librex 0.0.13 → 0.0.15

Sign up to get free protection for your applications and to get access to all the features.
Files changed (435) hide show
  1. data/README.markdown +1 -1
  2. data/Rakefile +1 -0
  3. metadata +3 -435
  4. data/lib/rex/LICENSE +0 -29
  5. data/lib/rex/arch.rb +0 -103
  6. data/lib/rex/arch/sparc.rb +0 -75
  7. data/lib/rex/arch/sparc.rb.ut.rb +0 -18
  8. data/lib/rex/arch/x86.rb +0 -513
  9. data/lib/rex/arch/x86.rb.ut.rb +0 -93
  10. data/lib/rex/assembly/nasm.rb +0 -104
  11. data/lib/rex/assembly/nasm.rb.ut.rb +0 -22
  12. data/lib/rex/codepage.map +0 -104
  13. data/lib/rex/compat.rb +0 -311
  14. data/lib/rex/constants.rb +0 -113
  15. data/lib/rex/elfparsey.rb +0 -11
  16. data/lib/rex/elfparsey/elf.rb +0 -123
  17. data/lib/rex/elfparsey/elfbase.rb +0 -258
  18. data/lib/rex/elfparsey/exceptions.rb +0 -27
  19. data/lib/rex/elfscan.rb +0 -12
  20. data/lib/rex/elfscan/scanner.rb +0 -207
  21. data/lib/rex/elfscan/search.rb +0 -46
  22. data/lib/rex/encoder/alpha2.rb +0 -31
  23. data/lib/rex/encoder/alpha2/alpha_mixed.rb +0 -68
  24. data/lib/rex/encoder/alpha2/alpha_upper.rb +0 -79
  25. data/lib/rex/encoder/alpha2/generic.rb +0 -114
  26. data/lib/rex/encoder/alpha2/unicode_mixed.rb +0 -117
  27. data/lib/rex/encoder/alpha2/unicode_upper.rb +0 -129
  28. data/lib/rex/encoder/ndr.rb +0 -89
  29. data/lib/rex/encoder/ndr.rb.ut.rb +0 -44
  30. data/lib/rex/encoder/nonalpha.rb +0 -61
  31. data/lib/rex/encoder/nonupper.rb +0 -64
  32. data/lib/rex/encoder/xdr.rb +0 -106
  33. data/lib/rex/encoder/xdr.rb.ut.rb +0 -29
  34. data/lib/rex/encoder/xor.rb +0 -69
  35. data/lib/rex/encoder/xor/dword.rb +0 -13
  36. data/lib/rex/encoder/xor/dword_additive.rb +0 -13
  37. data/lib/rex/encoders/xor_dword.rb +0 -35
  38. data/lib/rex/encoders/xor_dword_additive.rb +0 -53
  39. data/lib/rex/encoders/xor_dword_additive.rb.ut.rb +0 -12
  40. data/lib/rex/encoding/xor.rb +0 -20
  41. data/lib/rex/encoding/xor.rb.ts.rb +0 -14
  42. data/lib/rex/encoding/xor/byte.rb +0 -15
  43. data/lib/rex/encoding/xor/byte.rb.ut.rb +0 -21
  44. data/lib/rex/encoding/xor/dword.rb +0 -21
  45. data/lib/rex/encoding/xor/dword.rb.ut.rb +0 -15
  46. data/lib/rex/encoding/xor/dword_additive.rb +0 -92
  47. data/lib/rex/encoding/xor/dword_additive.rb.ut.rb +0 -15
  48. data/lib/rex/encoding/xor/exceptions.rb +0 -17
  49. data/lib/rex/encoding/xor/generic.rb +0 -146
  50. data/lib/rex/encoding/xor/generic.rb.ut.rb +0 -120
  51. data/lib/rex/encoding/xor/qword.rb +0 -15
  52. data/lib/rex/encoding/xor/word.rb +0 -21
  53. data/lib/rex/encoding/xor/word.rb.ut.rb +0 -13
  54. data/lib/rex/exceptions.rb +0 -275
  55. data/lib/rex/exceptions.rb.ut.rb +0 -44
  56. data/lib/rex/exploitation/cmdstager.rb +0 -9
  57. data/lib/rex/exploitation/cmdstager/base.rb +0 -175
  58. data/lib/rex/exploitation/cmdstager/debug_asm.rb +0 -142
  59. data/lib/rex/exploitation/cmdstager/debug_write.rb +0 -136
  60. data/lib/rex/exploitation/cmdstager/tftp.rb +0 -63
  61. data/lib/rex/exploitation/cmdstager/vbs.rb +0 -128
  62. data/lib/rex/exploitation/egghunter.rb +0 -277
  63. data/lib/rex/exploitation/egghunter.rb.ut.rb +0 -25
  64. data/lib/rex/exploitation/encryptjs.rb +0 -77
  65. data/lib/rex/exploitation/heaplib.js.b64 +0 -331
  66. data/lib/rex/exploitation/heaplib.rb +0 -94
  67. data/lib/rex/exploitation/javascriptosdetect.rb +0 -897
  68. data/lib/rex/exploitation/obfuscatejs.rb +0 -335
  69. data/lib/rex/exploitation/omelet.rb +0 -320
  70. data/lib/rex/exploitation/omelet.rb.ut.rb +0 -13
  71. data/lib/rex/exploitation/opcodedb.rb +0 -818
  72. data/lib/rex/exploitation/opcodedb.rb.ut.rb +0 -279
  73. data/lib/rex/exploitation/seh.rb +0 -92
  74. data/lib/rex/exploitation/seh.rb.ut.rb +0 -19
  75. data/lib/rex/file.rb +0 -112
  76. data/lib/rex/file.rb.ut.rb +0 -16
  77. data/lib/rex/image_source.rb +0 -12
  78. data/lib/rex/image_source/disk.rb +0 -60
  79. data/lib/rex/image_source/image_source.rb +0 -46
  80. data/lib/rex/image_source/memory.rb +0 -37
  81. data/lib/rex/io/bidirectional_pipe.rb +0 -157
  82. data/lib/rex/io/datagram_abstraction.rb +0 -35
  83. data/lib/rex/io/stream.rb +0 -319
  84. data/lib/rex/io/stream_abstraction.rb +0 -197
  85. data/lib/rex/io/stream_server.rb +0 -211
  86. data/lib/rex/job_container.rb +0 -187
  87. data/lib/rex/logging.rb +0 -4
  88. data/lib/rex/logging/log_dispatcher.rb +0 -179
  89. data/lib/rex/logging/log_sink.rb +0 -42
  90. data/lib/rex/logging/sinks/flatfile.rb +0 -55
  91. data/lib/rex/logging/sinks/stderr.rb +0 -43
  92. data/lib/rex/machparsey.rb +0 -9
  93. data/lib/rex/machparsey/exceptions.rb +0 -34
  94. data/lib/rex/machparsey/mach.rb +0 -209
  95. data/lib/rex/machparsey/machbase.rb +0 -408
  96. data/lib/rex/machscan.rb +0 -9
  97. data/lib/rex/machscan/scanner.rb +0 -217
  98. data/lib/rex/mime.rb +0 -9
  99. data/lib/rex/mime/header.rb +0 -77
  100. data/lib/rex/mime/message.rb +0 -144
  101. data/lib/rex/mime/part.rb +0 -20
  102. data/lib/rex/nop/opty2.rb +0 -108
  103. data/lib/rex/nop/opty2.rb.ut.rb +0 -23
  104. data/lib/rex/nop/opty2_tables.rb +0 -300
  105. data/lib/rex/ole.rb +0 -205
  106. data/lib/rex/ole/clsid.rb +0 -47
  107. data/lib/rex/ole/difat.rb +0 -141
