Skip to content

v1.4

Latest
Compare
Choose a tag to compare
@dcollaoa dcollaoa released this 21 Jan 22:55

CHANGELOG (v1.4)

  1. Fixed share permissions check

    • Previously, if listPath(share_name, "/") failed (e.g. due to "Access Denied"), the script assumed no read access. Now, we try both "/" and "" as potential roots, and only conclude can_read = False if both fail with an access-related error. This fix helps avoid “false negatives” for shares that block listing the root folder but still allow reading inside subfolders.
  2. --hidden-read argument

    • Adds a hidden_read boolean in both download_files() and download_file().
    • If hidden_read is True, any juicy file is silently read (no user prompt) and stored in a global list called hidden_read_data.
    • At the end of the script, we save all that content to hidden_read_YYYYMMDD_HHMMSS.json, allowing you to scrape credentials or other details from these “juicy” files manually later.
  3. File hash inside --metadata

    • Introduced a compute_file_hash() function that calculates an MD5 hash for each file’s content.
    • If --metadata is used, we add this "hash" field to the file’s metadata, making it easier to detect duplicates or changes over time.

Full Changelog: https://github.com/dcollaoa/smbspider/commits/v1.4