azure_enum 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8524bf549464d7ae0cd68b6275d3e2aeba8860a0e25906e12fc49eaa5bf15cca
-  data.tar.gz: abb7629d5ffd9eb34804c1a6b4d7b77463af57ba1f9fb44acfd1fae19a42e8e0
+  metadata.gz: 6fdc83880b2b733e7d62d3547acddfaf63545d96fe971e40476141aff0478a41
+  data.tar.gz: f41d54b8da002a67330179fe77f64dd419fd7588494fa1f0b2bdd0384f92d98c
 SHA512:
-  metadata.gz: cc796bf48aec39d47d518c45044abd3fcf245f32cc6d4c5cea57349126bc73b48b75f7d0213d0d3e29fb22097df5c34672c99bdccd3a40ea317696c39f35ac41
-  data.tar.gz: 4437c39d381676c7b0bb3b3ac3610dab7d015c9590cdb2579c1f316be09c882735a51b0c032d0ef8332f1233a506623e33cb23f3b49dd60b1e7a60e8ebfcb148
+  metadata.gz: a3a494b52395dac75e451203506bd73b3f17613fbe28c4716837d6299363379df4220bdad19da13ce144d16f3ed3be499c0188fed1161301d975f89c23394d93
+  data.tar.gz: 601600c96b145a70524b6b390f30caee359451e49e9398fa7e04e242e5c9264936db14783d4b1c510a7c684361efab7d05728032289d82f733a17957bdcfd876

data/.rubocop.yml

@@ -1,2 +1,11 @@
 Style/StringLiterals:
   EnforcedStyle: double_quotes
+Metrics/LineLength:
+  Max: 100
+Metrics/MethodLength:
+  Max: 25
+
+Naming/AccessorMethodName:
+  Exclude:
+    - 'lib/azure_enum.rb'
+

data/README.md

@@ -1,6 +1,6 @@
 # AzureEnum
 
-This Ruby Gem assists in enumeration of Office 365 federated domains. This can allow you to identify domains associated with a business, not easily identified through traditional means.
+This Ruby Gem assists in enumeration of Office 365 or Exchange on-premise federated domains. This can allow you to identify domains associated with a business, not easily identified through traditional means. The examples below demonstrate how output can be interesting.
 
