librex 0.0.68 → 0.0.70

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (528) hide show
  1. checksums.yaml +15 -0
  2. data/README.markdown +1 -1
  3. data/Rakefile +18 -16
  4. data/lib/rex.rb +14 -10
  5. data/lib/rex/LICENSE +2 -2
  6. data/lib/rex/arch.rb +76 -76
  7. data/lib/rex/arch/sparc.rb +57 -58
  8. data/lib/rex/arch/x86.rb +506 -496
  9. data/lib/rex/assembly/nasm.rb +83 -84
  10. data/lib/rex/compat.rb +228 -173
  11. data/lib/rex/constants.rb +47 -37
  12. data/lib/rex/elfparsey.rb +0 -3
  13. data/lib/rex/elfparsey/elf.rb +107 -110
  14. data/lib/rex/elfparsey/elfbase.rb +244 -247
  15. data/lib/rex/elfparsey/exceptions.rb +0 -3
  16. data/lib/rex/elfscan.rb +0 -3
  17. data/lib/rex/elfscan/scanner.rb +184 -166
  18. data/lib/rex/elfscan/search.rb +35 -38
  19. data/lib/rex/encoder/alpha2.rb +1 -2
  20. data/lib/rex/encoder/alpha2/alpha_mixed.rb +52 -53
  21. data/lib/rex/encoder/alpha2/alpha_upper.rb +62 -63
  22. data/lib/rex/encoder/alpha2/generic.rb +77 -78
  23. data/lib/rex/encoder/alpha2/unicode_mixed.rb +101 -97
  24. data/lib/rex/encoder/alpha2/unicode_upper.rb +106 -107
  25. data/lib/rex/encoder/bloxor/bloxor.rb +326 -0
  26. data/lib/rex/encoder/ndr.rb +68 -68
  27. data/lib/rex/encoder/nonalpha.rb +50 -51
  28. data/lib/rex/encoder/nonupper.rb +50 -51
  29. data/lib/rex/encoder/xdr.rb +78 -78
  30. data/lib/rex/encoder/xor.rb +52 -53
  31. data/lib/rex/encoder/xor/dword.rb +1 -2
  32. data/lib/rex/encoder/xor/dword_additive.rb +1 -2
  33. data/lib/rex/encoders/xor_dword.rb +17 -18
  34. data/lib/rex/encoders/xor_dword_additive.rb +35 -36
  35. data/lib/rex/encoding/xor.rb +0 -1
  36. data/lib/rex/encoding/xor/byte.rb +3 -4
  37. data/lib/rex/encoding/xor/dword.rb +3 -4
  38. data/lib/rex/encoding/xor/dword_additive.rb +72 -73
  39. data/lib/rex/encoding/xor/exceptions.rb +2 -3
  40. data/lib/rex/encoding/xor/generic.rb +129 -130
  41. data/lib/rex/encoding/xor/qword.rb +3 -4
  42. data/lib/rex/encoding/xor/word.rb +3 -4
  43. data/lib/rex/exceptions.rb +100 -101
  44. data/lib/rex/exploitation/cmdstager.rb +3 -3
  45. data/lib/rex/exploitation/cmdstager/base.rb +170 -156
  46. data/lib/rex/exploitation/cmdstager/bourne.rb +105 -0
  47. data/lib/rex/exploitation/cmdstager/debug_asm.rb +110 -113
  48. data/lib/rex/exploitation/cmdstager/debug_write.rb +106 -109
  49. data/lib/rex/exploitation/cmdstager/echo.rb +164 -0
  50. data/lib/rex/exploitation/cmdstager/printf.rb +122 -0
  51. data/lib/rex/exploitation/cmdstager/tftp.rb +34 -27
  52. data/lib/rex/exploitation/cmdstager/vbs.rb +95 -98
  53. data/lib/rex/exploitation/egghunter.rb +359 -346
  54. data/lib/rex/exploitation/encryptjs.rb +60 -60
  55. data/lib/rex/exploitation/heaplib.rb +76 -76
  56. data/lib/rex/exploitation/js.rb +6 -0
  57. data/lib/rex/exploitation/js/detect.rb +69 -0
  58. data/lib/rex/exploitation/js/memory.rb +81 -0
  59. data/lib/rex/exploitation/js/network.rb +84 -0
  60. data/lib/rex/exploitation/js/utils.rb +33 -0
  61. data/lib/rex/exploitation/jsobfu.rb +448 -424
  62. data/lib/rex/exploitation/obfuscatejs.rb +301 -301
  63. data/lib/rex/exploitation/omelet.rb +257 -257
  64. data/lib/rex/exploitation/opcodedb.rb +699 -699
  65. data/lib/rex/exploitation/ropdb.rb +189 -0
  66. data/lib/rex/exploitation/seh.rb +68 -68
  67. data/lib/rex/file.rb +96 -49
  68. data/lib/rex/image_source.rb +0 -3
  69. data/lib/rex/image_source/disk.rb +45 -48
  70. data/lib/rex/image_source/image_source.rb +33 -36
  71. data/lib/rex/image_source/memory.rb +17 -20
  72. data/lib/rex/io/bidirectional_pipe.rb +118 -115
  73. data/lib/rex/io/datagram_abstraction.rb +13 -14
  74. data/lib/rex/io/ring_buffer.rb +273 -273
  75. data/lib/rex/io/stream.rb +284 -284
  76. data/lib/rex/io/stream_abstraction.rb +183 -181
  77. data/lib/rex/io/stream_server.rb +193 -193
  78. data/lib/rex/job_container.rb +167 -167
  79. data/lib/rex/logging.rb +0 -1
  80. data/lib/rex/logging/log_dispatcher.rb +113 -113
  81. data/lib/rex/logging/log_sink.rb +17 -17
  82. data/lib/rex/logging/sinks/flatfile.rb +36 -36
  83. data/lib/rex/logging/sinks/stderr.rb +27 -27
  84. data/lib/rex/mac_oui.rb +16572 -16571
  85. data/lib/rex/machparsey.rb +0 -1
  86. data/lib/rex/machparsey/exceptions.rb +0 -1
  87. data/lib/rex/machparsey/mach.rb +160 -161
  88. data/lib/rex/machparsey/machbase.rb +367 -368
  89. data/lib/rex/machscan.rb +0 -1
  90. data/lib/rex/machscan/scanner.rb +175 -176
  91. data/lib/rex/mime/encoding.rb +17 -0
  92. data/lib/rex/mime/header.rb +58 -58
  93. data/lib/rex/mime/message.rb +140 -137
