NetExec icon indicating copy to clipboard operation
NetExec copied to clipboard

Module WCC logs arbitrary highlight messages

Open NeffIsBack opened this issue 1 year ago • 0 comments

Describe the bug When executing the WCC module there are a lot of TimeGenerated => <SOME_TIMESTAMP> logged as highlight messages

To Reproduce Steps to reproduce the behavior i.e.: Command: netexec smb -u username -p password -M wcc Resulted in:

netexec smb 10.10.10.10 -u username -p password -x "whoami"
SMB         10.10.10.10  445    DC01             [*] Windows 10.0 Build 17763 x64 (name:DC01) (domain:domain) (signing:True) (SMBv1:False)
SMB         10.10.10.10  445    DC01             [+] domain\username:password
SMB         10.10.10.10  445    DC01             TimeGenerated => 202403142132.114000-000
SMB         10.10.10.10  445    DC01             TimeGenerated => 202403142132.188000-000
SMB         10.10.10.10  445    DC01             TimeGenerated => 202403142132.126000-000
SMB         10.10.10.10  445    DC01             TimeGenerated => 202403142132.143000-000
WCC        10.10.10.10  445    DC01             OK ...

Expected behavior Don't spam highlight messages

Screenshots Redacted at the moment as it is a client network

NetExec info

  • OS: Kali
  • Version of nxc: upstream
  • Installed from: github upstream

Additional context Debugging with @Marshall-Hallenbeck lead to lines smb.py:1106 which is the wmi function, so probably not related to only WCC, but to everything that uses that function. Last commit was done from @XiaoliChan, maybe he knows why that happens. Maybe a leftover log statement for debugging?

NeffIsBack avatar Mar 27 '24 13:03 NeffIsBack