o j @s`dZddlmZddlZddlZddlZddlmZddlmZddl m Z ddl m Z ddl mZmZmZGd d d Zed kr.eejejd d ZejddddejddddejddddejdddddedZejddd d!ejd"dd#dejd$dd%dejd&d'd(d!ed)Zejd*d+d,d!ejd-d+d.d!eejd/kreed/eZe ej!ej"e ej#\Z$Z%Z&Z#e$durd0Z$ej'rej'Z#ej(rd e_)e&d0kre%d0krej*sej+sej(sed1Z&z eee%e&e$e#,WdSe-y-Z.ze/j0ej1krddl2Z2e23e4e5e.WYdZ.[.dSdZ.[.wwdS)2z mssql_cbt_check.py Check whether Channel Binding Token (CBT) is enforced on a MSSQL server. Usage: mssql_cbt_check.py [domain/]username[:password]@target [-port PORT] [-debug] Writen by @Defte_ )print_functionN)getpass)version)logger) parse_target)MSSQLTDS_ENCRYPT_REQTDS_ENCRYPT_OFFc@s,eZdZddZddZddZddZd S) MSQLCBTCheckcCs.||_||_||_||_t|j|_||_dS)N)usernamepassworddomaintargetintportoptions)selfrr r r rr/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/../../../bin/checkMSSQLStatus.py__init__s   zMSQLCBTCheck.__init__cCst|j|jd}||S)N)rrrconnect)rconnrrr _new_conn"szMSQLCBTCheck._new_connc CsX|j}|jr|jd|j|j|j|j|j|jddd|d S|j d|j|j|j|jd|dS)NT)useCachecbt_fake_value)useWindowsAuthr) rk kerberosLoginr r r hashesaesKeydc_iplogin)rrcbtoptsrrr_login's0zMSQLCBTCheck._loginc Cstd|jd|jz!|}|}|d}|tks,|tks,td|WdSWntyL}zt d|tdWYd}~dSd}~wwtdz|}|j |dd}|Wnty~}zt d |d }WYd}~nd}~wwtd |rd nd tdz|}|j |dd}|Wnty}zt d|d }WYd}~nd}~wwtd |rd nd |r|rtddS|r|stddS|s|stddSdSdS)Nz([*] Checking Channel Binding status on: : Encryptionz?[!] Encryption not activated nor required. Channel Binding off.zpreLogin failed: z/[-] Prelogin failed, cannot check MSSQL status.zF [*] First try: TDS computes the real Channel Binding Token (cbt=None))r#zFirst try exception: Fz Result: SuccessFailurez7 [*] Second try: invalid Channel Binding Token (cbt='')zSecond try exception: zW [+] The two authentications succeded. Channel Binding not required (CBT not enforced).z[ [!] First authentication succeded, second failed. Channel Binding required (CBT enforced).z9 [!] The two authentications failed, invalid credentials.) printrrrpreLoginrr disconnect Exceptionloggingdebugr%)rr prelogin_respencefirst_ok second_okrrrrunBsZ     zMSQLCBTCheck.runN)__name__ __module__ __qualname__rrr%r6rrrrr s  r __main__T)add_helprstorez6[[domain/]username[:password]@])actionhelpz-portizPort MSSQL (default: 1433))defaultr>z-debug store_truezTurn DEBUG output ONz-tsz&Adds timestamp to every logging output timestamp)r=r>destauthenticationz-hashesz LMHASH:NTHASHz NTLM hashes)metavarr>z-no-passz'Don't ask for password (useful with -k)z-kz3Use Kerberos authentication (ccache via KRB5CCNAME)z-aesKeyzhex keyz&AES key for Kerberos (128 or 256 bits) connectionz-dc-ipz ip addresszIP of the domain controllerz -target-ipz3IP of the target (overrides target name resolution)rz Password: )6__doc__ __future__rsysr/argparserimpacketrimpacket.examplesrimpacket.examples.utilsr impacket.tdsrrr r r7r+BANNERArgumentParserparser add_argumentadd_argument_groupgrouplenargv print_helpexit parse_argsrinitrAr0rr r r target_ipr rrno_passr6r.r3 getLoggerlevelDEBUG traceback print_excerrorstrrrrrsd      T     "