  94. data/lib/rex/mime/part.rb +41 -12
  95. data/lib/rex/nop/opty2.rb +90 -90
  96. data/lib/rex/nop/opty2_tables.rb +273 -273
  97. data/lib/rex/ole.rb +0 -4
  98. data/lib/rex/ole/clsid.rb +26 -30
  99. data/lib/rex/ole/difat.rb +121 -125
  100. data/lib/rex/ole/directory.rb +205 -209
  101. data/lib/rex/ole/direntry.rb +217 -221
  102. data/lib/rex/ole/fat.rb +79 -83
  103. data/lib/rex/ole/header.rb +178 -182
  104. data/lib/rex/ole/minifat.rb +49 -53
  105. data/lib/rex/ole/propset.rb +113 -117
  106. data/lib/rex/ole/samples/create_ole.rb +8 -9
  107. data/lib/rex/ole/samples/dir.rb +10 -11
  108. data/lib/rex/ole/samples/dump_stream.rb +14 -15
  109. data/lib/rex/ole/samples/ole_info.rb +5 -6
  110. data/lib/rex/ole/storage.rb +372 -376
  111. data/lib/rex/ole/stream.rb +33 -37
  112. data/lib/rex/ole/substorage.rb +20 -24
  113. data/lib/rex/ole/util.rb +137 -141
  114. data/lib/rex/parser/acunetix_nokogiri.rb +398 -398
  115. data/lib/rex/parser/apple_backup_manifestdb.rb +116 -116
  116. data/lib/rex/parser/appscan_nokogiri.rb +359 -359
  117. data/lib/rex/parser/arguments.rb +88 -88
  118. data/lib/rex/parser/burp_session_nokogiri.rb +258 -258
  119. data/lib/rex/parser/ci_nokogiri.rb +184 -184
  120. data/lib/rex/parser/foundstone_nokogiri.rb +334 -333
  121. data/lib/rex/parser/fusionvm_nokogiri.rb +94 -94
  122. data/lib/rex/parser/ini.rb +167 -167
  123. data/lib/rex/parser/ip360_aspl_xml.rb +84 -84
  124. data/lib/rex/parser/ip360_xml.rb +77 -77
  125. data/lib/rex/parser/mbsa_nokogiri.rb +224 -224
  126. data/lib/rex/parser/nessus_xml.rb +100 -100
  127. data/lib/rex/parser/netsparker_xml.rb +89 -75
  128. data/lib/rex/parser/nexpose_raw_nokogiri.rb +677 -677
  129. data/lib/rex/parser/nexpose_simple_nokogiri.rb +322 -322
  130. data/lib/rex/parser/nexpose_xml.rb +105 -105
  131. data/lib/rex/parser/nmap_nokogiri.rb +386 -386
  132. data/lib/rex/parser/nmap_xml.rb +116 -116
  133. data/lib/rex/parser/nokogiri_doc_mixin.rb +223 -221
  134. data/lib/rex/parser/openvas_nokogiri.rb +162 -162
  135. data/lib/rex/parser/outpost24_nokogiri.rb +239 -0
  136. data/lib/rex/parser/retina_xml.rb +90 -90
  137. data/lib/rex/parser/unattend.rb +171 -0
  138. data/lib/rex/parser/wapiti_nokogiri.rb +89 -89
  139. data/lib/rex/payloads/win32/common.rb +14 -14
  140. data/lib/rex/payloads/win32/kernel.rb +36 -36
  141. data/lib/rex/payloads/win32/kernel/common.rb +32 -32
  142. data/lib/rex/payloads/win32/kernel/recovery.rb +27 -27
  143. data/lib/rex/payloads/win32/kernel/stager.rb +170 -170
  144. data/lib/rex/peparsey.rb +0 -3
  145. data/lib/rex/peparsey/exceptions.rb +0 -3
  146. data/lib/rex/peparsey/pe.rb +196 -199
  147. data/lib/rex/peparsey/pe_memdump.rb +35 -38
  148. data/lib/rex/peparsey/pebase.rb +1633 -1652
  149. data/lib/rex/peparsey/section.rb +115 -124
  150. data/lib/rex/pescan.rb +0 -3
  151. data/lib/rex/pescan/analyze.rb +351 -351
  152. data/lib/rex/pescan/scanner.rb +182 -182
  153. data/lib/rex/pescan/search.rb +59 -59
  154. data/lib/rex/platforms/windows.rb +37 -37
  155. data/lib/rex/poly.rb +111 -110
  156. data/lib/rex/poly/block.rb +419 -417
  157. data/lib/rex/poly/machine.rb +12 -0
  158. data/lib/rex/poly/machine/machine.rb +829 -0
  159. data/lib/rex/poly/machine/x86.rb +508 -0
  160. data/lib/rex/poly/register.rb +70 -70
  161. data/lib/rex/poly/register/x86.rb +22 -22
  162. data/lib/rex/post.rb +0 -1
  163. data/lib/rex/post/dir.rb +35 -36
  164. data/lib/rex/post/file.rb +140 -141
  165. data/lib/rex/post/file_stat.rb +198 -199
  166. data/lib/rex/post/io.rb +167 -168
  167. data/lib/rex/post/meterpreter.rb +1 -1
  168. data/lib/rex/post/meterpreter/channel.rb +389 -390
  169. data/lib/rex/post/meterpreter/channel_container.rb +33 -34
  170. data/lib/rex/post/meterpreter/channels/pool.rb +129 -130
  171. data/lib/rex/post/meterpreter/channels/pools/file.rb +35 -36
  172. data/lib/rex/post/meterpreter/channels/pools/stream_pool.rb +72 -73
  173. data/lib/rex/post/meterpreter/channels/stream.rb +62 -63
  174. data/lib/rex/post/meterpreter/client.rb +442 -436
  175. data/lib/rex/post/meterpreter/client_core.rb +326 -310
  176. data/lib/rex/post/meterpreter/dependencies.rb +0 -1
  177. data/lib/rex/post/meterpreter/extension.rb +12 -13
  178. data/lib/rex/post/meterpreter/extensions/espia/espia.rb +35 -36
  179. data/lib/rex/post/meterpreter/extensions/extapi/adsi/adsi.rb +71 -0
  180. data/lib/rex/post/meterpreter/extensions/extapi/clipboard/clipboard.rb +169 -0
  181. data/lib/rex/post/meterpreter/extensions/extapi/extapi.rb +45 -0
