Discover SMB Vulnerabilities

The video tutorial explains how to check if SMB signing is enabled on a network using the Finger tool. It guides viewers through navigating directories, running the Run Finger Dot PY script, and specifying a subnet for scanning. The tutorial concludes with analyzing the results to determine which machines have SMB signing enabled or disabled, allowing for NTLM B2 hash relaying on machines where SMB signing is false.

Why is it important to ensure SMB signing is not enabled on a network?

• It improves network stability.

• It allows for faster data transfer.

• It enables the relaying of NTLM hashes.

• It prevents unauthorized access to network resources.

What is the first step in using the 'finger' tool to check SMB signing?

• Navigate to the Tools directory.

• Run the Python script directly.

• Specify the subnet mask.

• Install the finger tool.

Which command syntax is used to run the 'finger' tool?

• python finger.py

• run finger.py

• python run_finger.py

• finger.py run

What does it mean if SMB signing is set to 'false' on a machine?

• The machine has a firewall enabled.

• The machine is not connected to the network.

• The machine allows NTLM hash relaying.

• The machine is secure from NTLM hash relaying.

What is the significance of the subnet 192.168.61.0/24 in the context of the 'finger' tool?

• It is the default subnet for all networks.

• It represents a Class B network.

• It is used to configure the tool settings.

• It specifies the range of IP addresses to scan.