  108. data/lib/rex/ole/directory.rb +0 -231
  109. data/lib/rex/ole/direntry.rb +0 -240
  110. data/lib/rex/ole/docs/dependencies.txt +0 -8
  111. data/lib/rex/ole/docs/references.txt +0 -1
  112. data/lib/rex/ole/fat.rb +0 -99
  113. data/lib/rex/ole/header.rb +0 -204
  114. data/lib/rex/ole/minifat.rb +0 -77
  115. data/lib/rex/ole/propset.rb +0 -144
  116. data/lib/rex/ole/samples/create_ole.rb +0 -27
  117. data/lib/rex/ole/samples/dir.rb +0 -35
  118. data/lib/rex/ole/samples/dump_stream.rb +0 -34
  119. data/lib/rex/ole/samples/ole_info.rb +0 -23
  120. data/lib/rex/ole/storage.rb +0 -395
  121. data/lib/rex/ole/stream.rb +0 -53
  122. data/lib/rex/ole/substorage.rb +0 -49
  123. data/lib/rex/ole/util.rb +0 -157
  124. data/lib/rex/parser/arguments.rb +0 -97
  125. data/lib/rex/parser/arguments.rb.ut.rb +0 -67
  126. data/lib/rex/parser/ini.rb +0 -185
  127. data/lib/rex/parser/ini.rb.ut.rb +0 -29
  128. data/lib/rex/parser/ip360_aspl_xml.rb +0 -102
  129. data/lib/rex/parser/ip360_xml.rb +0 -93
  130. data/lib/rex/parser/nessus_xml.rb +0 -118
  131. data/lib/rex/parser/netsparker_xml.rb +0 -94
  132. data/lib/rex/parser/nexpose_xml.rb +0 -131
  133. data/lib/rex/parser/nmap_xml.rb +0 -121
  134. data/lib/rex/parser/retina_xml.rb +0 -109
  135. data/lib/rex/payloads.rb +0 -1
  136. data/lib/rex/payloads/win32.rb +0 -2
  137. data/lib/rex/payloads/win32/common.rb +0 -26
  138. data/lib/rex/payloads/win32/kernel.rb +0 -53
  139. data/lib/rex/payloads/win32/kernel/common.rb +0 -54
  140. data/lib/rex/payloads/win32/kernel/migration.rb +0 -12
  141. data/lib/rex/payloads/win32/kernel/recovery.rb +0 -50
  142. data/lib/rex/payloads/win32/kernel/stager.rb +0 -194
  143. data/lib/rex/peparsey.rb +0 -12
  144. data/lib/rex/peparsey/exceptions.rb +0 -32
  145. data/lib/rex/peparsey/pe.rb +0 -212
  146. data/lib/rex/peparsey/pe_memdump.rb +0 -63
  147. data/lib/rex/peparsey/pebase.rb +0 -1680
  148. data/lib/rex/peparsey/section.rb +0 -136
  149. data/lib/rex/pescan.rb +0 -13
  150. data/lib/rex/pescan/analyze.rb +0 -309
  151. data/lib/rex/pescan/scanner.rb +0 -206
  152. data/lib/rex/pescan/search.rb +0 -56
  153. data/lib/rex/platforms.rb +0 -1
  154. data/lib/rex/platforms/windows.rb +0 -51
  155. data/lib/rex/poly.rb +0 -132
  156. data/lib/rex/poly/block.rb +0 -477
  157. data/lib/rex/poly/register.rb +0 -100
  158. data/lib/rex/poly/register/x86.rb +0 -40
  159. data/lib/rex/post.rb +0 -8
  160. data/lib/rex/post/dir.rb +0 -51
  161. data/lib/rex/post/file.rb +0 -172
  162. data/lib/rex/post/file_stat.rb +0 -220
  163. data/lib/rex/post/gen.pl +0 -13
  164. data/lib/rex/post/io.rb +0 -182
  165. data/lib/rex/post/meterpreter.rb +0 -4
  166. data/lib/rex/post/meterpreter/channel.rb +0 -445
  167. data/lib/rex/post/meterpreter/channel_container.rb +0 -54
  168. data/lib/rex/post/meterpreter/channels/pool.rb +0 -160
  169. data/lib/rex/post/meterpreter/channels/pools/file.rb +0 -62
  170. data/lib/rex/post/meterpreter/channels/pools/stream_pool.rb +0 -103
  171. data/lib/rex/post/meterpreter/channels/stream.rb +0 -87
  172. data/lib/rex/post/meterpreter/client.rb +0 -364
  173. data/lib/rex/post/meterpreter/client_core.rb +0 -274
  174. data/lib/rex/post/meterpreter/dependencies.rb +0 -3
  175. data/lib/rex/post/meterpreter/extension.rb +0 -32
  176. data/lib/rex/post/meterpreter/extensions/espia/espia.rb +0 -58
  177. data/lib/rex/post/meterpreter/extensions/espia/tlv.rb +0 -16
  178. data/lib/rex/post/meterpreter/extensions/incognito/incognito.rb +0 -94
  179. data/lib/rex/post/meterpreter/extensions/incognito/tlv.rb +0 -21
  180. data/lib/rex/post/meterpreter/extensions/networkpug/networkpug.rb +0 -57
  181. data/lib/rex/post/meterpreter/extensions/networkpug/tlv.rb +0 -15
  182. data/lib/rex/post/meterpreter/extensions/priv/fs.rb +0 -118
  183. data/lib/rex/post/meterpreter/extensions/priv/passwd.rb +0 -61
  184. data/lib/rex/post/meterpreter/extensions/priv/priv.rb +0 -111
  185. data/lib/rex/post/meterpreter/extensions/priv/tlv.rb +0 -28
  186. data/lib/rex/post/meterpreter/extensions/sniffer/sniffer.rb +0 -101
  187. data/lib/rex/post/meterpreter/extensions/sniffer/tlv.rb +0 -26
  188. data/lib/rex/post/meterpreter/extensions/stdapi/constants.rb +0 -333
  189. data/lib/rex/post/meterpreter/extensions/stdapi/fs/dir.rb +0 -282
  190. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb +0 -266
  191. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb +0 -103
  192. data/lib/rex/post/meterpreter/extensions/stdapi/fs/io.rb +0 -48
  193. data/lib/rex/post/meterpreter/extensions/stdapi/net/config.rb +0 -144
  194. data/lib/rex/post/meterpreter/extensions/stdapi/net/interface.rb +0 -73
  195. data/lib/rex/post/meterpreter/extensions/stdapi/net/route.rb +0 -56
  196. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket.rb +0 -137
  197. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_client_channel.rb +0 -180
  198. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_server_channel.rb +0 -167
  199. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/udp_channel.rb +0 -208
  200. data/lib/rex/post/meterpreter/extensions/stdapi/railgun.rb.ts.rb +0 -6
  201. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb +0 -38106
  202. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb.ut.rb +0 -31
  203. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb +0 -47
  204. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb.ut.rb +0 -36
  205. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_advapi32.rb +0 -1818
  206. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_iphlpapi.rb +0 -96
  207. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_kernel32.rb +0 -3848
  208. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_netapi32.rb +0 -26
  209. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ntdll.rb +0 -153
  210. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_shell32.rb +0 -21
  211. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_user32.rb +0 -3169
  212. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ws2_32.rb +0 -599
  213. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb +0 -318
  214. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb +0 -100
  215. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb.ut.rb +0 -42
  216. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb +0 -148
  217. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb.ut.rb +0 -127
  218. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/multicall.rb +0 -309
  219. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb +0 -204
  220. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/tlv.rb +0 -51
  221. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/util.rb +0 -630
  222. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb +0 -75
  223. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb.ut.rb +0 -103
  224. data/lib/rex/post/meterpreter/extensions/stdapi/stdapi.rb +0 -149
  225. data/lib/rex/post/meterpreter/extensions/stdapi/sys/config.rb +0 -97
  226. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log.rb +0 -192
  227. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log_subsystem/event_record.rb +0 -41
  228. data/lib/rex/post/meterpreter/extensions/stdapi/sys/power.rb +0 -61
  229. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb +0 -370
  230. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/image.rb +0 -129
  231. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/io.rb +0 -55
  232. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/memory.rb +0 -336
  233. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/thread.rb +0 -141
  234. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry.rb +0 -279
  235. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_key.rb +0 -193
  236. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_value.rb +0 -102
  237. data/lib/rex/post/meterpreter/extensions/stdapi/sys/thread.rb +0 -180
  238. data/lib/rex/post/meterpreter/extensions/stdapi/tlv.rb +0 -211
  239. data/lib/rex/post/meterpreter/extensions/stdapi/ui.rb +0 -227
  240. data/lib/rex/post/meterpreter/extensions/stdapi/webcam/webcam.rb +0 -63
  241. data/lib/rex/post/meterpreter/inbound_packet_handler.rb +0 -30
  242. data/lib/rex/post/meterpreter/object_aliases.rb +0 -83
  243. data/lib/rex/post/meterpreter/packet.rb +0 -688
  244. data/lib/rex/post/meterpreter/packet_dispatcher.rb +0 -431
  245. data/lib/rex/post/meterpreter/packet_parser.rb +0 -94
  246. data/lib/rex/post/meterpreter/packet_response_waiter.rb +0 -83
  247. data/lib/rex/post/meterpreter/ui/console.rb +0 -137
  248. data/lib/rex/post/meterpreter/ui/console/command_dispatcher.rb +0 -62
  249. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/core.rb +0 -730
  250. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/espia.rb +0 -108
  251. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/incognito.rb +0 -241
  252. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/networkpug.rb +0 -231
  253. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv.rb +0 -61
  254. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb +0 -98
  255. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd.rb +0 -51
  256. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp.rb +0 -132
  257. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/sniffer.rb +0 -187
  258. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi.rb +0 -65
  259. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb +0 -442
  260. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/net.rb +0 -298
  261. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/sys.rb +0 -486
  262. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/ui.rb +0 -315
  263. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/webcam.rb +0 -157
  264. data/lib/rex/post/meterpreter/ui/console/interactive_channel.rb +0 -95
  265. data/lib/rex/post/permission.rb +0 -26
  266. data/lib/rex/post/process.rb +0 -57
  267. data/lib/rex/post/thread.rb +0 -57
  268. data/lib/rex/post/ui.rb +0 -52
  269. data/lib/rex/proto.rb +0 -13
  270. data/lib/rex/proto.rb.ts.rb +0 -8
  271. data/lib/rex/proto/dcerpc.rb +0 -6
  272. data/lib/rex/proto/dcerpc.rb.ts.rb +0 -9
  273. data/lib/rex/proto/dcerpc/client.rb +0 -361
  274. data/lib/rex/proto/dcerpc/client.rb.ut.rb +0 -491
  275. data/lib/rex/proto/dcerpc/exceptions.rb +0 -150
  276. data/lib/rex/proto/dcerpc/handle.rb +0 -47
  277. data/lib/rex/proto/dcerpc/handle.rb.ut.rb +0 -85
  278. data/lib/rex/proto/dcerpc/ndr.rb +0 -72
  279. data/lib/rex/proto/dcerpc/ndr.rb.ut.rb +0 -41
  280. data/lib/rex/proto/dcerpc/packet.rb +0 -253
  281. data/lib/rex/proto/dcerpc/packet.rb.ut.rb +0 -56
  282. data/lib/rex/proto/dcerpc/response.rb +0 -187
  283. data/lib/rex/proto/dcerpc/response.rb.ut.rb +0 -15
  284. data/lib/rex/proto/dcerpc/uuid.rb +0 -84
  285. data/lib/rex/proto/dcerpc/uuid.rb.ut.rb +0 -46
  286. data/lib/rex/proto/dhcp.rb +0 -7
  287. data/lib/rex/proto/dhcp/constants.rb +0 -33
  288. data/lib/rex/proto/dhcp/server.rb +0 -292
  289. data/lib/rex/proto/drda.rb +0 -5
  290. data/lib/rex/proto/drda.rb.ts.rb +0 -17
  291. data/lib/rex/proto/drda/constants.rb +0 -49
  292. data/lib/rex/proto/drda/constants.rb.ut.rb +0 -23
  293. data/lib/rex/proto/drda/packet.rb +0 -252
  294. data/lib/rex/proto/drda/packet.rb.ut.rb +0 -109
  295. data/lib/rex/proto/drda/utils.rb +0 -123
  296. data/lib/rex/proto/drda/utils.rb.ut.rb +0 -84
  297. data/lib/rex/proto/http.rb +0 -5
  298. data/lib/rex/proto/http.rb.ts.rb +0 -12
  299. data/lib/rex/proto/http/client.rb +0 -821
  300. data/lib/rex/proto/http/client.rb.ut.rb +0 -95
  301. data/lib/rex/proto/http/handler.rb +0 -46
  302. data/lib/rex/proto/http/handler/erb.rb +0 -128
  303. data/lib/rex/proto/http/handler/erb.rb.ut.rb +0 -21
  304. data/lib/rex/proto/http/handler/erb.rb.ut.rb.rhtml +0 -1
  305. data/lib/rex/proto/http/handler/proc.rb +0 -60
  306. data/lib/rex/proto/http/handler/proc.rb.ut.rb +0 -24
  307. data/lib/rex/proto/http/header.rb +0 -161
  308. data/lib/rex/proto/http/header.rb.ut.rb +0 -46
  309. data/lib/rex/proto/http/packet.rb +0 -407
  310. data/lib/rex/proto/http/packet.rb.ut.rb +0 -165
  311. data/lib/rex/proto/http/request.rb +0 -356
  312. data/lib/rex/proto/http/request.rb.ut.rb +0 -214
  313. data/lib/rex/proto/http/response.rb +0 -90
  314. data/lib/rex/proto/http/response.rb.ut.rb +0 -149
  315. data/lib/rex/proto/http/server.rb +0 -369
  316. data/lib/rex/proto/http/server.rb.ut.rb +0 -79
  317. data/lib/rex/proto/ntlm.rb +0 -7
  318. data/lib/rex/proto/ntlm.rb.ut.rb +0 -177
  319. data/lib/rex/proto/ntlm/base.rb +0 -326
  320. data/lib/rex/proto/ntlm/constants.rb +0 -74
  321. data/lib/rex/proto/ntlm/crypt.rb +0 -415
  322. data/lib/rex/proto/ntlm/exceptions.rb +0 -9
  323. data/lib/rex/proto/ntlm/message.rb +0 -533
  324. data/lib/rex/proto/ntlm/utils.rb +0 -763
  325. data/lib/rex/proto/proxy/socks4a.rb +0 -440
  326. data/lib/rex/proto/rfb.rb +0 -19
  327. data/lib/rex/proto/rfb.rb.ut.rb +0 -37
  328. data/lib/rex/proto/rfb/cipher.rb +0 -84
  329. data/lib/rex/proto/rfb/client.rb +0 -207
  330. data/lib/rex/proto/rfb/constants.rb +0 -52
  331. data/lib/rex/proto/smb.rb +0 -7
  332. data/lib/rex/proto/smb.rb.ts.rb +0 -8
  333. data/lib/rex/proto/smb/client.rb +0 -1952
  334. data/lib/rex/proto/smb/client.rb.ut.rb +0 -223
  335. data/lib/rex/proto/smb/constants.rb +0 -1047
  336. data/lib/rex/proto/smb/constants.rb.ut.rb +0 -18
  337. data/lib/rex/proto/smb/crypt.rb +0 -36
  338. data/lib/rex/proto/smb/evasions.rb +0 -66
  339. data/lib/rex/proto/smb/exceptions.rb +0 -858
  340. data/lib/rex/proto/smb/simpleclient.rb +0 -306
  341. data/lib/rex/proto/smb/simpleclient.rb.ut.rb +0 -128
  342. data/lib/rex/proto/smb/utils.rb +0 -103
  343. data/lib/rex/proto/smb/utils.rb.ut.rb +0 -20
  344. data/lib/rex/proto/sunrpc.rb +0 -1
  345. data/lib/rex/proto/sunrpc/client.rb +0 -195
  346. data/lib/rex/proto/tftp.rb +0 -12
  347. data/lib/rex/proto/tftp/constants.rb +0 -39
  348. data/lib/rex/proto/tftp/server.rb +0 -497
  349. data/lib/rex/proto/tftp/server.rb.ut.rb +0 -28
  350. data/lib/rex/script.rb +0 -42
  351. data/lib/rex/script/base.rb +0 -59
  352. data/lib/rex/script/meterpreter.rb +0 -15
  353. data/lib/rex/script/shell.rb +0 -9
  354. data/lib/rex/service.rb +0 -48
  355. data/lib/rex/service_manager.rb +0 -141
  356. data/lib/rex/service_manager.rb.ut.rb +0 -32
  357. data/lib/rex/services/local_relay.rb +0 -423
  358. data/lib/rex/socket.rb +0 -684
  359. data/lib/rex/socket.rb.ut.rb +0 -107
  360. data/lib/rex/socket/comm.rb +0 -119
  361. data/lib/rex/socket/comm/local.rb +0 -412
  362. data/lib/rex/socket/comm/local.rb.ut.rb +0 -75
  363. data/lib/rex/socket/ip.rb +0 -130
  364. data/lib/rex/socket/parameters.rb +0 -345
  365. data/lib/rex/socket/parameters.rb.ut.rb +0 -51
  366. data/lib/rex/socket/range_walker.rb +0 -346
  367. data/lib/rex/socket/range_walker.rb.ut.rb +0 -55
  368. data/lib/rex/socket/ssl_tcp.rb +0 -184
  369. data/lib/rex/socket/ssl_tcp.rb.ut.rb +0 -39
  370. data/lib/rex/socket/ssl_tcp_server.rb +0 -122
  371. data/lib/rex/socket/ssl_tcp_server.rb.ut.rb +0 -61
  372. data/lib/rex/socket/subnet_walker.rb +0 -75
  373. data/lib/rex/socket/subnet_walker.rb.ut.rb +0 -28
  374. data/lib/rex/socket/switch_board.rb +0 -278
  375. data/lib/rex/socket/switch_board.rb.ut.rb +0 -52
  376. data/lib/rex/socket/tcp.rb +0 -76
  377. data/lib/rex/socket/tcp.rb.ut.rb +0 -64
  378. data/lib/rex/socket/tcp_server.rb +0 -67
  379. data/lib/rex/socket/tcp_server.rb.ut.rb +0 -44
  380. data/lib/rex/socket/udp.rb +0 -164
