1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
# FixTime
# Author: x4c1s
# Date: 16/11/25
# License: WTFPL
# Improved by muzaffar1337
#!/usr/bin/env python3
import requests
import subprocess
import argparse
import socket
from datetime import datetime
from urllib.parse import urlparse
from impacket.smbconnection import SMBConnection
from impacket.dcerpc.v5 import transport, epm
parser = argparse.ArgumentParser(description="Sync local time with remote Windows target")
parser.add_argument("-u", "--url", help="Target URL/IP")
parser.add_argument("-v", "--verbose", action="store_true", help="Verbose output")
parser.add_argument("--restore-ntp", action="store_true", help="Re-enable NTP and exit")
args = parser.parse_args()
def log(msg, force=False):
if args.verbose or force:
print(msg)
def restore_ntp():
try:
print("[*] Re-enabling NTP")
subprocess.run(["sudo", "timedatectl", "set-ntp", "on"], check=True, capture_output=True)
print("[+] NTP restored successfully")
except:
print("[-] Failed to restore NTP. Run with sudo")
def validate_url():
url = args.url
if not url.startswith(('http://', 'https://')):
url = f"http://{url}"
parsed = urlparse(url)
hostname = parsed.hostname or parsed.path.split(':')[0]
return url, hostname
def check_port(host, port):
try:
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.settimeout(3)
result = sock.connect_ex((host, port))
sock.close()
return result == 0
except:
return False
def get_time_winrm(url):
try:
log("[*] Trying WinRM (5985)")
r = requests.get(f"{url}:5985/WSMAN", timeout=5, verify=False)
if 'Date' in r.headers:
date_str = r.headers['Date']
remote_time = datetime.strptime(date_str, '%a, %d %b %Y %H:%M:%S %Z')
return remote_time.strftime('%Y-%m-%d %H:%M:%S')
except Exception as e:
log(f"[-] WinRM failed: {e}")
return None
def get_time_smb(host):
try:
log("[*] Trying SMB (445)")
conn = SMBConnection(host, host, timeout=5)
server_time = conn.getSMBServer().get_server_time()
conn.close()
return server_time.strftime('%Y-%m-%d %H:%M:%S')
except Exception as e:
log(f"[-] SMB failed: {e}")
return None
def get_time_rpc(host):
try:
log("[*] Trying RPC (135)")
string_binding = f"ncacn_ip_tcp:{host}[135]"
rpctransport = transport.DCERPCTransportFactory(string_binding)
rpctransport.set_connect_timeout(5)
dce = rpctransport.get_dce_rpc()
dce.connect()
dce.bind(epm.MSRPC_UUID_PORTMAP)
# Get current UTC time (RPC binding establishes connection timing)
current = datetime.utcnow()
dce.disconnect()
return current.strftime('%Y-%m-%d %H:%M:%S')
except Exception as e:
log(f"[-] RPC failed: {e}")
return None
def get_remote_time(url, host):
# Try WinRM
if check_port(host, 5985):
log("[+] Port 5985 (WinRM) is open", True)
time = get_time_winrm(url)
if time:
return time, "WinRM"
# Try SMB
if check_port(host, 445):
log("[+] Port 445 (SMB) is open", True)
time = get_time_smb(host)
if time:
return time, "SMB"
# Try RPC
if check_port(host, 135):
log("[+] Port 135 (RPC) is open", True)
time = get_time_rpc(host)
if time:
return time, "RPC"
print("[-] No accessible services found (5985, 445, 135)")
return None, None
def sync_time(time_str):
try:
log("[*] Disabling NTP", True)
subprocess.run(["sudo", "timedatectl", "set-ntp", "off"], check=True, capture_output=True)
log(f"[*] Setting time to {time_str}", True)
subprocess.run(["sudo", "date", "-s", time_str], check=True, capture_output=True)
print("[+] Time synced successfully")
except:
print("[-] Failed to sync time. Run with sudo")
def main():
if args.restore_ntp:
restore_ntp()
return
if not args.url:
parser.error("-u/--url is required unless using --restore-ntp")
url, host = validate_url()
time, method = get_remote_time(url, host)
if time:
print(f"[+] Time retrieved via {method}: {time}")
sync_time(time)
else:
print("[-] Failed to fetch remote time")
if __name__ == "__main__":
requests.packages.urllib3.disable_warnings()
main()
|
