Skip to content

Add SMB Server Functionality #537

Description

@j-shomo

When making exploits targeting Windows Servers, there are times where it would be beneficial to server payloads via SMB. One recent example was a chain of CVE-2025-40536 + CVE-2025-40551 against SolarWinds Web Help Desk to achieve auth bypass and RCE. Stephen Fewer did a great job on this Metasploit module, https://github.com/rapid7/metasploit-framework/pull/20917/changes, loading a malicious DLL via SMB. Go-exploit doesn't currently support serving files via SMB, only via HTTP. This issue is for adding SMB support.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions