Skip to content

[ntlmrelayx] finished_attacks socks command not showing all attacks #2028

@gabrielg5

Description

@gabrielg5

Configuration

impacket version: 0.12
Python version: 3.13

finished_attacks command only shows 1 relayed connection, instead than the 2 that I have.

Scenario

  • 1 target
  • Relay 2 different connections

I think it is related with changes done in the context of --keep-relaying flag addition. Targets management changed in that PR -> #1741

Debug Output With Command String

──(kali㉿kali)-[~/Desktop/impacket/examples]
└─$ python ntlmrelayx.py -t MY_TARGET -smb2support --keep-relaying -socks
Impacket v0.13.0.dev0+20250822.91036.df812bfd - Copyright Fortra, LLC and its affiliated companies 

[...]

[*] Servers started, waiting for connections
Type help for list of commands
ntlmrelayx> [*] HTTPD(80): Client requested path: /
[*] HTTPD(80): Client requested path: /
[*] HTTPD(80): Connection from MY_VICTIM controlled, attacking target smb://MY_TARGET
[*] HTTPD(80): Client requested path: /
[*] HTTPD(80): Authenticating against smb://MY_TARGET as MY_DOMAIN/ADMINISTRATOR SUCCEED
[*] SOCKS: Adding MY_DOMAIN/ADMINISTRATOR@MY_TARGET(445) to active SOCKS connection. Enjoy

ntlmrelayx> socks
Protocol  Target         Username                    AdminStatus  Port
--------  -------------  --------------------------  -----------  ----
SMB       MY_TARGET      MY_DOMAIN/ADMINISTRATOR     TRUE         445
ntlmrelayx> finished_attacks
smb://MY_DOMAIN\ADMINISTRATOR@MY_TARGET
ntlmrelayx> [*] HTTPD(80): Client requested path: /
[*] HTTPD(80): Client requested path: /
[*] All targets processed!
[*] HTTPD(80): Connection from MY_VICTIM controlled, attacking target smb://MY_TARGET
[*] HTTPD(80): Client requested path: /
[*] HTTPD(80): Authenticating against smb://MY_TARGET as MY_DOMAIN/TEST SUCCEED
[*] SOCKS: Adding MY_DOMAIN/TEST@MY_TARGET(445) to active SOCKS connection. Enjoy

ntlmrelayx> socks
Protocol  Target         Username                    AdminStatus  Port
--------  -------------  --------------------------  -----------  ----
SMB       MY_TARGET      MY_DOMAIN/ADMINISTRATOR     TRUE         445
SMB       MY_TARGET      MY_DOMAIN/TEST              FALSE        445
ntlmrelayx> finished_attacks
smb://MY_DOMAIN\TEST@MY_TARGET
ntlmrelayx> 

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugUnexpected problem or unintended behavior

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions