I've been very impressed with this module! It provides all types of functionallity for working with the Windows NetBIOS shares. Its amazing what information you can get with a simple connection to the IPC$ share. I've used this module to create a script that will test the password strength of networks I administer with a brute-force attack method. If a pass can be cracked in under 15 minutes, its changed. It has great functionallity allowing you to pull back user information, share information, password policies, Transport information, etc. etc. Deffinitely recommend taking a look at this!

I would, however, like to see a module that is able to connect to the windows SMB shares and send and receive packets with out using the standard Windows API to do so. The reason being is that there is a hefty timeout delay for an incorrect password.

Per request, here are some source examples of how this can be useful:

1.) Make a connection to the IPC$ share.

if (ConnectIPC($server, "", "", "")) {
    $this->{f_resultsTB}->AppendText("Null Session to $server successf
+ul.  \n");
    # Now try getting some information
    $this->{f_resultsTB}->AppendText("Connecting to Registry...\n");
    $this->{f_resultsTB}->AppendText("Succesful!\n");
    \&RegConnect($server);
[download]

What have we done here? We've established a connection to the server's ($server) IPC$ share with null credentials, i.e., ConnectIPC(server, user, pass, domain), with null for user, pass, and domain.

2.) Enumerate users

$this->{f_resultsTB}->AppendText("[Local Users]  \n");
    @users = GetLocalUsers($server);
    if (@users) {
        foreach (@users) {
            $this->{f_resultsTB}->AppendText("$_  \n");
            $user = (split(/:/,$_))[1];
            $l_user = (split(/\\/,$user))[1];
            \&GetUserInfo($server,$l_user);
        } 
    }
    else {
        $this->{f_resultsTB}->AppendText("Did not retrieve local users
+.  \n");
    }
[download]

Its important to recoginize that this should be within the if(ConnectIPC(...)) block. I will post the whole code bellow.

if (ConnectIPC($server, "", "", "")) {
    $this->{f_resultsTB}->AppendText("Null Session to $server successf
+ul.  \n");
    # Now try getting some information
    $this->{f_resultsTB}->AppendText("Connecting to Registry...\n");
    $this->{f_resultsTB}->AppendText("Succesful!\n");
    \&RegConnect($server);

        $this->{f_resultsTB}->AppendText("[Local Users]  \n");
    @users = GetLocalUsers($server);
    if (@users) {
        foreach (@users) {
            $this->{f_resultsTB}->AppendText("$_  \n");
            $user = (split(/:/,$_))[1];
            $l_user = (split(/\\/,$user))[1];
            \&GetUserInfo($server,$l_user);
        } 
    }
    else {
        $this->{f_resultsTB}->AppendText("Did not retrieve local users
+.  \n");
    }
}
else {
        $this->{f_resultsTB}->AppendText("Could not establish null ses
+sion with $server.  \n");
}
[download]

I apologize, this code has been made for Visual Perl.NET, hopefully some of you will find that helpful. Here is a link to the actual Perl script I used to help me figure out the module: Null.pl

---

---

• Are you posting in the right place? Check out Where do I post X? to know for sure.
• Posts may use any of the Perl Monks Approved HTML tags. Currently these include the following:

  <code> <a> <b> <big> <blockquote> <br /> <dd> <dl> <dt> <em> <font> <h1> <h2> <h3> <h4> <h5> <h6> <hr /> <i> <li> <nbsp> <ol> <p> <small> <strike> <strong> <sub> <sup> <table> <td> <th> <tr> <tt> <u> <ul>

• Snippets of code should be wrapped in <code> tags not <pre> tags. In fact, <pre> tags should generally be avoided. If they must be used, extreme care should be taken to ensure that their contents do not have long lines (<70 chars), in order to prevent horizontal scrolling (and possible janitor intervention).
• Want more info? How to link or How to display code and escape characters are good places to start.