librex 0.0.68 → 0.0.70

data/lib/rex/proto/dcerpc/response.rb

@@ -7,176 +7,176 @@ module Proto
 module DCERPC
 class Response
 
-	attr_accessor :frag_len, :auth_len, :type, :vers_major, :vers_minor
-	attr_accessor :flags, :data_rep, :call_id, :max_frag_xmit, :max_frag_recv
-	attr_accessor :assoc_group, :sec_addr_len, :sec_addr, :num_results
-	attr_accessor :nack_reason, :xfer_syntax_uuid, :xfer_syntax_vers
-	attr_accessor :ack_reason, :ack_result, :ack_xfer_syntax_uuid, :ack_xfer_syntax_vers
-	attr_accessor :alloc_hint, :context_id, :cancel_cnt, :status, :stub_data
-	attr_accessor :raw
-
-	# Create a new DCERPC::Response object
-	# This can be initialized in two ways:
-	# 1) Call .new() with the first 10 bytes of packet, then call parse on the rest
-	# 2) Call .new() with the full packet contents
-	def initialize(data)
-
-		self.ack_result = []
-		self.ack_reason = []
-		self.ack_xfer_syntax_uuid = []
-		self.ack_xfer_syntax_vers = []
-
-		if (! data or data.length < 10)
-			raise Rex::Proto::DCERPC::Exceptions::InvalidPacket, 'DCERPC response packet is incomplete'
-		end
-
-		if (data.length == 10)
-			self.frag_len = data[8,2].unpack('v')[0]
-			self.raw = data
-		end
-
-		if (data.length > 10)
-			self.raw = data
-			self.parse
-		end
-	end
-
-	# Parse the contents of a DCERPC response packet and fill out all the fields
-	def parse(body = '')
-		self.raw = self.raw + body
-		self.type = self.raw[2,1].unpack('C')[0]
-
-		uuid = Rex::Proto::DCERPC::UUID
-		data = self.raw
-
-
-		if(not data)
-			raise Rex::Proto::DCERPC::Exceptions::InvalidPacket, 'DCERPC response packet is incomplete'
-		end
-
-		# BIND_ACK == 12, ALTER_CONTEXT_RESP == 15
-		if (self.type == 12 or self.type == 15)
-
-			# Decode most of the DCERPC header
-			self.vers_major,
-			self.vers_minor,
-			trash,
-			self.flags,
-			self.data_rep,
-			self.frag_len,
-			self.auth_len,
-			self.call_id,
-			self.max_frag_xmit,
-			self.max_frag_recv,
-			self.assoc_group,
-			self.sec_addr_len = data.unpack('CCCCNvvVvvVv')
-
-
-			if(not self.frag_len or data.length < self.frag_len)
-				raise Rex::Proto::DCERPC::Exceptions::InvalidPacket, 'DCERPC response packet is incomplete'
-			end
-
-			# Keep an offset into the packet handy
-			x = 0
-
-			# XXX This is still somewhat broken (4 digit ports)
-			self.sec_addr = data[26, self.sec_addr_len]
-
-			# Move the pointer into the packet forward
-			x += 26 + self.sec_addr_len
-
-			# Align the pointer on a dword boundary
-			while (x % 4 != 0)
-				x += 1
-			end
-
-			# Figure out how many results we have (multiple-context binds)
-			self.num_results = data[ x, 4 ].unpack('V')[0]
-
-			# Move the pointer to the ack_result[0] offset
-			x += 4
-
-			# Initialize the ack_result index
-			ack = 0
-
-			# Scan through all results and add them to the result arrays
-			while ack < self.num_results
-				self.ack_result[ack] = data[ x + 0, 2 ].unpack('v')[0]
-				self.ack_reason[ack] = data[ x + 2, 2 ].unpack('v')[0]
-				self.ack_xfer_syntax_uuid[ack] = uuid.uuid_unpack(data[ x + 4, 16 ])
-				self.ack_xfer_syntax_vers[ack] = data[ x + 20, 4 ].unpack('V')[0]
-				x += 24
-				ack += 1
-			end
-
-			# End of BIND_ACK || ALTER_CONTEXT_RESP
-		end
-
-		# BIND_NACK == 13
-		if (self.type == 13)
-
-			# Decode most of the DCERPC header
-			self.vers_major,
-			self.vers_minor,
-			trash,
-			self.flags,
-			self.data_rep,
-			self.frag_len,
-			self.auth_len,
-			self.call_id,
-			self.nack_reason = data.unpack('CCCCNvvVv')
-		end
-
-		# RESPONSE == 2
-		if (self.type == 2)
-
-			# Decode the DCERPC response header
-			self.vers_major,
-			self.vers_minor,
-			trash,
-			self.flags,
-			self.data_rep,
-			self.frag_len,
-			self.auth_len,
-			self.call_id,
-			self.alloc_hint,
-			self.context_id,
-			self.cancel_cnt = data.unpack('CCCCNvvVVvC')
-
-			# Error out if the whole header was not read
-			if !(self.alloc_hint and self.context_id and self.cancel_cnt)
-				raise Rex::Proto::DCERPC::Exceptions::InvalidPacket, 'DCERPC response packet is incomplete'
-			end
-
-			# Put the application data into self.stub_data
-			self.stub_data = data[data.length - self.alloc_hint, 0xffff]
-			# End of RESPONSE
-		end
-
-		# FAULT == 3
-		if (self.type == 3)
-
-			# Decode the DCERPC response header
-			self.vers_major,
-			self.vers_minor,
-			trash,
-			self.flags,
-			self.data_rep,
-			self.frag_len,
-			self.auth_len,
-			self.call_id,
-			self.alloc_hint,
-			self.context_id,
-			self.cancel_cnt,
-			trash,
-			self.status = data.unpack('CCCCNvvVVvCCV')
-
-			# Put the application data into self.stub_data
-			self.stub_data = data[data.length - self.alloc_hint, 0xffff]
-			# End of FAULT
-		end
-
-	end
+  attr_accessor :frag_len, :auth_len, :type, :vers_major, :vers_minor
+  attr_accessor :flags, :data_rep, :call_id, :max_frag_xmit, :max_frag_recv
