smb2-client 0.2.5

Minimal async SMB2 client in pure Rust: negotiate, NTLMv2 (SPNEGO) session setup, message signing (HMAC-SHA256 / AES-CMAC), tree connect, named-pipe and file I/O — no FFI.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

# smb2-client

[![crates.io](https://img.shields.io/crates/v/smb2-client.svg)](https://crates.io/crates/smb2-client)
[![docs.rs](https://img.shields.io/docsrs/smb2-client)](https://docs.rs/smb2-client)
[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)

A minimal, async, pure-Rust **SMB2 client** — **no FFI**, no `windows` crate — so it connects
to Windows file servers from any platform. Built on [`ntlmssp`](https://crates.io/crates/ntlmssp)
for authentication.

## Features

- SMB2 NEGOTIATE — offers dialects **2.0.2 + 2.1.0**; the server picks the highest, so this
  reaches Server 2008 through 2025. **SMB 3.x is not offered yet** (see Scope). **NTLMv2 session
  setup** wrapped in SPNEGO, from a password or an NT hash (**pass-the-hash**).
- Message **signing**: HMAC-SHA256 over the offered 2.x dialects (live-validated).
  AES-CMAC / SP800-108 KDF code exists for SMB 3.0.x but is **not validated** — the
  client never reaches that branch today because 3.x isn't offered.
- TREE_CONNECT, named-pipe open/read/write (the transport under DCE/RPC-over-SMB), and
  disk-file read (for pulling command output back over `C$`).
- A small SMB2 **server** side (`server`) sufficient to stand up an NTLM capture endpoint.

## Example

```rust
use smb2_client::SmbClient;

# async fn run() -> Result<(), Box<dyn std::error::Error>> {
let mut c = SmbClient::connect("fileserver:445").await?;
c.login("fileserver", "CORP", "alice", "P@ssw0rd").await?;
c.tree_connect(r"\\fileserver\IPC$").await?;
let pipe = c.open_pipe("srvsvc").await?;   // now drive DCE/RPC over the pipe
# Ok(()) }
```

Pairs with [`dcerpc`](https://crates.io/crates/dcerpc) for SAMR / LSAT / DRSUAPI etc. over the
named-pipe transport — together they're the "spec-vector captures for Rust" that didn't previously exist.

## Scope

Client-focused SMB2 for automation/tooling (auth, signing, pipes, file read). Not a general
file-server or a full SMB3 encryption implementation. NTLMv2 only (no NTLMv1/LM).

## License

MIT © icedracon. Extracted from [ADhammer](https://github.com/icedracon/adhammer).