tho

My bad it was just a DNS error: All good then.