  381. data/lib/rex/socket/udp.rb.ut.rb +0 -44
  382. data/lib/rex/struct2.rb +0 -5
  383. data/lib/rex/struct2/c_struct.rb +0 -181
  384. data/lib/rex/struct2/c_struct_template.rb +0 -39
  385. data/lib/rex/struct2/constant.rb +0 -26
  386. data/lib/rex/struct2/element.rb +0 -44
  387. data/lib/rex/struct2/generic.rb +0 -73
  388. data/lib/rex/struct2/restraint.rb +0 -54
  389. data/lib/rex/struct2/s_string.rb +0 -72
  390. data/lib/rex/struct2/s_struct.rb +0 -111
  391. data/lib/rex/sync.rb +0 -6
  392. data/lib/rex/sync/event.rb +0 -94
  393. data/lib/rex/sync/read_write_lock.rb +0 -176
  394. data/lib/rex/sync/ref.rb +0 -57
  395. data/lib/rex/sync/thread_safe.rb +0 -82
  396. data/lib/rex/test.rb +0 -35
  397. data/lib/rex/text.rb +0 -1149
  398. data/lib/rex/text.rb.ut.rb +0 -190
  399. data/lib/rex/thread_factory.rb +0 -42
  400. data/lib/rex/time.rb +0 -65
  401. data/lib/rex/transformer.rb +0 -115
  402. data/lib/rex/transformer.rb.ut.rb +0 -38
  403. data/lib/rex/ui.rb +0 -21
  404. data/lib/rex/ui/interactive.rb +0 -254
  405. data/lib/rex/ui/output.rb +0 -78
  406. data/lib/rex/ui/output/none.rb +0 -18
  407. data/lib/rex/ui/progress_tracker.rb +0 -96
  408. data/lib/rex/ui/subscriber.rb +0 -149
  409. data/lib/rex/ui/text/color.rb +0 -97
  410. data/lib/rex/ui/text/color.rb.ut.rb +0 -18
  411. data/lib/rex/ui/text/dispatcher_shell.rb +0 -467
  412. data/lib/rex/ui/text/input.rb +0 -117
  413. data/lib/rex/ui/text/input/buffer.rb +0 -75
  414. data/lib/rex/ui/text/input/readline.rb +0 -129
  415. data/lib/rex/ui/text/input/socket.rb +0 -95
  416. data/lib/rex/ui/text/input/stdio.rb +0 -45
  417. data/lib/rex/ui/text/irb_shell.rb +0 -57
  418. data/lib/rex/ui/text/output.rb +0 -80
  419. data/lib/rex/ui/text/output/buffer.rb +0 -61
  420. data/lib/rex/ui/text/output/file.rb +0 -43
  421. data/lib/rex/ui/text/output/socket.rb +0 -43
  422. data/lib/rex/ui/text/output/stdio.rb +0 -40
  423. data/lib/rex/ui/text/progress_tracker.rb +0 -56
  424. data/lib/rex/ui/text/progress_tracker.rb.ut.rb +0 -34
  425. data/lib/rex/ui/text/shell.rb +0 -328
  426. data/lib/rex/ui/text/table.rb +0 -279
  427. data/lib/rex/ui/text/table.rb.ut.rb +0 -55
  428. data/lib/rex/zip.rb +0 -93
  429. data/lib/rex/zip/archive.rb +0 -184
  430. data/lib/rex/zip/blocks.rb +0 -182
  431. data/lib/rex/zip/entry.rb +0 -104
  432. data/lib/rex/zip/samples/comment.rb +0 -32
  433. data/lib/rex/zip/samples/mkwar.rb +0 -138
  434. data/lib/rex/zip/samples/mkzip.rb +0 -19
  435. data/lib/rex/zip/samples/recursive.rb +0 -58
@@ -1,74 +0,0 @@
1
- module Rex
2
- module Proto
3
- module NTLM
4
- class Constants
5
-
6
- SSP_SIGN = "NTLMSSP\0"
7
- BLOB_SIGN = 0x00000101
8
- LM_MAGIC = "KGS!@\#$%"
9
- TIME_OFFSET = 11644473600
10
- MAX64 = 0xffffffffffffffff
11
-
12
- FLAGS = {
13
- :UNICODE => 0x00000001,
14
- :OEM => 0x00000002,
15
- :REQUEST_TARGET => 0x00000004,
16
- #:UNKNOWN => 0x00000008,
17
- :SIGN => 0x00000010,
18
- :SEAL => 0x00000020,
19
- #:UNKNOWN => 0x00000040,
20
- :NETWARE => 0x00000100,
21
- :NTLM => 0x00000200,
22
- #:UNKNOWN => 0x00000400,
23
- #:UNKNOWN => 0x00000800,
24
- :DOMAIN_SUPPLIED => 0x00001000,
25
- :WORKSTATION_SUPPLIED => 0x00002000,
26
- :LOCAL_CALL => 0x00004000,
27
- :ALWAYS_SIGN => 0x00008000,
28
- :TARGET_TYPE_DOMAIN => 0x00010000,
29
- :TARGET_INFO => 0x00800000,
30
- :NTLM2_KEY => 0x00080000,
31
- :KEY128 => 0x20000000,
32
- :KEY56 => 0x80000000
33
- }
34
-
35
- FLAG_KEYS = FLAGS.keys.sort{|a, b| FLAGS[a] <=> FLAGS[b] }
36
-
37
- DEFAULT_FLAGS = {
38
- :TYPE1 => FLAGS[:UNICODE] | FLAGS[:OEM] | FLAGS[:REQUEST_TARGET] | FLAGS[:NTLM] | FLAGS[:ALWAYS_SIGN] | FLAGS[:NTLM2_KEY],
39
- :TYPE2 => FLAGS[:UNICODE],
40
- :TYPE3 => FLAGS[:UNICODE] | FLAGS[:REQUEST_TARGET] | FLAGS[:NTLM] | FLAGS[:ALWAYS_SIGN] | FLAGS[:NTLM2_KEY]
41
- }
42
-
43
- # NTLM Response Type
44
- NTLM_V1_RESPONSE = 1
45
- NTLM_V2_RESPONSE = 2
46
- NTLM_2_SESSION_RESPONSE = 3
47
-
48
- #the same flags but merged from lib/rex/proto/smb/constants and keeped for compatibility
49
- # NTLMSSP Message Flags
50
- NEGOTIATE_UNICODE = 0x00000001 # Only set if Type 1 contains it - this or oem, not both
51
- NEGOTIATE_OEM = 0x00000002 # Only set if Type 1 contains it - this or unicode, not both
52
- REQUEST_TARGET = 0x00000004 # If set in Type 1, must return domain or server
53
- NEGOTIATE_SIGN = 0x00000010 # Session signature required
54
- NEGOTIATE_SEAL = 0x00000020 # Session seal required
55
- NEGOTIATE_LMKEY = 0x00000080 # LM Session Key should be used for signing and sealing
56
- NEGOTIATE_NTLM = 0x00000200 # NTLM auth is supported
57
- NEGOTIATE_ANONYMOUS = 0x00000800 # Anonymous context used
58
- NEGOTIATE_DOMAIN = 0x00001000 # Sent in Type1, client gives domain info
59
- NEGOTIATE_WORKSTATION = 0x00002000 # Sent in Type1, client gives workstation info
60
- NEGOTIATE_LOCAL_CALL = 0x00004000 # Server and client are on same machine
61
- NEGOTIATE_ALWAYS_SIGN = 0x00008000 # Add signatures to packets
62
- TARGET_TYPE_DOMAIN = 0x00010000 # If REQUEST_TARGET, we're adding the domain name
63
- TARGET_TYPE_SERVER = 0x00020000 # If REQUEST_TARGET, we're adding the server name
64
- TARGET_TYPE_SHARE = 0x00040000 # Supposed to denote "a share" but for a webserver?
