Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhanced MSSQLShell in NTLMRelayX leveraging TcpShell (as in SMB an… #1613

Closed
wants to merge 0 commits into from

Conversation

gabrielg5
Copy link
Collaborator

This PR fixes #1612

Followed the same approach as it was followed in SMB / LDAP interactive shells.

Leveraging TcpShell to avoid mixing messages with the relay

@gabrielg5 gabrielg5 self-assigned this Sep 12, 2023
@gabrielg5 gabrielg5 added the in review This issue or pull request is being analyzed label Sep 12, 2023
@gabrielg5 gabrielg5 changed the title * Enhanced MSSQLShell in NTLMRelayX leveraging TcpShell (as in SMB an… Enhanced MSSQLShell in NTLMRelayX leveraging TcpShell (as in SMB an… Sep 12, 2023
@gabrielg5
Copy link
Collaborator Author

Can you also take a look at it @sploutchy please, as this will change how to interact with the shell?
thanks!

@sploutchy
Copy link
Contributor

Hi @gabrielg5,
Thanks for the fix and sorry my implementation was a bit botchy.
I like the approach with a tcpshell, makes it easier.
One problem I noticed is that the error output still comes in the ntlmrelayx window.
image

Cheers

@gabrielg5
Copy link
Collaborator Author

Yes, you are right! That behavior is the same for all 3 interactive shells (SMB, MSSQL, LDAP)

I've been checking how all that is implemented and think I have a solution to try. However I think will be creating a new PR for that as it will be impacting more than just the sql shell

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in review This issue or pull request is being analyzed
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[NTLMRelayX] Interactive SQL shell breaks relay output
2 participants