+  attr_accessor :assoc_group, :sec_addr_len, :sec_addr, :num_results
+  attr_accessor :nack_reason, :xfer_syntax_uuid, :xfer_syntax_vers
+  attr_accessor :ack_reason, :ack_result, :ack_xfer_syntax_uuid, :ack_xfer_syntax_vers
+  attr_accessor :alloc_hint, :context_id, :cancel_cnt, :status, :stub_data
+  attr_accessor :raw
+
+  # Create a new DCERPC::Response object
+  # This can be initialized in two ways:
+  # 1) Call .new() with the first 10 bytes of packet, then call parse on the rest
+  # 2) Call .new() with the full packet contents
+  def initialize(data)
+
+    self.ack_result = []
+    self.ack_reason = []
+    self.ack_xfer_syntax_uuid = []
+    self.ack_xfer_syntax_vers = []
+
+    if (! data or data.length < 10)
+      raise Rex::Proto::DCERPC::Exceptions::InvalidPacket, 'DCERPC response packet is incomplete'
+    end
+
+    if (data.length == 10)
+      self.frag_len = data[8,2].unpack('v')[0]
+      self.raw = data
+    end
+
+    if (data.length > 10)
+      self.raw = data
+      self.parse
+    end
+  end
+
+  # Parse the contents of a DCERPC response packet and fill out all the fields
+  def parse(body = '')
+    self.raw = self.raw + body
+    self.type = self.raw[2,1].unpack('C')[0]
+
+    uuid = Rex::Proto::DCERPC::UUID
+    data = self.raw
+
+
+    if(not data)
+      raise Rex::Proto::DCERPC::Exceptions::InvalidPacket, 'DCERPC response packet is incomplete'
+    end
+
+    # BIND_ACK == 12, ALTER_CONTEXT_RESP == 15
+    if (self.type == 12 or self.type == 15)
+
+      # Decode most of the DCERPC header
+      self.vers_major,
+      self.vers_minor,
+      trash,
+      self.flags,
+      self.data_rep,
+      self.frag_len,
+      self.auth_len,
+      self.call_id,
+      self.max_frag_xmit,
+      self.max_frag_recv,
+      self.assoc_group,
+      self.sec_addr_len = data.unpack('CCCCNvvVvvVv')
+
+
+      if(not self.frag_len or data.length < self.frag_len)
+        raise Rex::Proto::DCERPC::Exceptions::InvalidPacket, 'DCERPC response packet is incomplete'
+      end
+
+      # Keep an offset into the packet handy
+      x = 0
+
+      # XXX This is still somewhat broken (4 digit ports)
+      self.sec_addr = data[26, self.sec_addr_len]
+
+      # Move the pointer into the packet forward
+      x += 26 + self.sec_addr_len
+
+      # Align the pointer on a dword boundary
+      while (x % 4 != 0)
+        x += 1
+      end
+
+      # Figure out how many results we have (multiple-context binds)
+      self.num_results = data[ x, 4 ].unpack('V')[0]
+
+      # Move the pointer to the ack_result[0] offset
+      x += 4
+
+      # Initialize the ack_result index
+      ack = 0
+
+      # Scan through all results and add them to the result arrays
+      while ack < self.num_results
+        self.ack_result[ack] = data[ x + 0, 2 ].unpack('v')[0]
+        self.ack_reason[ack] = data[ x + 2, 2 ].unpack('v')[0]
+        self.ack_xfer_syntax_uuid[ack] = uuid.uuid_unpack(data[ x + 4, 16 ])
+        self.ack_xfer_syntax_vers[ack] = data[ x + 20, 4 ].unpack('V')[0]
+        x += 24
+        ack += 1
+      end
+
+      # End of BIND_ACK || ALTER_CONTEXT_RESP
+    end
+
+    # BIND_NACK == 13
+    if (self.type == 13)
+
+      # Decode most of the DCERPC header
+      self.vers_major,
+      self.vers_minor,
+      trash,
+      self.flags,
+      self.data_rep,
+      self.frag_len,
+      self.auth_len,
+      self.call_id,
+      self.nack_reason = data.unpack('CCCCNvvVv')
+    end
+
+    # RESPONSE == 2
+    if (self.type == 2)
+
+      # Decode the DCERPC response header
+      self.vers_major,
+      self.vers_minor,
+      trash,
+      self.flags,
+      self.data_rep,
+      self.frag_len,
+      self.auth_len,
+      self.call_id,
+      self.alloc_hint,
+      self.context_id,
+      self.cancel_cnt = data.unpack('CCCCNvvVVvC')
+
+      # Error out if the whole header was not read
+      if !(self.alloc_hint and self.context_id and self.cancel_cnt)
+        raise Rex::Proto::DCERPC::Exceptions::InvalidPacket, 'DCERPC response packet is incomplete'
+      end
+
+      # Put the application data into self.stub_data
+      self.stub_data = data[data.length - self.alloc_hint, 0xffff]
+      # End of RESPONSE
+    end
+
+    # FAULT == 3
+    if (self.type == 3)
+
+      # Decode the DCERPC response header
+      self.vers_major,
+      self.vers_minor,
+      trash,
+      self.flags,
+      self.data_rep,
+      self.frag_len,
+      self.auth_len,
+      self.call_id,
+      self.alloc_hint,
+      self.context_id,
+      self.cancel_cnt,
+      trash,
+      self.status = data.unpack('CCCCNvvVVvCCV')
+
+      # Put the application data into self.stub_data
+      self.stub_data = data[data.length - self.alloc_hint, 0xffff]
+      # End of FAULT
+    end
+
+  end
 
