SMBv3 Server

Sorry, not available in this language yet

English
日本語
简体中文

AppSec SaaS Platform | Integrated, cloud-based AST solution optimized for development and DevSecOps teams.
AppSec IDE Plug-ins | Secure code as you write it in your IDE
Software Risk Management | Manage application security programs at enterprise scale
DevSecOps Integrations | Integrate AppSec tools into DevOps workflows

Static Analysis (SAST) | Address security and quality defects in code as it's being developed
Software Composition Analysis (SCA) | Secure and manage open source risks in applications and containers
Interactive Analysis (IAST) | Automate web security testing within your DevOps pipelines
Dynamic Analysis (DAST) | Continuous web application security testing in production.
Penetration Testing | Identify business-critical vulnerabilities with on-demand testing expertise.
Protocol Fuzzing | Identify defects and zero-day vulnerabilities in services and protocols

Program Strategy & Planning | Measure, scale, and optimize your AppSec program
Threat & Risk Assessments | Understand and address internal and external security risks
Security Training | Equip development teams with the skills they need to produce more secure software
Implementation & Deployment | Optimize utilization, management and deployment of AppSec tools
Security Testing Services | On-demand AppSec testing resources and expertise

Open Source & Security Audits | Comprehensive technical due diligence services for M&A

AI-generated code | Harness the power of AI coding assistants while managing the risks
API Security Testing | Manage software risks with a holistic API security testing program.
AppSec Consolidation | Simplify your application security program
Application Security Testing | Solutions to address security risks at all stages of the application life cycle.
DevSecOps | Solutions to help shift security left without slowing down your development teams.
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end.
Manage AppSec Risk | Scale your application security program without increasing complexity or adding friction.
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud
Open Source License Compliance | Effective solutions for ensuring open source license compliance
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP.
Quality & Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators

Dev and DevOps Teams | Build secure software while maintaining developer productivity and pipeline velocity.
Security Teams | Align people, processes, and technology to minimize software risk and transform your business.
Legal Teams | Solutions to protect your IP and manage risk.

Financial Services | Protect sensitive customer and financial data from rapidly evolving security threats.
IoT & Embedded | Ensure your embedded and IoT devices are safe, secure, and reliable.
Automotive | Build software security & reliability into the modern connected car.
Telecommunications | Create seamless and safe mobile experiences, from silicon to software.
Aerospace & Defense | Solutions for automating mission-critical development.
Public Sector | Application security for government agencies and their suppliers.
Medical Device | Safeguard medical devices and applications.

SMB3 Server Test Suite Data Sheet

Test Suite:

SMB3 Server Test Suite

Direction:

Server

In computer networking, Server Message Block 3 operates as an application-layer network protocol on the top of TCP. SMB3 is used to provide shared access to files, printers, and miscellaneous services. SMB3 also implements an authenticated inter-process communication (IPC) mechanism. SMB3.0, SMB3.0.2 and SMB3.1.1 dialect negotiations are supported.

Used specifications

Specification

Title

Notes

MS-SMB2

Server Message Block (SMB) Protocol Versions 2 and 3

Suite supports SMB3.0, SMB3.0.2 and SMB3.1.1 dialects

MS-SMB

Server Message Block (SMB) Protocol Specification

MS-NLMP

NT LAN Manager (NTLM) Authentication Protocol Specification

MS-SPNG

Simple and Protected Generic Security Service Application Program Interface Negotiation Mechanism (SPNEGO) Protocol Extensions

MS-RPCE

Remote Procedure Call Protocol Extensions

Based on Open Group DCE/RPC

MS-FSCC

File System Control Codes

Control codes are supported in Create messages. Other FSCC specific contents are used only in anomalization

MS-SWN

Remote Direct Memory Access (RDMA) Transport Protocol Specification

Supported only in anomalies

RFC1002

Protocol Standard for a NetBIOS Service on a TCP/UDP Transport

RFC1510

The Kerberos Network Authentication Service (V5)

RFC1964

The Kerberos Version 5 GSS-API Mechanism

RFC2743

Generic Security Service Application Program Interface Version 2, Update 1

RFC4178

The Simple and Protected Generic Security Service Application Program Interface (GSS-API) Negotiation Mechanism

Tool-specific information

Tested messages

Specifications

Negotiate Request, SMB3

MS-SMB2

Negotiate Request, SMB1

MS-SMB

Session Setup Request

MS-SMB2

Logoff Request

MS-SMB2

Tree Connect Request

MS-SMB2

Tree Disconnect Request

MS-SMB2

Create Request

MS-SMB2

Close Request

MS-SMB2

Flush Request

MS-SMB2

Read Request

MS-SMB2

Write Request

MS-SMB2

Lock Request

MS-SMB2

Ioctl Request

MS-SMB2

Cancel Request

MS-SMB2

Echo Request

MS-SMB2

Query Directory Request

MS-SMB2

Change Notify Request

MS-SMB2

Query Info Request

MS-SMB2

Set Info Request

MS-SMB2

Transform Header and Encryption (NTLM and NTLM over GSS-API)

MS-SMB2

Untested messages

Specifications

Oplock Break Acknowledgment

MS-SMB2

Lease Break Acknowledgment

MS-SMB2

Transform Header and Encryption (Kerberos over GSS-API)

MS-SMB2

Test tool general features

Fully automated black-box negative testing
Ready-made test cases
Written in Java(tm)
GUI command line remote interface modes
Instrumentation (health-check) capability
Support and maintenance
Comprehensive user documentation
Results reporting and analysis