65
- NEGOTIATE_NTLM2_KEY = 0x00080000 # NTLMv2 Signature and Key exchanges
66
- NEGOTIATE_TARGET_INFO = 0x00800000 # Server set when sending Target Information Block
67
- NEGOTIATE_128 = 0x20000000 # 128-bit encryption supported
68
- NEGOTIATE_KEY_EXCH = 0x40000000 # Client will supply encrypted master key in Session Key field of Type3 msg
69
- NEGOTIATE_56 = 0x80000000 # 56-bit encryption supported
70
-
71
- end
72
- end
73
- end
74
- end
@@ -1,415 +0,0 @@
1
- #
2
- # An NTLM Authentication Library for Ruby
3
- #
4
- # This code is a derivative of "dbf2.rb" written by yrock
5
- # and Minero Aoki. You can find original code here:
6
- # http://jp.rubyist.net/magazine/?0013-CodeReview
7
- # -------------------------------------------------------------
8
- # Copyright (c) 2005,2006 yrock
9
- #
10
- # This program is free software.
11
- # You can distribute/modify this program under the terms of the
12
- # Ruby License.
13
- #
14
- # 2011-03-08 improved through a code merge with Metasploit's SMB::Crypt
15
- # -------------------------------------------------------------
16
- #
17
- # 2011-02-23 refactored and improved by Alexandre Maloteaux for Metasploit Project
18
- # -------------------------------------------------------------
19
- #
20
- # 2006-02-11 refactored by Minero Aoki
21
- # -------------------------------------------------------------
22
- #
23
- # All protocol information used to write this code stems from
24
- # "The NTLM Authentication Protocol" by Eric Glass. The author
25
- # would thank to him for this tremendous work and making it
26
- # available on the net.
27
- # http://davenport.sourceforge.net/ntlm.html
28
- # -------------------------------------------------------------
29
- # Copyright (c) 2003 Eric Glass
30
- #
31
- # Permission to use, copy, modify, and distribute this document
32
- # for any purpose and without any fee is hereby granted,
33
- # provided that the above copyright notice and this list of
34
- # conditions appear in all copies.
35
- # -------------------------------------------------------------
36
- #
37
- # The author also looked Mozilla-Firefox-1.0.7 source code,
38
- # namely, security/manager/ssl/src/nsNTLMAuthModule.cpp and
39
- # Jonathan Bastien-Filiatrault's libntlm-ruby.
40
- # "http://x2a.org/websvn/filedetails.php?
41
- # repname=libntlm-ruby&path=%2Ftrunk%2Fntlm.rb&sc=1"
42
- # The latter has a minor bug in its separate_keys function.
43
- # The third key has to begin from the 14th character of the
44
- # input string instead of 13th:)
45
- #--
46
- # $Id: ntlm.rb 11678 2011-01-30 19:26:35Z hdm $
47
- #++
48
-
49
-
50
- require 'rex/proto/ntlm/constants'
51
- require 'rex/proto/ntlm/base'
52
-
53
- module Rex
54
- module Proto
55
- module NTLM
56
- class Crypt
57
-
58
- CONST = Rex::Proto::NTLM::Constants
59
- BASE = Rex::Proto::NTLM::Base
60
-
61
- @@loaded_openssl = false
62
-
63
- begin
64
- require 'openssl'
65
- require 'openssl/digest'
66
- @@loaded_openssl = true
67
- rescue ::Exception
68
- end
69
-
70
- def self.gen_keys(str)
71
- str.scan(/.{7}/).map{ |key| des_56_to_64(key) }
72
- end
73
-
74
- def self.des_56_to_64(ckey56s)
75
- ckey64 = []
76
- ckey56 = ckey56s.unpack('C*')
77
- ckey64[0] = ckey56[0]
78
- ckey64[1] = ((ckey56[0] << 7) & 0xFF) | (ckey56[1] >> 1)
79
- ckey64[2] = ((ckey56[1] << 6) & 0xFF) | (ckey56[2] >> 2)
80
- ckey64[3] = ((ckey56[2] << 5) & 0xFF) | (ckey56[3] >> 3)
81
- ckey64[4] = ((ckey56[3] << 4) & 0xFF) | (ckey56[4] >> 4)
82
- ckey64[5] = ((ckey56[4] << 3) & 0xFF) | (ckey56[5] >> 5)
83
- ckey64[6] = ((ckey56[5] << 2) & 0xFF) | (ckey56[6] >> 6)
84
- ckey64[7] = (ckey56[6] << 1) & 0xFF
85
- ckey64.pack('C*')
86
- end
87
-
88
- def self.apply_des(plain, keys)
89
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
90
- dec = OpenSSL::Cipher::DES.new
91
- keys.map do |k|
92
- dec.key = k
93
- dec.encrypt.update(plain)
94
- end
95
- end
96
-
97
- def self.lm_hash(password, half = false)
98
- size = half ? 7 : 14
99
- keys = gen_keys(password.upcase.ljust(size, "\0"))
100
- apply_des(CONST::LM_MAGIC, keys).join
101
- end
102
-
103
- def self.ntlm_hash(password, opt = {})
104
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
105
- pwd = password.dup
106
- unless opt[:unicode]
107
- pwd = Rex::Text.to_unicode(pwd)
108
- end
109
- OpenSSL::Digest::MD4.digest(pwd)
110
- end
111
-
112
- # This hash is used for lmv2/ntlmv2 response calculation
113
- def self.ntlmv2_hash(user, password, domain, opt={})
114
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
115
-
116
- if opt[:pass_is_hash]
117
- ntlmhash = password
118
- else
119
- ntlmhash = ntlm_hash(password, opt)
120
- end
121
- # With Win 7 and maybe other OSs we sometimes get the domain not uppercased
122
- userdomain = user.upcase + domain
123
- unless opt[:unicode]
124
- userdomain = Rex::Text.to_unicode(userdomain)
125
- end
126
- OpenSSL::HMAC.digest(OpenSSL::Digest::MD5.new, ntlmhash, userdomain)
127
- end
128
-
129
- # Create the LANMAN response
130
- def self.lm_response(arg, half = false)
131
- begin
132
- hash = arg[:lm_hash]
133
- chal = arg[:challenge]
134
- rescue
135
- raise ArgumentError
136
- end
137
- chal = BASE::pack_int64le(chal) if chal.is_a?(Integer)
138
- if half then size = 7 else size = 21 end
139
- keys = gen_keys hash.ljust(size, "\0")
140
- apply_des(chal, keys).join
141
- end
142
-
143
- # Synonym of lm_response for old compatibility with lib/rex/proto/smb/crypt
144
- def self.lanman_des(password, challenge)
145
- lm_response({
146
- :lm_hash => self.lm_hash(password),
147
- :challenge => challenge
148
- })
149
- end
150
-
151
- def self.ntlm_response(arg)
152
- hash = arg[:ntlm_hash]
153
- chal = arg[:challenge]
154
- chal = BASE::pack_int64le(chal) if chal.is_a?(::Integer)
155
- keys = gen_keys(hash.ljust(21, "\0"))
156
- apply_des(chal, keys).join
157
- end
158
-
159
- #synonym of ntlm_response for old compatibility with lib/rex/proto/smb/crypt
160
- def self.ntlm_md4(password, challenge)
161
- ntlm_response({
162
- :ntlm_hash => self.ntlm_hash(password),
163
- :challenge => challenge
164
- })
165
- end
166
-
167
- def self.ntlmv2_response(arg, opt = {})
168
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
169
-
170
- key, chal = arg[:ntlmv2_hash], arg[:challenge]
171
- if not (key and chal)
172
- raise ArgumentError , 'ntlmv2_hash and challenge are mandatory'
173
- end
174
-
175
- chal = BASE::pack_int64le(chal) if chal.is_a?(::Integer)
176
- bb = nil
177
-
178
- if opt[:nt_client_challenge]
179
- if opt[:nt_client_challenge].to_s.length <= 8
180
- raise ArgumentError,"nt_client_challenge is not in a correct format "
181
- end
182
- bb = opt[:nt_client_challenge]
183
- else
184
- if not arg[:target_info]
185
- raise ArgumentError, "target_info is mandatory in this case"
186
- end
187
-
188
- ti = arg[:target_info]
189
- cc = opt[:client_challenge] || rand(CONST::MAX64)
190
- cc = BASE::pack_int64le(cc) if cc.is_a?(::Integer)
191
-
192
- ts = opt[:timestamp] || Time.now.to_i
193
-
194
- # Convert the unix timestamp to windows format
195
- # epoch -> milsec from Jan 1, 1601
196
- ts = 10000000 * (ts + CONST::TIME_OFFSET)
197
-
198
- blob = BASE::Blob.new
199
- blob.timestamp = ts
200
- blob.challenge = cc
201
- blob.target_info = ti
202
-
203
- bb = blob.serialize
204
- end
205
-
206
- OpenSSL::HMAC.digest(OpenSSL::Digest::MD5.new, key, chal + bb) + bb
207
- end
208
-
209
- def self.lmv2_response(arg, opt = {})
210
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
211
- key = arg[:ntlmv2_hash]
212
- chal = arg[:challenge]
213
-
214
- chal = BASE::pack_int64le(chal) if chal.is_a?(::Integer)
215
- cc = opt[:client_challenge] || rand(CONST::MAX64)
216
- cc = BASE::pack_int64le(cc) if cc.is_a?(::Integer)
217
-
218
- OpenSSL::HMAC.digest(OpenSSL::Digest::MD5.new, key, chal + cc) + cc
219
- end
220
-
221
- def self.ntlm2_session(arg, opt = {})
222
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
223
- passwd_hash,chal = arg[:ntlm_hash],arg[:challenge]
224
- if not (passwd_hash and chal)
225
- raise RuntimeError, "ntlm_hash and challenge are required"
226
- end
227
-
228
- cc = opt[:client_challenge] || rand(CONST::MAX64)
229
- cc = BASE::pack_int64le(cc) if cc.is_a?(Integer)
230
-
231
- keys = gen_keys(passwd_hash.ljust(21, "\0"))
232
- session_hash = OpenSSL::Digest::MD5.digest(chal + cc)[0,8]
233
- response = apply_des(session_hash, keys).join
234
- [cc.ljust(24, "\0"), response]
235
- end
236
-
237
- #this function will check if the net lm response provided correspond to en empty password
238
- def self.is_hash_from_empty_pwd?(arg)
239
- hash_type = arg[:type]
240
- raise ArgumentError,"arg[:type] is mandatory" if not hash_type
241
- raise ArgumentError,"arg[:type] must be lm or ntlm" if not hash_type =~ /^((lm)|(ntlm))$/
242
-
243
- ntlm_ver = arg[:ntlm_ver]
244
- raise ArgumentError,"arg[:ntlm_ver] is mandatory" if not ntlm_ver
245
-
246
- hash = arg[:hash]
247
- raise ArgumentError,"arg[:hash] is mandatory" if not hash
248
-
249
- srv_chall = arg[:srv_challenge]
250
- raise ArgumentError,"arg[:srv_challenge] is mandatory" if not srv_chall
251
- raise ArgumentError,"Server challenge length must be exactly 8 bytes" if srv_chall.length != 8
252
-
253
- #calculate responses for empty pwd
254
- case ntlm_ver
255
- when CONST::NTLM_V1_RESPONSE
256
- if hash.length != 24
257
- raise ArgumentError,"hash length must be exactly 24 bytes "
258
- end
259
- case hash_type
260
- when 'lm'
261
- arglm = { :lm_hash => self.lm_hash(''),
262
- :challenge => srv_chall}
263
- calculatedhash = self.lm_response(arglm)
264
- when 'ntlm'
265
- argntlm = { :ntlm_hash => self.ntlm_hash(''),
266
- :challenge => srv_chall }
267
- calculatedhash = self.ntlm_response(argntlm)
268
- end
269
- when CONST::NTLM_V2_RESPONSE
270
- raise ArgumentError,"hash length must be exactly 16 bytes " if hash.length != 16
271
- cli_chall = arg[:cli_challenge]
272
- raise ArgumentError,"arg[:cli_challenge] is mandatory in this case" if not cli_chall
273