  182. data/lib/rex/post/meterpreter/extensions/extapi/service/service.rb +104 -0
  183. data/lib/rex/post/meterpreter/extensions/extapi/tlv.rb +77 -0
  184. data/lib/rex/post/meterpreter/extensions/extapi/window/window.rb +56 -0
  185. data/lib/rex/post/meterpreter/extensions/extapi/wmi/wmi.rb +75 -0
  186. data/lib/rex/post/meterpreter/extensions/incognito/incognito.rb +70 -71
  187. data/lib/rex/post/meterpreter/extensions/kiwi/kiwi.rb +361 -0
  188. data/lib/rex/post/meterpreter/extensions/kiwi/tlv.rb +76 -0
  189. data/lib/rex/post/meterpreter/extensions/lanattacks/dhcp/dhcp.rb +78 -0
  190. data/lib/rex/post/meterpreter/extensions/lanattacks/lanattacks.rb +22 -78
  191. data/lib/rex/post/meterpreter/extensions/lanattacks/tftp/tftp.rb +49 -0
  192. data/lib/rex/post/meterpreter/extensions/lanattacks/tlv.rb +4 -4
  193. data/lib/rex/post/meterpreter/extensions/mimikatz/mimikatz.rb +128 -0
  194. data/lib/rex/post/meterpreter/extensions/mimikatz/tlv.rb +16 -0
  195. data/lib/rex/post/meterpreter/extensions/networkpug/networkpug.rb +38 -39
  196. data/lib/rex/post/meterpreter/extensions/networkpug/tlv.rb +1 -1
  197. data/lib/rex/post/meterpreter/extensions/priv/fs.rb +95 -96
  198. data/lib/rex/post/meterpreter/extensions/priv/passwd.rb +39 -40
  199. data/lib/rex/post/meterpreter/extensions/priv/priv.rb +80 -85
  200. data/lib/rex/post/meterpreter/extensions/sniffer/sniffer.rb +94 -95
  201. data/lib/rex/post/meterpreter/extensions/stdapi/constants.rb +207 -147
  202. data/lib/rex/post/meterpreter/extensions/stdapi/fs/dir.rb +258 -259
  203. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb +366 -301
  204. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb +72 -73
  205. data/lib/rex/post/meterpreter/extensions/stdapi/fs/io.rb +24 -25
  206. data/lib/rex/post/meterpreter/extensions/stdapi/net/arp.rb +59 -0
  207. data/lib/rex/post/meterpreter/extensions/stdapi/net/config.rb +227 -149
  208. data/lib/rex/post/meterpreter/extensions/stdapi/net/interface.rb +107 -108
  209. data/lib/rex/post/meterpreter/extensions/stdapi/net/netstat.rb +97 -0
  210. data/lib/rex/post/meterpreter/extensions/stdapi/net/resolve.rb +106 -0
  211. data/lib/rex/post/meterpreter/extensions/stdapi/net/route.rb +41 -42
  212. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket.rb +102 -101
  213. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_client_channel.rb +151 -152
  214. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_server_channel.rb +142 -142
  215. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/udp_channel.rb +185 -185
  216. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb +38118 -38117
  217. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb +7 -7
  218. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_advapi32.rb +2086 -2084
  219. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_crypt32.rb +15 -15
  220. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_iphlpapi.rb +80 -80
  221. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_kernel32.rb +3835 -3833
  222. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_netapi32.rb +84 -28
  223. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ntdll.rb +151 -137
  224. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_shell32.rb +15 -6
  225. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_user32.rb +3155 -3155
  226. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_version.rb +41 -0
  227. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_wlanapi.rb +70 -70
  228. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_wldap32.rb +128 -0
  229. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ws2_32.rb +596 -596
  230. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb +310 -301
  231. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb +71 -61
  232. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb +100 -100
  233. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_wrapper.rb +14 -14
  234. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/mock_magic.rb +488 -488
  235. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/multicall.rb +273 -264
  236. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/platform_util.rb +5 -5
  237. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb +240 -238
  238. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/tlv.rb +17 -15
  239. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/type/pointer_util.rb +61 -61
  240. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/util.rb +654 -635
