smb
The smb identity: Server Message Block. Every field and what is required.
smb is the Server Message Block protocol (MS-SMB2). The target is host:port (default 445). The step sends and receives raw bytes as hex, and the session persists across steps, so a solution can stage an exchange and continue it.
Fields
smb uses the byte-session fields from tcp:
| field | required | what it does |
|---|---|---|
send | yes | the bytes to send, as hex or hex "text"; empty when a step only reads |
recv | how many bytes to read at most | |
recv_until | stop reading once this hex marker appears | |
timeout | how long to wait, in seconds | |
close | end the session after this step | |
capture | pull a value out of the received hex for later steps |
Example
smb negotiate
meaning: send an SMB2 negotiate and look for the response
send: fe534d4240...0000000000000000
recv: 4096
assert: contains "fe534d42"