- user = arg[:user]
274
- raise ArgumentError,"arg[:user] is mandatory in this case" if not user
275
- domain = arg[:domain]
276
- raise ArgumentError,"arg[:domain] is mandatory in this case" if not domain
277
-
278
- case hash_type
279
- when 'lm'
280
- raise ArgumentError,"Client challenge length must be exactly 8 bytes " if cli_chall.length != 8
281
- arglm = { :ntlmv2_hash => self.ntlmv2_hash(user,'', domain),
282
- :challenge => srv_chall }
283
- optlm = { :client_challenge => cli_chall}
284
- calculatedhash = self.lmv2_response(arglm, optlm)[0,16]
285
- when 'ntlm'
286
- raise ArgumentError,"Client challenge length must be bigger then 8 bytes " if cli_chall.length <= 8
287
- argntlm = { :ntlmv2_hash => self.ntlmv2_hash(user, '', domain),
288
- :challenge => srv_chall }
289
- optntlm = { :nt_client_challenge => cli_chall}
290
- calculatedhash = self.ntlmv2_response(argntlm,optntlm)[0,16]
291
- end
292
- when CONST::NTLM_2_SESSION_RESPONSE
293
- raise ArgumentError,"hash length must be exactly 16 bytes " if hash.length != 24
294
- cli_chall = arg[:cli_challenge]
295
- raise ArgumentError,"arg[:cli_challenge] is mandatory in this case" if not cli_chall
296
- raise ArgumentError,"Client challenge length must be exactly 8 bytes " if cli_chall.length != 8
297
- case hash_type
298
- when 'lm'
299
- raise ArgumentError, "ntlm2_session is incompatible with lm"
300
- when 'ntlm'
301
- argntlm = { :ntlm_hash => self.ntlm_hash(''),
302
- :challenge => srv_chall }
303
- optntlm = { :client_challenge => cli_chall}
304
- end
305
- calculatedhash = self.ntlm2_session(argntlm,optntlm).join[24,24]
306
- else
307
- raise ArgumentError,"ntlm_ver is of unknow type"
308
- end
309
- hash == calculatedhash
310
- end
311
-
312
-
313
-
314
- #
315
- # Signing method added for metasploit project
316
- #
317
-
318
- # Used when only the LMv1 response is provided (i.e., with Win9x clients)
319
- def self.lmv1_user_session_key(pass, opt = {})
320
- if opt[:pass_is_hash]
321
- usk = pass[0,8]
322
- else
323
- usk = self.lm_hash(pass.upcase[0,7],true)
324
- end
325
- usk.ljust(16,"\x00")
326
- end
327
-
328
- # This variant is used when the client sends the NTLMv1 response
329
- def self.ntlmv1_user_session_key(pass, opt = {})
330
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
331
-
332
- if opt[:pass_is_hash]
333
- usk = pass
334
- else
335
- usk = self.ntlm_hash(pass)
336
- end
337
- OpenSSL::Digest::MD4.digest(usk)
338
- end
339
-
340
- # Used when NTLMv1 authentication is employed with NTLM2 session security
341
- def self.ntlm2_session_user_session_key(pass, srv_chall, cli_chall, opt = {})
342
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
343
-
344
- ntlm_key = self.ntlmv1_user_session_key(pass, opt )
345
- session_chal = srv_chall + cli_chall
346
- OpenSSL::HMAC.digest(OpenSSL::Digest::MD5.new, ntlm_key, session_chal)
347
- end
348
-
349
- # Used when the LMv2 response is sent
350
- def self.lmv2_user_session_key(user, pass, domain, srv_chall, cli_chall, opt = {})
351
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
352
-
353
- ntlmv2_key = self.ntlmv2_hash(user, pass, domain, opt)
354
- hash1 = OpenSSL::HMAC.digest(OpenSSL::Digest::MD5.new, ntlmv2_key, srv_chall + cli_chall)
355
- OpenSSL::HMAC.digest(OpenSSL::Digest::MD5.new, ntlmv2_key, hash1)
356
- end
357
-
358
- # Used when the NTLMv2 response is sent
359
- class << self; alias_method :ntlmv2_user_session_key, :lmv2_user_session_key; end
360
-
361
- # Used when LanMan Key flag is set
362
- def self.lanman_session_key(pass, srvchall, opt = {})
363
- if opt[:pass_is_hash]
364
- halfhash = pass[0,8]
365
- else
366
- halfhash = lm_hash(pass.upcase[0,7],true)
367
- end
368
- plain = self.lm_response({
369
- :lm_hash => halfhash[0,7],
370
- :challenge => srvchall
371
- }, true )
372
- key = halfhash + ["bdbdbdbdbdbd"].pack("H*")
373
- keys = self.gen_keys(key)
374
- apply_des(plain, keys).join
375
- end
376
-
377
- def self.encrypt_sessionkey(session_key, user_session_key)
378
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
379
- cipher = OpenSSL::Cipher::Cipher.new('rc4')
380
- cipher.encrypt
381
- cipher.key = user_session_key
382
- cipher.update(session_key)
383
- end
384
-
385
- def self.decrypt_sessionkey(encrypted_session_key, user_session_key)
386
- raise RuntimeError, "No OpenSSL support" if not @@loaded_openssl
387
- cipher = OpenSSL::Cipher::Cipher.new('rc4')
388
- cipher.decrypt
389
- cipher.key = user_session_key
390
- cipher.update(encrypted_session_key)
391
- end
392
-
393
- def self.make_weak_sessionkey(session_key,key_size,lanman_key = false)
394
- case key_size
395
- when 40
396
- if lanman_key
397
- return session_key[0,5] + "\xe5\x38\xb0"
398
- else
399
- return session_key[0,5]
400
- end
401
- when 56
402
- if lanman_key
403
- return session_key[0,7] + "\xa0"
404
- else
405
- return session_key[0,7]
406
- end
407
- else #128
408
- return session_key[0,16]
409
- end
410
- end
411
-
412
- end
413
- end
414
- end
415
- end