  241. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb +49 -49
  242. data/lib/rex/post/meterpreter/extensions/stdapi/stdapi.rb +103 -102
  243. data/lib/rex/post/meterpreter/extensions/stdapi/sys/config.rb +98 -68
  244. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log.rb +165 -166
  245. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log_subsystem/event_record.rb +16 -17
  246. data/lib/rex/post/meterpreter/extensions/stdapi/sys/power.rb +34 -36
  247. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb +363 -364
  248. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/image.rb +102 -103
  249. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/io.rb +28 -29
  250. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/memory.rb +303 -304
  251. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/thread.rb +113 -114
  252. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry.rb +260 -261
  253. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_key.rb +165 -166
  254. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_value.rb +69 -70
  255. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/remote_registry_key.rb +160 -161
  256. data/lib/rex/post/meterpreter/extensions/stdapi/sys/thread.rb +143 -144
  257. data/lib/rex/post/meterpreter/extensions/stdapi/tlv.rb +29 -12
  258. data/lib/rex/post/meterpreter/extensions/stdapi/ui.rb +230 -231
  259. data/lib/rex/post/meterpreter/extensions/stdapi/webcam/webcam.rb +181 -44
  260. data/lib/rex/post/meterpreter/inbound_packet_handler.rb +12 -13
  261. data/lib/rex/post/meterpreter/object_aliases.rb +56 -57
  262. data/lib/rex/post/meterpreter/packet.rb +591 -592
  263. data/lib/rex/post/meterpreter/packet_dispatcher.rb +506 -496
  264. data/lib/rex/post/meterpreter/packet_parser.rb +72 -73
  265. data/lib/rex/post/meterpreter/packet_response_waiter.rb +56 -57
  266. data/lib/rex/post/meterpreter/ui/console.rb +112 -112
  267. data/lib/rex/post/meterpreter/ui/console/command_dispatcher.rb +53 -53
  268. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/core.rb +911 -854
  269. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/espia.rb +86 -86
  270. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi.rb +65 -0
  271. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/adsi.rb +198 -0
  272. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/clipboard.rb +444 -0
  273. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/service.rb +199 -0
  274. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/window.rb +118 -0
  275. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/wmi.rb +108 -0
  276. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/incognito.rb +220 -220
  277. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/kiwi.rb +509 -0
  278. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/lanattacks.rb +60 -0
  279. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/lanattacks/dhcp.rb +254 -0
  280. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/lanattacks/tftp.rb +159 -0
  281. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/mimikatz.rb +182 -0
  282. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/networkpug.rb +173 -173
  283. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv.rb +40 -40
  284. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb +75 -77
  285. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd.rb +30 -30
  286. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp.rb +105 -105
  287. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/sniffer.rb +182 -182
  288. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi.rb +37 -37
  289. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb +504 -482
  290. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/net.rb +401 -330
  291. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/sys.rb +883 -581
  292. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/ui.rb +296 -299
  293. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/webcam.rb +320 -153
  294. data/lib/rex/post/meterpreter/ui/console/interactive_channel.rb +78 -78
  295. data/lib/rex/post/permission.rb +0 -1
  296. data/lib/rex/post/process.rb +39 -40
  297. data/lib/rex/post/thread.rb +41 -42
  298. data/lib/rex/post/ui.rb +35 -36
  299. data/lib/rex/proto/addp.rb +218 -0
  300. data/lib/rex/proto/dcerpc/client.rb +344 -344
  301. data/lib/rex/proto/dcerpc/exceptions.rb +128 -128
  302. data/lib/rex/proto/dcerpc/handle.rb +32 -32
  303. data/lib/rex/proto/dcerpc/ndr.rb +56 -56
