Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix NTLM field value access

Browse source 
The fields being checked for existence were not the same as the fields
being accessed.
This commit is contained in:
Justin Azoff 2020-01-08 11:40:28 -05:00
parent 3273169385
commit 80469a1fde
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/base/protocols/ntlm/main.zeek
View file

@ -65,9 +65,9 @@ event ntlm_challenge(c: connection, challenge: NTLM::Challenge) &priority=5
if ( challenge?$target_info ) if ( challenge?$target_info )
{ {
local ti = challenge$target_info; local ti = challenge$target_info;
if ( ti?$nb_domain_name ) if ( ti?$nb_computer_name )
c$ntlm$server_nb_computer_name = ti$nb_computer_name; c$ntlm$server_nb_computer_name = ti$nb_computer_name;
if ( ti?$dns_domain_name ) if ( ti?$dns_computer_name )
c$ntlm$server_dns_computer_name = ti$dns_computer_name; c$ntlm$server_dns_computer_name = ti$dns_computer_name;
if ( ti?$dns_tree_name ) if ( ti?$dns_tree_name )
c$ntlm$server_tree_name = ti$dns_tree_name; c$ntlm$server_tree_name = ti$dns_tree_name;