Script smb2-security-mode

Script types: hostrule
Categories: safe, discovery, default

Script Summary

Determines the message signing configuration in SMBv2 servers for all supported dialects.

The script sends a SMB2_COM_NEGOTIATE request for each SMB2/SMB3 dialect and parses the security mode field to determine the message signing configuration of the SMB server.


Script Arguments

randomseed, smbbasic, smbport, smbsign

See the documentation for the smb library.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

See the documentation for the smbauth library.

Example Usage

  • nmap -p 445 --script smb2-security-mode <target>
  • nmap -p 139 --script smb2-security-mode <target>

Script Output

| smb2-security-mode:
|   3.1.1:
|_    Message signing enabled but not required



  • Paulino Calderon

License: Same as Nmap--See