  304. data/lib/rex/proto/dcerpc/packet.rb +249 -245
  305. data/lib/rex/proto/dcerpc/response.rb +170 -170
  306. data/lib/rex/proto/dcerpc/uuid.rb +65 -65
  307. data/lib/rex/proto/dcerpc/wdscp.rb +3 -0
  308. data/lib/rex/proto/dcerpc/wdscp/constants.rb +89 -0
  309. data/lib/rex/proto/dcerpc/wdscp/packet.rb +94 -0
  310. data/lib/rex/proto/dhcp.rb +0 -1
  311. data/lib/rex/proto/dhcp/constants.rb +0 -1
  312. data/lib/rex/proto/dhcp/server.rb +303 -304
  313. data/lib/rex/proto/drda/constants.rb +1 -1
  314. data/lib/rex/proto/drda/packet.rb +186 -186
  315. data/lib/rex/proto/drda/utils.rb +104 -104
  316. data/lib/rex/proto/http.rb +1 -0
  317. data/lib/rex/proto/http/client.rb +692 -820
  318. data/lib/rex/proto/http/client_request.rb +472 -0
  319. data/lib/rex/proto/http/handler.rb +25 -25
  320. data/lib/rex/proto/http/handler/erb.rb +104 -104
  321. data/lib/rex/proto/http/handler/proc.rb +37 -37
  322. data/lib/rex/proto/http/header.rb +149 -149
  323. data/lib/rex/proto/http/packet.rb +388 -382
  324. data/lib/rex/proto/http/request.rb +332 -335
  325. data/lib/rex/proto/http/response.rb +132 -72
  326. data/lib/rex/proto/http/server.rb +348 -338
  327. data/lib/rex/proto/iax2/call.rb +310 -310
  328. data/lib/rex/proto/iax2/client.rb +197 -197
  329. data/lib/rex/proto/iax2/codecs/alaw.rb +4 -4
  330. data/lib/rex/proto/iax2/codecs/mulaw.rb +4 -4
  331. data/lib/rex/proto/ipmi.rb +57 -0
  332. data/lib/rex/proto/ipmi/channel_auth_reply.rb +88 -0
  333. data/lib/rex/proto/ipmi/open_session_reply.rb +35 -0
  334. data/lib/rex/proto/ipmi/rakp2.rb +35 -0
  335. data/lib/rex/proto/ipmi/utils.rb +125 -0
  336. data/lib/rex/proto/natpmp.rb +1 -5
  337. data/lib/rex/proto/natpmp/constants.rb +4 -4
  338. data/lib/rex/proto/natpmp/packet.rb +25 -25
  339. data/lib/rex/proto/ntlm/base.rb +271 -271
  340. data/lib/rex/proto/ntlm/constants.rb +61 -61
  341. data/lib/rex/proto/ntlm/crypt.rb +348 -352
  342. data/lib/rex/proto/ntlm/exceptions.rb +3 -3
  343. data/lib/rex/proto/ntlm/message.rb +468 -471
  344. data/lib/rex/proto/ntlm/utils.rb +746 -746
  345. data/lib/rex/proto/pjl.rb +30 -0
  346. data/lib/rex/proto/pjl/client.rb +162 -0
  347. data/lib/rex/proto/proxy/socks4a.rb +440 -440
  348. data/lib/rex/proto/rfb.rb +1 -8
  349. data/lib/rex/proto/rfb/cipher.rb +46 -49
  350. data/lib/rex/proto/rfb/client.rb +179 -182
  351. data/lib/rex/proto/rfb/constants.rb +18 -21
  352. data/lib/rex/proto/smb/client.rb +1954 -1843
  353. data/lib/rex/proto/smb/constants.rb +533 -516
  354. data/lib/rex/proto/smb/crypt.rb +21 -21
  355. data/lib/rex/proto/smb/evasions.rb +43 -43
  356. data/lib/rex/proto/smb/exceptions.rb +791 -791
  357. data/lib/rex/proto/smb/simpleclient.rb +142 -286
  358. data/lib/rex/proto/smb/simpleclient/open_file.rb +106 -0
  359. data/lib/rex/proto/smb/simpleclient/open_pipe.rb +57 -0
  360. data/lib/rex/proto/smb/utils.rb +81 -81
  361. data/lib/rex/proto/sunrpc/client.rb +158 -158
  362. data/lib/rex/proto/tftp.rb +0 -1
  363. data/lib/rex/proto/tftp/client.rb +289 -289
  364. data/lib/rex/proto/tftp/constants.rb +9 -10
  365. data/lib/rex/proto/tftp/server.rb +466 -467
  366. data/lib/rex/random_identifier_generator.rb +176 -0
  367. data/lib/rex/registry.rb +1 -1
  368. data/lib/rex/registry/hive.rb +88 -88
  369. data/lib/rex/registry/lfkey.rb +25 -25
  370. data/lib/rex/registry/nodekey.rb +30 -30
  371. data/lib/rex/registry/regf.rb +10 -10
  372. data/lib/rex/registry/valuekey.rb +43 -43
  373. data/lib/rex/registry/valuelist.rb +13 -13
  374. data/lib/rex/ropbuilder/rop.rb +254 -253
  375. data/lib/rex/script.rb +21 -22
  376. data/lib/rex/script/base.rb +51 -50
  377. data/lib/rex/script/meterpreter.rb +2 -2
  378. data/lib/rex/service.rb +24 -24
  379. data/lib/rex/service_manager.rb +132 -132
  380. data/lib/rex/services/local_relay.rb +398 -398
  381. data/lib/rex/socket.rb +758 -763
  382. data/lib/rex/socket/comm.rb +95 -95
  383. data/lib/rex/socket/comm/local.rb +507 -440
  384. data/lib/rex/socket/ip.rb +118 -118
  385. data/lib/rex/socket/parameters.rb +351 -350
  386. data/lib/rex/socket/range_walker.rb +445 -368
  387. data/lib/rex/socket/ssl_tcp.rb +323 -317
  388. data/lib/rex/socket/ssl_tcp_server.rb +173 -158
  389. data/lib/rex/socket/subnet_walker.rb +48 -48
  390. data/lib/rex/socket/switch_board.rb +259 -259
  391. data/lib/rex/socket/tcp.rb +58 -56
  392. data/lib/rex/socket/tcp_server.rb +42 -42
  393. data/lib/rex/socket/udp.rb +152 -152
  394. data/lib/rex/sslscan/result.rb +200 -0
  395. data/lib/rex/sslscan/scanner.rb +205 -0
