rapid7/ruby_smb

View on GitHub
examples/read_file_encryption.rb

Summary

Maintainability
A
0 mins
Test Coverage
#!/usr/bin/ruby

# This example script is used for testing the reading of a file.
# It will attempt to connect to a specific share and then read a specified file.
# Example usage: ruby read_file.rb 192.168.172.138 msfadmin msfadmin TEST_SHARE short.txt
# This will try to connect to \\192.168.172.138\TEST_SHARE with the msfadmin:msfadmin credentials
# and read the file short.txt

require 'bundler/setup'
require 'ruby_smb'

address  = ARGV[0]
username = ARGV[1]
password = ARGV[2]
share    = ARGV[3]
filename = ARGV[4]
path     = "\\\\#{address}\\#{share}"

sock = TCPSocket.new address, 445
dispatcher = RubySMB::Dispatcher::Socket.new(sock)

# To require encryption on the server, run this in an elevated Powershell:
# C:\> Set-SmbServerConfiguration -EncryptData $true

# To enable per-share encryption on the server, run this in an elevated Powershell:
# C:\ Set-SmbServerConfiguration -EncryptData $false
# C:\ Set-SmbShare -Name <share name> -EncryptData 1

# For this encryption to work, it has to be SMBv3. By only setting smb3 to true,
# we make sure the server will negotiate this version, if it supports it
opts = {
  smb1: false,
  smb2: false,
  smb3: true,
  username: username,
  password: password,
}

# By default, the client uses encryption even if it is not required by the server. Disable this by setting always_encrypt to false
#opts[:always_encrypt] = false

client = RubySMB::Client.new(dispatcher, opts)
protocol = client.negotiate
status = client.authenticate

begin
  tree = client.tree_connect(path)
rescue StandardError => e
  puts "Failed to connect to #{path}: #{e.message}"
end

file = tree.open_file(filename: filename)

data = file.read
puts data
file.close