From fcf704558567d14ad305d7052173b6924426142f Mon Sep 17 00:00:00 2001
From: secf00tprint <secf00tprint@gmail.com>
Date: Thu, 19 Nov 2020 21:57:34 +0000
Subject: [PATCH] add smb data exfiltration memo

---
 2020_11_18_55th/smb_data_exfiltration_windows.md |   16 ++++++++++++++++
 1 files changed, 16 insertions(+), 0 deletions(-)

diff --git a/2020_11_18_55th/smb_data_exfiltration_windows.md b/2020_11_18_55th/smb_data_exfiltration_windows.md
new file mode 100644
index 0000000..9fabd2f
--- /dev/null
+++ b/2020_11_18_55th/smb_data_exfiltration_windows.md
@@ -0,0 +1,16 @@
+# Data exfiltration
+
+# SMB
+
+# Impacket 
+
+https://github.com/SecureAuthCorp/impacket
+https://www.openhub.net/p/SecureAuthCorp-impacket
+
+# Demo
+
+- Local User
+- AD User
+
+# Switches SMB1 allowed / not allowd 
+- cmd -> optionalfeatures.exe -> SMB

--
Gitblit v1.10.0