automatic module_metadata_base.json update

Author: jenkins-metasploit

db/modules_metadata_base.json

@@ -53965,6 +53965,53 @@
       }
     ]
   },
+  "auxiliary_server/relay/smb_to_ldap": {
+    "name": "Microsoft Windows SMB to LDAP Relay",
+    "fullname": "auxiliary/server/relay/smb_to_ldap",
+    "aliases": [],
+    "rank": 300,
+    "disclosure_date": null,
+    "type": "auxiliary",
+    "author": [
+      "Spencer McIntyre",
+      "Christophe De La Fuente"
+    ],
+    "description": "This module supports running an SMB server which validates credentials, and\n          then attempts to execute a relay attack against an LDAP server on the\n          configured RELAY_TARGETS hosts.\n\n          It is not possible to relay NTLMv2 to LDAP due to the Message Integrity Check\n          (MIC). As a result, this will only work with NTLMv1. The module takes care of\n          removing the relevant flags to bypass signing.\n\n          If the relay succeeds, an LDAP session to the target will be created. This can\n          be used by any modules that support LDAP sessions, like `admin/ldap/rbcd` or\n          `auxiliary/gather/ldap_query`.\n\n          Supports SMBv2, SMBv3, and captures NTLMv1 as well as NTLMv2 hashes.\n          SMBv1 is not supported - please see https://github.com/rapid7/metasploit-framework/issues/16261",
+    "references": [],
+    "platform": "",
+    "arch": "",
+    "rport": 389,
+    "autofilter_ports": [],
+    "autofilter_services": [],
+    "targets": null,
+    "mod_time": "2025-03-13 15:24:23 +0000",
+    "path": "/modules/auxiliary/server/relay/smb_to_ldap.rb",
+    "is_install_path": true,
+    "ref_name": "server/relay/smb_to_ldap",
+    "check": false,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "Reliability": [
+        "repeatable-session"
+      ],
+      "SideEffects": [
+        "ioc-in-logs",
+        "account-lockouts"
+      ]
+    },
+    "session_types": false,
+    "needs_cleanup": false,
+    "actions": [
+      {
+        "name": "CREATE_LDAP_SESSION",
+        "description": "Create an LDAP session"
+      }
+    ]
+  },
   "auxiliary_server/socks_proxy": {
     "name": "SOCKS Proxy Server",
     "fullname": "auxiliary/server/socks_proxy",