 protected
 #	attr_accessor :raw

data/lib/rex/proto/dcerpc/uuid.rb

@@ -5,79 +5,79 @@ module DCERPC
 class UUID
 
 
-	@@known_uuids =
-	{
-		'MGMT'      => [ 'afa8bd80-7d8a-11c9-bef4-08002b102989', '2.0' ],
-		'REMACT'    => [ '4d9f4ab8-7d1c-11cf-861e-0020af6e7c57', '0.0' ],
-		'SYSACT'    => [ '000001a0-0000-0000-c000-000000000046', '0.0' ],
-		'LSA_DS'    => [ '3919286a-b10c-11d0-9ba8-00c04fd92ef5', '0.0' ],
-		'SAMR'      => [ '12345778-1234-abcd-ef00-0123456789ac', '1.0' ],
-		'MSMQ'      => [ 'fdb3a030-065f-11d1-bb9b-00a024ea5525', '1.0' ],
-		'EVENTLOG'  => [ '82273fdc-e32a-18c3-3f78-827929dc23ea', '0.0' ],
-		'SVCCTL'    => [ '367abb81-9844-35f1-ad32-98f038001003', '2.0' ],
-		'SRVSVC'    => [ '4b324fc8-1670-01d3-1278-5a47bf6ee188', '3.0' ],
-		'PNP'       => [ '8d9f4e40-a03d-11ce-8f69-08003e30051b', '1.0' ]
-	}
+  @@known_uuids =
+  {
+    'MGMT'      => [ 'afa8bd80-7d8a-11c9-bef4-08002b102989', '2.0' ],
+    'REMACT'    => [ '4d9f4ab8-7d1c-11cf-861e-0020af6e7c57', '0.0' ],
+    'SYSACT'    => [ '000001a0-0000-0000-c000-000000000046', '0.0' ],
+    'LSA_DS'    => [ '3919286a-b10c-11d0-9ba8-00c04fd92ef5', '0.0' ],
+    'SAMR'      => [ '12345778-1234-abcd-ef00-0123456789ac', '1.0' ],
+    'MSMQ'      => [ 'fdb3a030-065f-11d1-bb9b-00a024ea5525', '1.0' ],
+    'EVENTLOG'  => [ '82273fdc-e32a-18c3-3f78-827929dc23ea', '0.0' ],
+    'SVCCTL'    => [ '367abb81-9844-35f1-ad32-98f038001003', '2.0' ],
+    'SRVSVC'    => [ '4b324fc8-1670-01d3-1278-5a47bf6ee188', '3.0' ],
+    'PNP'       => [ '8d9f4e40-a03d-11ce-8f69-08003e30051b', '1.0' ]
+  }
 
