Relayer - SMB Relay Attack Script.

Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing.

Relayer creates and delivers the payload leveraging several tools, Users can select which methods or tools works best:

• Unicorn from trustedsec see https://github.com/trustedsec/unicorn

• Ps1encode (https://github.com/CroweCybersecurity/ps1encode) to generate and encode a powershell based metasploit payload using an sct (COM Scriptlet) file. Relayer will automatically create a webserver using python to stage the payload.

• PowerSploit (https://github.com/PowerShellMafia/PowerSploit)

USE

Run install_req.sh to validate dependencies and install missing ones.

Once everything is ready, usage is simple, simply run as root:

./relayer.sh

How does the Script Work

Script runs the following Steps:

• Scan for SMB Systems on Target Network and List those with SMB signing Disabled
• User selects system to Relay the authentication attempts to
• User selects where to set the Listener for incoming connections
• User selects payload
• Relayer creates payload and sets up Responder and SMBRelayX
• Wait for connection attempts to your attacking machine and check Listener

NOTE

Only run this tool where you have permission to do so.

Credits

• chuckle by Craig S. Blackie - github.com/nccgroup/chuckle
• Unicorn (@HackingDave) - github.com/trustedsec/unicorn
• ps1encode by CroweCybersecurity - github.com/crowecybersecurity/ps1encode
• One-Lin3r by D4Vinci - github.com/D4Vinci/One-Lin3r
• PowerSploit by PowerShellMafia - github.com/PowerShellMafia/PowerSploit