DragonFlyBSD Kernel Audit
DF-2602 / run.log
← back to finding ↓ download raw
=== RUN B ===
=== FIX RUN ===
[srv] DF-2602 malicious SMB1 server (USER/no-encrypt) on 127.0.0.1:139
[srv] client connected
[srv] NBSSN request type=0x81 len=68 -> POSRESP
[srv] recv cmd=0x72 pid=1 tid=65535 uid=65535 mid=0 len=164
[srv] NEGOTIATE: USER mode, no encrypt -> plaintext-pw branch
  [srv] send 69-byte SMB (cmd=0x72)
[srv] recv cmd=0x73 pid=1 tid=65535 uid=65535 mid=1 len=87
  [srv] ss-req hex: ff 53 4d 42 73 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 01 00 ff ff 01 00 0d ff 00 00 00 00 04 10 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 47 00 4e 4f 44 4f 4d 00 49 4e 00 46 72 65 65 42 53 44 00 4e 45 54 53 4d 42 00
  [srv] send 41-byte SMB (cmd=0x73)
[srv] recv cmd=0x75 pid=1 tid=65535 uid=65535 mid=2 len=61
  [srv] send 47-byte SMB (cmd=0x75)