-	# Convert a UUID in binary format to the string representation
-	def self.uuid_unpack(uuid_bin)
-		raise ArgumentError if uuid_bin.length != 16
-		sprintf("%.8x-%.4x-%.4x-%.4x-%s",
-			uuid_bin[ 0, 4].unpack('V')[0],
-			uuid_bin[ 4, 2].unpack('v')[0],
-			uuid_bin[ 6, 2].unpack('v')[0],
-			uuid_bin[ 8, 2].unpack('n')[0],
-			uuid_bin[10, 6].unpack('H*')[0]
-		)
-	end
+  # Convert a UUID in binary format to the string representation
+  def self.uuid_unpack(uuid_bin)
+    raise ArgumentError if uuid_bin.length != 16
+    sprintf("%.8x-%.4x-%.4x-%.4x-%s",
+      uuid_bin[ 0, 4].unpack('V')[0],
+      uuid_bin[ 4, 2].unpack('v')[0],
+      uuid_bin[ 6, 2].unpack('v')[0],
+      uuid_bin[ 8, 2].unpack('n')[0],
+      uuid_bin[10, 6].unpack('H*')[0]
+    )
+  end
 
-	# Validate a text based UUID
-	def self.is? (uuid_str)
-		raise ArgumentError if !uuid_str
-		if uuid_str.match(/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}$/)
-			return true
-		else
-			return false
-		end
-	end
+  # Validate a text based UUID
+  def self.is? (uuid_str)
+    raise ArgumentError if !uuid_str
+    if uuid_str.match(/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}$/)
+      return true
+    else
+      return false
+    end
+  end
 
-	# Convert a UUID in string format to the binary representation
-	def self.uuid_pack (uuid_str)
-		raise ArgumentError if !self.is?(uuid_str)
-		parts = uuid_str.split('-')
-		[ parts[0].hex, parts[1].hex, parts[2].hex, parts[3].hex ].pack('Vvvn') + [ parts[4] ].pack('H*')
-	end
+  # Convert a UUID in string format to the binary representation
+  def self.uuid_pack (uuid_str)
+    raise ArgumentError if !self.is?(uuid_str)
+    parts = uuid_str.split('-')
+    [ parts[0].hex, parts[1].hex, parts[2].hex, parts[3].hex ].pack('Vvvn') + [ parts[4] ].pack('H*')
+  end
 
-	# Provide the common TransferSyntax UUID in packed format
-	def self.xfer_syntax_uuid ()
-		self.uuid_pack('8a885d04-1ceb-11c9-9fe8-08002b104860')
-	end
+  # Provide the common TransferSyntax UUID in packed format
+  def self.xfer_syntax_uuid ()
+    self.uuid_pack('8a885d04-1ceb-11c9-9fe8-08002b104860')
+  end
 
-	# Provide the common TransferSyntax version number
-	def self.xfer_syntax_vers ()
-		'2.0'
-	end
+  # Provide the common TransferSyntax version number
+  def self.xfer_syntax_vers ()
+    '2.0'
+  end
 
-	# Determine the UUID string for the DCERPC service with this name
-	def self.uuid_by_name (name)
-		if @@known_uuids.key?(name)
-			@@known_uuids[name][0]
-		end
-	end
+  # Determine the UUID string for the DCERPC service with this name
+  def self.uuid_by_name (name)
+    if @@known_uuids.key?(name)
+      @@known_uuids[name][0]
+    end
+  end
 
-	# Determine the common version number for the DCERPC service with this name
-	def self.vers_by_name (name)
-		if @@known_uuids.key?(name)
-			@@known_uuids[name][1]
-		end
-	end
+  # Determine the common version number for the DCERPC service with this name
+  def self.vers_by_name (name)
+    if @@known_uuids.key?(name)
+      @@known_uuids[name][1]
+    end
+  end
 
-	# Convert a string or number in float format to two unique numbers 2.0 => [2, 0]
-	def self.vers_to_nums (vers)
-		vers_maj = vers.to_i
-		vers_min = ((vers.to_f - vers.to_i) * 10).to_i
-		return vers_maj, vers_min
-	end
+  # Convert a string or number in float format to two unique numbers 2.0 => [2, 0]
+  def self.vers_to_nums (vers)
+    vers_maj = vers.to_i
+    vers_min = ((vers.to_f - vers.to_i) * 10).to_i
+    return vers_maj, vers_min
+  end
 
 end
 end