NetExec icon indicating copy to clipboard operation
NetExec copied to clipboard

Implement channel binding check on mssql protocol

Open Signum21 opened this issue 7 months ago • 4 comments

Please Describe The Problem To Be Solved It would be useful to have the channel binding check when using nxc mssql <Target> like in smb and ldap.

(Optional): Suggest A Solution An example can be found here https://github.com/CompassSecurity/mssqlrelay

Signum21 avatar May 31 '25 04:05 Signum21

Good idea!

XiaoliChan avatar Jun 01 '25 10:06 XiaoliChan

As far as I got it, it only checks if encryption is required. Althought I took a look at the code and saw specific flags related to CBT... There is probably something we can do but I wasn't able to do it yet :/

Dfte avatar Jun 02 '25 21:06 Dfte

Here is the encryption flag :D https://github.com/Pennyw0rth/NetExec/pull/720

Now I still have to parse the CBT flag

Dfte avatar Jun 04 '25 11:06 Dfte

https://github.com/fortra/impacket/pull/1986 :)

Dfte avatar Jul 04 '25 16:07 Dfte