  396. data/lib/rex/struct2.rb +0 -1
  397. data/lib/rex/struct2/c_struct.rb +162 -163
  398. data/lib/rex/struct2/c_struct_template.rb +21 -22
  399. data/lib/rex/struct2/constant.rb +6 -7
  400. data/lib/rex/struct2/element.rb +30 -31
  401. data/lib/rex/struct2/generic.rb +60 -61
  402. data/lib/rex/struct2/restraint.rb +40 -41
  403. data/lib/rex/struct2/s_string.rb +60 -61
  404. data/lib/rex/struct2/s_struct.rb +97 -98
  405. data/lib/rex/sync.rb +0 -1
  406. data/lib/rex/sync/event.rb +62 -72
  407. data/lib/rex/sync/read_write_lock.rb +149 -149
  408. data/lib/rex/sync/ref.rb +42 -42
  409. data/lib/rex/sync/thread_safe.rb +59 -59
  410. data/lib/rex/text.rb +1803 -1315
  411. data/lib/rex/thread_factory.rb +25 -25
  412. data/lib/rex/time.rb +44 -44
  413. data/lib/rex/transformer.rb +91 -91
  414. data/lib/rex/ui/interactive.rb +265 -265
  415. data/lib/rex/ui/output.rb +66 -60
  416. data/lib/rex/ui/progress_tracker.rb +79 -79
  417. data/lib/rex/ui/subscriber.rb +144 -134
  418. data/lib/rex/ui/text/color.rb +76 -76
  419. data/lib/rex/ui/text/dispatcher_shell.rb +512 -505
  420. data/lib/rex/ui/text/input.rb +96 -96
  421. data/lib/rex/ui/text/input/buffer.rb +58 -58
  422. data/lib/rex/ui/text/input/readline.rb +114 -114
  423. data/lib/rex/ui/text/input/socket.rb +77 -77
  424. data/lib/rex/ui/text/input/stdio.rb +24 -24
  425. data/lib/rex/ui/text/irb_shell.rb +45 -41
  426. data/lib/rex/ui/text/output.rb +64 -60
  427. data/lib/rex/ui/text/output/buffer.rb +42 -42
  428. data/lib/rex/ui/text/output/buffer/stdout.rb +25 -0
  429. data/lib/rex/ui/text/output/file.rb +24 -24
  430. data/lib/rex/ui/text/output/socket.rb +24 -24
  431. data/lib/rex/ui/text/output/stdio.rb +29 -29
  432. data/lib/rex/ui/text/output/tee.rb +36 -36
  433. data/lib/rex/ui/text/progress_tracker.rb +37 -37
  434. data/lib/rex/ui/text/shell.rb +371 -361
  435. data/lib/rex/ui/text/table.rb +320 -284
  436. data/lib/rex/zip.rb +0 -1
  437. data/lib/rex/zip/archive.rb +115 -94
  438. data/lib/rex/zip/blocks.rb +101 -100
  439. data/lib/rex/zip/entry.rb +108 -99
  440. data/lib/rex/zip/jar.rb +261 -206
  441. data/lib/rex/zip/samples/comment.rb +1 -2
  442. data/lib/rex/zip/samples/mkwar.rb +12 -13
  443. data/lib/rex/zip/samples/mkzip.rb +1 -2
  444. data/lib/rex/zip/samples/recursive.rb +29 -30
  445. metadata +424 -446
  446. data/lib/rex/arch/sparc.rb.ut.rb +0 -19
  447. data/lib/rex/arch/x86.rb.ut.rb +0 -94
  448. data/lib/rex/assembly/nasm.rb.ut.rb +0 -23
  449. data/lib/rex/encoder/ndr.rb.ut.rb +0 -45
  450. data/lib/rex/encoder/xdr.rb.ut.rb +0 -30
  451. data/lib/rex/encoders/xor_dword_additive.rb.ut.rb +0 -13
  452. data/lib/rex/encoding/xor.rb.ts.rb +0 -15
  453. data/lib/rex/encoding/xor/byte.rb.ut.rb +0 -22
  454. data/lib/rex/encoding/xor/dword.rb.ut.rb +0 -16
  455. data/lib/rex/encoding/xor/dword_additive.rb.ut.rb +0 -16
  456. data/lib/rex/encoding/xor/generic.rb.ut.rb +0 -121
  457. data/lib/rex/encoding/xor/word.rb.ut.rb +0 -14
  458. data/lib/rex/exceptions.rb.ut.rb +0 -45
  459. data/lib/rex/exploitation/egghunter.rb.ut.rb +0 -28
  460. data/lib/rex/exploitation/javascriptosdetect.js +0 -1014
  461. data/lib/rex/exploitation/javascriptosdetect.rb +0 -43
  462. data/lib/rex/exploitation/omelet.rb.ut.rb +0 -27
  463. data/lib/rex/exploitation/opcodedb.rb.ut.rb +0 -280
  464. data/lib/rex/exploitation/seh.rb.ut.rb +0 -20
  465. data/lib/rex/file.rb.ut.rb +0 -17
  466. data/lib/rex/io/ring_buffer.rb.ut.rb +0 -135
  467. data/lib/rex/nop/opty2.rb.ut.rb +0 -24
  468. data/lib/rex/parser/arguments.rb.ut.rb +0 -68
  469. data/lib/rex/parser/ini.rb.ut.rb +0 -30
  470. data/lib/rex/post/meterpreter/extensions/stdapi/railgun.rb.ts.rb +0 -18
  471. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb.ut.rb +0 -39
  472. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb.ut.rb +0 -37
  473. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb.ut.rb +0 -52
  474. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb.ut.rb +0 -43
  475. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb.ut.rb +0 -128
  476. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_wrapper.rb.ut.rb +0 -64
  477. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/platform_util.rb.ut.rb +0 -29
  478. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb.ut.rb +0 -155
  479. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/type/pointer_util.rb.ut.rb +0 -128
  480. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb.ut.rb +0 -124
  481. data/lib/rex/proto.rb.ts.rb +0 -9
