File smb-flood

脚本使用类型: hostrule
脚本所属分类: intrusive, dos
脚本下载地址: http://nmap.org/svn/scripts/smb-flood.nse

User Summary

Exhausts a remote SMB server's connection limit by by opening as many connections as we can. Most implementations of SMB have a hard global limit of 11 connections for user accounts and 10 connections for anonymous. Once that limit is reached, further connections are denied. This script exploits that limit by taking up all the connections and holding them.

This works better with a valid user account, because Windows reserves one slot for valid users. So, no matter how many anonymous connections are taking up spaces, a single valid user can still log in.

This is *not* recommended as a general purpose script, because a) it is designed to harm the server and has no useful output, and b) it never ends (until timeout).

Script Arguments

randomseed, smbbasic, smbport, smbsign

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

Example Usage

执行格式

nmap --script smb-flood.nse -p445 <host>
sudo nmap -sU -sS --script smb-flood.nse -p U:137,T:139 <host>

Script Output

n/a

Requires

• smb
• stdnse
• table

Author: Ron Bowes

License: VER007 整理 http://www.ver007.com