How to read metadata information from a file using SMB Protocol?

The problem is that the query_information() method doesn't exist in the SMB implementation you're using. You need to use the correct query method based on your SMB library.

Looking at your code, I'm guessing you're using Impacket. Here's how to fix it:

from impacket.smb3structs import FILE_BASIC_INFORMATION
current_file_open = Open(tree, full_file_path)
current_file_open.create(
 desired_access=FilePipePrinterAccessMask.GENERIC_READ,
 file_attributes=0x80, # FILE_ATTRIBUTE_NORMAL
 share_access=1,
 create_disposition=CreateDisposition.FILE_OPEN,
 create_options=0,
 impersonation_level=2
)
# Replace query_information() with query_info()
file_info = current_file_open.query_info(FILE_BASIC_INFORMATION)
last_write_time = file_info['LastWriteTime']
# To convert to a readable datetime
from datetime import datetime
from impacket.dcerpc.v5.dtypes import FileTime
timestamp = FileTime(last_write_time).get_datetime()
print(timestamp)

I ran into this same issue a while back. The key is that Impacket requires you to specify what kind of information you want with an information class like FILE_BASIC_INFORMATION.

If this doesn't work, let me know which specific SMB library you're importing from - there are several implementations with slightly different APIs.

Edit: If you're getting import errors with the above, make sure you have the full Impacket package installed. Try pip install impacket to get the latest version.

• python
• python-2.7
• rhel
• smb