  482. data/lib/rex/proto/dcerpc.rb.ts.rb +0 -10
  483. data/lib/rex/proto/dcerpc/client.rb.ut.rb +0 -492
  484. data/lib/rex/proto/dcerpc/handle.rb.ut.rb +0 -86
  485. data/lib/rex/proto/dcerpc/ndr.rb.ut.rb +0 -42
  486. data/lib/rex/proto/dcerpc/packet.rb.ut.rb +0 -57
  487. data/lib/rex/proto/dcerpc/response.rb.ut.rb +0 -16
  488. data/lib/rex/proto/dcerpc/uuid.rb.ut.rb +0 -47
  489. data/lib/rex/proto/drda.rb.ts.rb +0 -18
  490. data/lib/rex/proto/drda/constants.rb.ut.rb +0 -24
  491. data/lib/rex/proto/drda/packet.rb.ut.rb +0 -110
  492. data/lib/rex/proto/drda/utils.rb.ut.rb +0 -85
  493. data/lib/rex/proto/http.rb.ts.rb +0 -13
  494. data/lib/rex/proto/http/client.rb.ut.rb +0 -96
  495. data/lib/rex/proto/http/handler/erb.rb.ut.rb +0 -22
  496. data/lib/rex/proto/http/handler/erb.rb.ut.rb.rhtml +0 -1
  497. data/lib/rex/proto/http/handler/proc.rb.ut.rb +0 -25
  498. data/lib/rex/proto/http/header.rb.ut.rb +0 -47
  499. data/lib/rex/proto/http/packet.rb.ut.rb +0 -166
  500. data/lib/rex/proto/http/request.rb.ut.rb +0 -215
  501. data/lib/rex/proto/http/response.rb.ut.rb +0 -150
  502. data/lib/rex/proto/http/server.rb.ut.rb +0 -80
  503. data/lib/rex/proto/ntlm.rb.ut.rb +0 -181
  504. data/lib/rex/proto/rfb.rb.ut.rb +0 -40
  505. data/lib/rex/proto/smb.rb.ts.rb +0 -9
  506. data/lib/rex/proto/smb/client.rb.ut.rb +0 -224
  507. data/lib/rex/proto/smb/constants.rb.ut.rb +0 -19
  508. data/lib/rex/proto/smb/simpleclient.rb.ut.rb +0 -129
  509. data/lib/rex/proto/smb/utils.rb.ut.rb +0 -21
  510. data/lib/rex/proto/tftp/server.rb.ut.rb +0 -29
  511. data/lib/rex/service_manager.rb.ut.rb +0 -33
  512. data/lib/rex/socket.rb.ut.rb +0 -108
  513. data/lib/rex/socket/comm/local.rb.ut.rb +0 -76
  514. data/lib/rex/socket/parameters.rb.ut.rb +0 -52
  515. data/lib/rex/socket/range_walker.rb.ut.rb +0 -56
  516. data/lib/rex/socket/ssl_tcp.rb.ut.rb +0 -40
  517. data/lib/rex/socket/ssl_tcp_server.rb.ut.rb +0 -62
  518. data/lib/rex/socket/subnet_walker.rb.ut.rb +0 -29
  519. data/lib/rex/socket/switch_board.rb.ut.rb +0 -53
  520. data/lib/rex/socket/tcp.rb.ut.rb +0 -65
  521. data/lib/rex/socket/tcp_server.rb.ut.rb +0 -45
  522. data/lib/rex/socket/udp.rb.ut.rb +0 -45
  523. data/lib/rex/test.rb +0 -36
  524. data/lib/rex/text.rb.ut.rb +0 -193
  525. data/lib/rex/transformer.rb.ut.rb +0 -39
  526. data/lib/rex/ui/text/color.rb.ut.rb +0 -19
  527. data/lib/rex/ui/text/progress_tracker.rb.ut.rb +0 -35
  528. data/lib/rex/ui/text/table.rb.ut.rb +0 -56
@@ -1,8 +1,4 @@
1
1
  # -*- coding: binary -*-
2
- ##
3
- # $Id: direntry.rb 15548 2012-06-29 06:08:20Z rapid7 $
4
- # Version: $Revision: 15548 $
5
- ##
6
2
 
7
3
  ##
8
4
  # Rex::OLE - an OLE implementation
@@ -17,223 +13,223 @@ module OLE
17
13
  #
18
14
  class DirEntry
19
15
 
20
- attr_accessor :sid
21
- attr_accessor :_sidChild, :_sidLeftSib, :_sidRightSib
22
-
23
- def initialize(stg)
24
- @stg = stg
25
-
26
- # default to a root entry :)
27
- @sid = 0
28
- @_ab = "Root Entry"
29
- @_cb = nil # NOTE: this is not used until pack
30
- @_mse = STGTY_ROOT
31
- @_bflags = 0
32
- @_sidLeftSib = SECT_FREE
33
- @_sidRightSib = SECT_FREE
34
- @_sidChild = SECT_FREE
35
- @_clsId = CLSID.new
36
- @_dwUserFlags = 0
37
- @_ctime = "\x00" * 8
38
- @_mtime = "\x00" * 8
39
- @_sectStart = SECT_END
40
- @_ulSize = 0
41
-
42
- # keep track of logical children (in a tree)
43
- @children = []
44
- end
45
-
46
-
47
- def length
48
- @_ulSize
49
- end
50
-
51
- def <<(expr)
52
- @children << expr
53
- end
54
-
55
- def each
56
- @children.each { |de|
57
- yield de
58
- }
59
- end
60
-
61
-
62
- def type
63
- @_mse
64
- end
65
- def type=(arg)
66
- @_mse = arg
67
- end
68
-
69
- def name
70
- @_ab
71
- end
72
- def name=(arg)
73
- # XXX: validate?
74
- @_ab = arg
75
- end
76
-
77
- def start_sector
78
- @_sectStart
79
- end
80
- def start_sector=(expr)
81
- @_sectStart = expr
82
- end
83
-
84
-
85
- # NOTE: this will not look at children
86
- def find_stream_by_name_and_type(name, type)
87
- @children.each { |de|
88
- next if (de.type != type)
89
-
90
- if (de.name == name)
91
- return de
92
- end
93
- }
94
- nil
95
- end
96
-
97
-
98
- def find_by_sid(sid, de=self)
99
- if (de.sid == sid)
100
- return de
101
- end
102
- @children.each { |cde|
103
- ret = find_by_sid(cde, sid)
104
- if (ret)
105
- return ret
106
- end
107
- }
108
- nil
109
- end
110
-
111
-
112
- #
113
- # low-level functions
114
- #
115
- def from_s(sid, buf)
116
- @sid = sid
117
- @_ab = Util.getUnicodeString(buf[0x00,64])
118
- @_cb = Util.get16(buf, 0x40)
119
-
120
- # too big?
