Linux command
impacket-sambapipe 命令
网络
复制后可按需替换文件名、目录或参数。
常用示例
Access named pipe
impacket-sambapipe '[domain]/[user]:[password]@[192.168.1.100]' '[pipename]'
Connect to pipe using NTLM hash
impacket-sambapipe -hashes ':[nthash]' '[domain]/[user]@[192.168.1.100]' '[pipename]'
Access pipe via Kerberos authentication
impacket-sambapipe -k -no-pass '[domain]/[user]@[target]' '[pipename]'
说明
impacket-sambapipe connects to named pipes on remote Windows systems via SMB. Named pipes are used for inter-process communication in Windows and many services expose functionality through pipes. This tool is useful for interacting with services that communicate through named pipes, testing pipe accessibility, or as part of more complex attack chains involving pipe communication.
参数
- -hashes _LMHASH:NTHASH_
- Use NTLM hashes for authentication instead of password
- -no-pass
- Don't ask for password (useful with -k)
- -k
- Use Kerberos authentication from ccache file
- -aesKey _KEY_
- AES key to use for Kerberos authentication
- -dc-ip _IP_
- IP address of the domain controller (for Kerberos)
FAQ
What is the impacket-sambapipe command used for?
impacket-sambapipe connects to named pipes on remote Windows systems via SMB. Named pipes are used for inter-process communication in Windows and many services expose functionality through pipes. This tool is useful for interacting with services that communicate through named pipes, testing pipe accessibility, or as part of more complex attack chains involving pipe communication.
How do I run a basic impacket-sambapipe example?
Run `impacket-sambapipe '[domain]/[user]:[password]@[192.168.1.100]' '[pipename]'` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -hashes _LMHASH:NTHASH_ do in impacket-sambapipe?
Use NTLM hashes for authentication instead of password