smb
The smb identity: Server Message Block. Every field and what is required.
smb is the Server Message Block protocol (MS-SMB2). The target is host:port (default 445). The step sends and receives raw bytes as hex, and the session persists across steps, so a solution can stage an exchange and continue it.
Write it in English
A step reads as sentences, the same byte-session forms as tcp: send hex "<hex>" (or send hex of "<text>"), receive <n> bytes, receive until "<hex>", port <n>, timeout <n> seconds, close the connection, and expect ....
Fields
smb uses the byte-session fields from tcp:
| field | required | what it does |
|---|---|---|
send | yes | the bytes to send, as hex or hex "text"; empty when a step only reads |
recv | how many bytes to read at most | |
recv_until | stop reading once this hex marker appears | |
timeout | how long to wait, in seconds | |
close | end the session after this step | |
capture | pull a value out of the received hex for later steps |
Example
smb negotiate
# send an SMB2 negotiate and look for the response
send hex "fe534d4240...0000000000000000"
recv 4096
expect "fe534d42" in the response