SMBv2 Signing Configuration Checker

Determines the message signing configuration in SMBv2 servers for all supported dialects.

The script sends a SMB2_COM_NEGOTIATE request for each SMB2/SMB3 dialect and parses the security mode field to determine the message signing configuration of the SMB server.

SMB signing allows the recipient of SMB packets to confirm their authenticity and helps prevent man in the middle attacks against SMB. SMB signing can be configured in one of three ways: disabled entirely (least secure), enabled, and required (most secure).

References:

• https://msdn.microsoft.com/en-us/library/cc246561.aspx