SMB - Revision history

84.153.135.37 at 08:29, 31 January 2017

2017-01-31T08:29:45Z

Admin at 14:47, 28 January 2017

2017-01-28T14:47:39Z

Admin at 14:44, 28 January 2017

2017-01-28T14:44:02Z

Admin at 14:16, 28 January 2017

2017-01-28T14:16:11Z

Admin at 12:49, 28 January 2017

2017-01-28T12:49:06Z

77.181.223.192 at 10:24, 28 January 2017

2017-01-28T10:24:43Z

Admin: Created page with " → ''Related aricles:'' Fundamentals, Attack carriers ----"

2017-01-09T09:49:30Z

Created page with " → ''Related aricles:'' Fundamentals, Attack carriers ----"

New page

→ ''Related aricles:'' [[Fundamentals#High-level_overview|Fundamentals]], [[Attack carriers]]

----

@@ Line 10: / Line 10: @@
   smbspool smb://[user:pass]@server/share 0 user title 1 "" file
-→ ''Related aricles:'' [[Fundamentals#High-level_overview|Fundamentals]], [[Attack carriers]]
+→ ''Related articles:'' [[Fundamentals#High-level_overview|Fundamentals]], [[Attack carriers]]
 ----

← Older revision		Revision as of 14:47, 28 January 2017
Line 1:		Line 1:
−	[[File:SMB-deployment-channel.png\|thumb\|~~190px~~\|SMB ~~print job deployment~~]]	+	[[File:SMB-deployment-channel.png\|thumb\|180px\|Printing over SMB]]

	Server Message Block (SMB) is an application-layer network protocol for file and printer sharing originally developed by IBM in the mid-80s. It is the default method used by Windows based computers to share files and printers <ref>''[https://technet.microsoft.com/en-us/library/cc939973.aspx Common Internet File System]'', Microsoft TechNet Library</ref>. A free implementation is available with the [https://en.wikipedia.org/wiki/Samba_%28software%29 Samba] project. Some network printers bring their own SMB server – usually running on port 445/tcp – which, just like to [[LPD]], [[IPP]] and [[raw]] port 9100 printing, can be abused as a carrier for malicious PostScript or PJL files. In the Windows world, printing directly (without any ‘printer drivers’ interfering and converting the file) to a shared printer can be done as follows:		Server Message Block (SMB) is an application-layer network protocol for file and printer sharing originally developed by IBM in the mid-80s. It is the default method used by Windows based computers to share files and printers <ref>''[https://technet.microsoft.com/en-us/library/cc939973.aspx Common Internet File System]'', Microsoft TechNet Library</ref>. A free implementation is available with the [https://en.wikipedia.org/wiki/Samba_%28software%29 Samba] project. Some network printers bring their own SMB server – usually running on port 445/tcp – which, just like to [[LPD]], [[IPP]] and [[raw]] port 9100 printing, can be abused as a carrier for malicious PostScript or PJL files. In the Windows world, printing directly (without any ‘printer drivers’ interfering and converting the file) to a shared printer can be done as follows:

← Older revision		Revision as of 14:44, 28 January 2017
Line 1:		Line 1:
−	[[File:SMB-deployment-channel.png\|thumb\|~~Deployment of (malicious) print jobs via~~ SMB]]	+	[[File:SMB-deployment-channel.png\|thumb\|190px\|SMB print job deployment]]

	Server Message Block (SMB) is an application-layer network protocol for file and printer sharing originally developed by IBM in the mid-80s. It is the default method used by Windows based computers to share files and printers <ref>''[https://technet.microsoft.com/en-us/library/cc939973.aspx Common Internet File System]'', Microsoft TechNet Library</ref>. A free implementation is available with the [https://en.wikipedia.org/wiki/Samba_%28software%29 Samba] project. Some network printers bring their own SMB server – usually running on port 445/tcp – which, just like to [[LPD]], [[IPP]] and [[raw]] port 9100 printing, can be abused as a carrier for malicious PostScript or PJL files. In the Windows world, printing directly (without any ‘printer drivers’ interfering and converting the file) to a shared printer can be done as follows:		Server Message Block (SMB) is an application-layer network protocol for file and printer sharing originally developed by IBM in the mid-80s. It is the default method used by Windows based computers to share files and printers <ref>''[https://technet.microsoft.com/en-us/library/cc939973.aspx Common Internet File System]'', Microsoft TechNet Library</ref>. A free implementation is available with the [https://en.wikipedia.org/wiki/Samba_%28software%29 Samba] project. Some network printers bring their own SMB server – usually running on port 445/tcp – which, just like to [[LPD]], [[IPP]] and [[raw]] port 9100 printing, can be abused as a carrier for malicious PostScript or PJL files. In the Windows world, printing directly (without any ‘printer drivers’ interfering and converting the file) to a shared printer can be done as follows:

← Older revision		Revision as of 14:16, 28 January 2017
Line 1:		Line 1:
		+	[[File:SMB-deployment-channel.png\|thumb\|Deployment of (malicious) print jobs via SMB]]
		+
	Server Message Block (SMB) is an application-layer network protocol for file and printer sharing originally developed by IBM in the mid-80s. It is the default method used by Windows based computers to share files and printers <ref>''[https://technet.microsoft.com/en-us/library/cc939973.aspx Common Internet File System]'', Microsoft TechNet Library</ref>. A free implementation is available with the [https://en.wikipedia.org/wiki/Samba_%28software%29 Samba] project. Some network printers bring their own SMB server – usually running on port 445/tcp – which, just like to [[LPD]], [[IPP]] and [[raw]] port 9100 printing, can be abused as a carrier for malicious PostScript or PJL files. In the Windows world, printing directly (without any ‘printer drivers’ interfering and converting the file) to a shared printer can be done as follows:		Server Message Block (SMB) is an application-layer network protocol for file and printer sharing originally developed by IBM in the mid-80s. It is the default method used by Windows based computers to share files and printers <ref>''[https://technet.microsoft.com/en-us/library/cc939973.aspx Common Internet File System]'', Microsoft TechNet Library</ref>. A free implementation is available with the [https://en.wikipedia.org/wiki/Samba_%28software%29 Samba] project. Some network printers bring their own SMB server – usually running on port 445/tcp – which, just like to [[LPD]], [[IPP]] and [[raw]] port 9100 printing, can be abused as a carrier for malicious PostScript or PJL files. In the Windows world, printing directly (without any ‘printer drivers’ interfering and converting the file) to a shared printer can be done as follows:

@@ Line 1: / Line 1: @@
-In the Windows world, you can print directly (without any ‘printer drivers’ interfering and converting the file) on a shared printer as follows:
+Server Message Block (SMB) is an application-layer network protocol for file and printer sharing originally developed by IBM in the mid-80s. It is the default method used by Windows based computers to share files and printers <ref>''[https://technet.microsoft.com/en-us/library/cc939973.aspx Common Internet File System]'', Microsoft TechNet Library</ref>. A free implementation is available with the [https://en.wikipedia.org/wiki/Samba_%28software%29 Samba] project. Some network printers bring their own SMB server – usually running on port 445/tcp – which, just like to [[LPD]], [[IPP]] and [[raw]] port 9100 printing, can be abused as a carrier for malicious PostScript or PJL files. In the Windows world, printing directly (without any ‘printer drivers’ interfering and converting the file) to a shared printer can be done as follows:
-  C:\> copy /b file \\server\printer
+  C:\> copy /b file \\server\share
-...where <code>server</code> can be the printer itself, if it supports direct printing over SMB or a separate computer system and <code>printer</code> is the name of the printer share. In the UNIX world, you can directly send a file to a printer using either the ''smbclient'' or the ''smbspool'' command from the samba(7) suite:
+...where <code>server</code> is either the printer itself, if it supports direct printing over SMB, or a separate computer system connected to the device and <code>share</code> is the name of the printer share. In the UNIX world, directly sending a file to an SMB printer share can be achived with the ''smbclient'' or the ''smbspool'' command from the samba(7) suite:
-  smbclient [-N|-U user] //server/printer -c "print file"
+  smbclient [-N|-U user] //server/share -c "print file"
-  smbspool smb://[user:pass]@server/printer 0 user title 1 "" file
+  smbspool smb://[user:pass]@server/share 0 user title 1 "" file
-−
-−
-...
 → ''Related aricles:'' [[Fundamentals#High-level_overview|Fundamentals]], [[Attack carriers]]

← Older revision		Revision as of 10:24, 28 January 2017
Line 1:		Line 1:
		+	In the Windows world, you can print directly (without any ‘printer drivers’ interfering and converting the file) on a shared printer as follows:
		+
		+	C:\> copy /b file \\server\printer
		+
		+	...where <code>server</code> can be the printer itself, if it supports direct printing over SMB or a separate computer system and <code>printer</code> is the name of the printer share. In the UNIX world, you can directly send a file to a printer using either the ''smbclient'' or the ''smbspool'' command from the samba(7) suite:
		+
		+	smbclient [-N\|-U user] //server/printer -c "print file"
		+	smbspool smb://[user:pass]@server/printer 0 user title 1 "" file
		+
		+
		+	...

	→ ''Related aricles:'' [[Fundamentals#High-level_overview\|Fundamentals]], [[Attack carriers]]		→ ''Related aricles:'' [[Fundamentals#High-level_overview\|Fundamentals]], [[Attack carriers]]