 The time this process takes can vary from a few seconds to a few minutes depending on the hosting server.
 ## Installation
@@ -37,6 +37,44 @@ lolzware.onmicrosoft.com
 lolware.net
 ```
 
+## Examples
+
+The following examples against some random domains demonstrate the tools capabilities.
+
+```
+$ azure_enum afl.com.au
+Please wait while the given domain is enumerated.
+afl.com.au
+aflnt.com.au
+ntthunder.com.au
+aflgoulburnmurray.com.au
+aflwesterndistrict.com.au
+aflgippsland.com.au
+aflyarraranges.com.au
+
+$ azure_enum kmart.com.au
+Please wait while the given domain is enumerated.
+kmart.com.au
+KASAsia.com
+
+$ azure_enum microsoft.com
+Please wait while the given domain is enumerated.
+corp.webtv.net
+microsoft.onmicrosoft.com
+surface.com
+bungie.com
+navic.tv
+middleeast.corp.microsoft.com
+wingroup.windeploy.ntdev.microsoft.com
+exchangecalendarsharing.com
+redmond.corp.microsoft.com
+northamerica.corp.microsoft.com
+bing.com
+corp.microsoft.com
+placeware.com
+(snip large list)
+```
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake test` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
@@ -46,6 +84,11 @@ To install this gem onto your local machine, run `bundle exec rake install`. To
 ## Contributing
 
 Bug reports and pull requests are welcome on GitHub at https://github.com/technion/azure_enum.
+Sometimes you get this output:
+
+    Unknown key: Max-Age = 31536000
+
+It seems to be a known bug in HTTPClient.
 
 ## License
 

data/exe/azure_enum

@@ -8,5 +8,10 @@ if (ARGV.length == 0)
 end
 
 puts "Please wait while the given domain is enumerated."
-puts AzureEnum.federated(ARGV[0])
+domains = AzureEnum.federated(ARGV[0])
+if (!domains || domains == [])
+  puts "Unfortunately this domain cannot be enumerated"
+  exit
+end
 
+puts domains

data/lib/azure_enum.rb

@@ -3,7 +3,9 @@ require "erb"
 require "httpclient"
 require "nokogiri"
 
+# Azure and Exchange federated domain enumerator
 module AzureEnum
+  # Class initializes with a domain name, and provides methods to interact with MS Autodiscover
   class Federation
     def initialize(domain)
       @domain = domain
@@ -11,6 +13,7 @@ module AzureEnum
       @redirect = nil
     end
 
+    # This will identify if the http:// redirect exists for the domain, usually per Office 365
     def check_redirect
       url = "http://autodiscover.#{@domain}/autodiscover/autodiscover.svc"
       begin
@@ -24,8 +27,8 @@ module AzureEnum
 
     def enumerate_autodisc
       httpsdomains = [
-        "https://#{@domain}/autodiscover/autodiscover.svc",
-        "https://autodiscover.#{@domain}/autodiscover/autodiscover.svc"
+        "https://autodiscover.#{@domain}/autodiscover/autodiscover.svc",
+        "https://#{@domain}/autodiscover/autodiscover.svc"
       ]
 
       httpsdomains.unshift @redirect if @redirect
@@ -36,47 +39,58 @@ module AzureEnum
           content = { "Content-Type" => "text/xml; charset=utf-8" }
           res = http.post(url, xml, content)
           @xml_text = res.content
-          return @xml_text
-          last
+          return true
+          # It is bad style to rescue "all" errors. However, it turns out there is a practically
+          # never ending list of ways this can fail. And "any" failure is reason to rule out the address
         rescue
           next
         end
       end
+      return false
     end
+
     def getdomains
-      fail "enumumerate_autodisc not called yet" unless @xml_text
-       tree = Nokogiri.parse(@xml_text)
-       tree.xpath(
-         "//ad:GetFederationInformationResponseMessage/ad:Response/ad:Domains/ad:Domain",
-         "ad": "http://schemas.microsoft.com/exchange/2010/Autodiscover")
-         .map do |node|
-            node.text
-       end
+      raise "enumumerate_autodisc not called yet" unless @xml_text
+      tree = Nokogiri.parse(@xml_text)
+      tree.xpath(
+        "//ad:GetFederationInformationResponseMessage/ad:Response/ad:Domains/ad:Domain",
+        ad: "http://schemas.microsoft.com/exchange/2010/Autodiscover"
+      ).map(&:text)
     end
 
     private
+
+    # This is an internal class just to pass the correct structure to ERB in get_xml
     class Discovery
       def initialize(domain, url)
         @domain = domain
         @url = url
       end
+
       def get_binding
         binding
       end
     end
+
     def get_xml(domain, url)
-      template = File.read("discovery.xml.erb")
+      path = File.dirname __dir__
+      template = File.read(File.join(path, "discovery.xml.erb"))
       renderer = ERB.new(template)
       discovery = Discovery.new(domain, url)
       renderer.result(discovery.get_binding)
     end
   end
+
+  # This is the intended API: runs each step of the enumeration process and returns a result
   class << self
     def federated(domain)
       e = Federation.new(domain)
       e.check_redirect
-      e.enumerate_autodisc
-      e.getdomains
+      if e.enumerate_autodisc
+        e.getdomains
+      else
+        nil
+      end
     end
   end
 end

data/lib/azure_enum/version.rb

@@ -1,3 +1,3 @@
 module AzureEnum
-  VERSION = "0.1.0".freeze
+  VERSION = "0.2.0".freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: azure_enum
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Technion