121
- if (@_cb > 0x40)
122
- raise RuntimeError, 'Invalid directory entry name length %#x' % @_cb
123
- end
124
-
125
- # mismatch?
126
- if (@_ab.length > 0)
127
- declen = ((@_cb) / 2) - 1
128
- if (declen != @_ab.length)
129
- raise RuntimeError, 'Directory entry name and length mismatch (%d != %d)' % [declen, @_ab.length]
130
- end
131
- end
132
-
133
- @_mse = Util.get8(buf, 0x42)
134
- @_bflags = Util.get8(buf, 0x43)
135
- @_sidLeftSib = Util.get32(buf, 0x44)
136
- @_sidRightSib = Util.get32(buf, 0x48)
137
- @_sidChild = Util.get32(buf, 0x4c)
138
-
139
- # only used for storages..
140
- @_clsId = CLSID.new(buf[0x50,16])
141
- @_dwUserFlags = Util.get32(buf, 0x60)
142
- @_ctime = buf[0x64,8]
143
- @_mtime = buf[0x6c,8]
144
-
145
- # only used for streams...
146
- @_sectStart = Util.get32(buf, 0x74)
147
- if (@stg.header._uMajorVersion == 4)
148
- @_ulSize = Util.get64(buf, 0x78)
149
- else
150
- @_ulSize = Util.get32(buf, 0x78)
151
- end
152
-
153
- # ignore _dptPropType and pad
154
- end
155
-
156
-
157
- def pack
158
- @_sectStart ||= SECT_END
159
- @_cb = (@_ab.length + 1) * 2
160
-
161
- data = ""
162
- data << Util.putUnicodeString(@_ab) # gets padded/truncated to 0x40 bytes
163
- data << Util.pack16(@_cb)
164
- data << Util.pack8(@_mse)
165
- data << Util.pack8(@_bflags)
166
- data << Util.pack32(@_sidLeftSib)
167
- data << Util.pack32(@_sidRightSib)
168
- data << Util.pack32(@_sidChild)
169
- data << @_clsId.pack
170
- data << Util.pack32(@_dwUserFlags)
171
- data << @_ctime
172
- data << @_mtime
173
- data << Util.pack32(@_sectStart)
174
- data << Util.pack64(@_ulSize)
175
- data
176
- end
177
-
178
-
179
- def to_s(extra_spaces=0)
180
- @_sectStart ||= SECT_END
181
- @_cb = (@_ab.length + 1) * 2
182
-
183
- spstr = " " * extra_spaces
184
-
185
- ret = "%s{\n" % spstr
186
- ret << "%s sid => 0x%x" % [spstr, @sid]
187
- ret << ",\n"
188
- ret << "%s _ab => \"%s\"" % [spstr, Util.Printable(@_ab)]
189
- ret << ",\n"
190
- ret << "%s _cb => 0x%04x" % [spstr, @_cb]
191
- ret << ",\n"
192
- ret << "%s _mse => 0x%02x" % [spstr, @_mse]
193
- ret << ",\n"
194
- ret << "%s _bflags => 0x%02x" % [spstr, @_bflags]
195
- ret << ",\n"
196
- ret << "%s _sidLeftSib => 0x%08x" % [spstr, @_sidLeftSib]
197
- ret << ",\n"
198
- ret << "%s _sidRightSib => 0x%08x" % [spstr, @_sidRightSib]
199
- ret << ",\n"
200
- ret << "%s _sidChild => 0x%08x" % [spstr, @_sidChild]
201
- ret << ",\n"
202
- ret << "%s _clsId => %s" % [spstr, @_clsId.to_s]
203
- ret << ",\n"
204
- ret << "%s _dwUserFlags => 0x%08x" % [spstr, @_dwUserFlags]
205
- ret << ",\n"
206
- ret << "%s _ctime => %s" % [spstr, Rex::Text.to_hex_dump(@_ctime).strip]
207
- ret << "\n"
208
- ret << "%s _mtime => %s" % [spstr, Rex::Text.to_hex_dump(@_mtime).strip]
209
- ret << "\n"
210
- ret << "%s _sectStart => 0x%08x" % [spstr, @_sectStart]
211
- ret << ",\n"
212
- ret << "%s _ulSize => 0x%016x" % [spstr, @_ulSize]
213
- if (@_mse == STGTY_STREAM)
214
- ret << ",\n"
215
- ret << "%s data =>\n" % spstr
216
- if (@data)
217
- #ret << Util.Printable(@data)
218
- ret << Rex::Text.to_hex_dump(@data).strip
219
- else
220
- if (@_ulSize > 0)
221
- ret << "--NOT OPENED YET--"
222
- end
223
- end
224
- elsif (@_mse == STGTY_STORAGE) or (@_mse == STGTY_ROOT)
225
- if (@children.length > 0)
226
- ret << ",\n"
227
- ret << "%s *children* =>\n" % spstr
228
- @children.each { |de|
229
- ret << de.to_s(extra_spaces+2)
230
- ret << "\n"
231
- }
232
- end
233
- end
234
- ret << "\n"
235
- ret << "%s}" % spstr
236
- end
16
+ attr_accessor :sid
17
+ attr_accessor :_sidChild, :_sidLeftSib, :_sidRightSib
18
+
19
+ def initialize(stg)
20
+ @stg = stg
21
+
22
+ # default to a root entry :)
23
+ @sid = 0
24
+ @_ab = "Root Entry"
25
+ @_cb = nil # NOTE: this is not used until pack
26
+ @_mse = STGTY_ROOT
27
+ @_bflags = 0
28
+ @_sidLeftSib = SECT_FREE
29
+ @_sidRightSib = SECT_FREE
30
+ @_sidChild = SECT_FREE
31
+ @_clsId = CLSID.new
32
+ @_dwUserFlags = 0
33
+ @_ctime = "\x00" * 8
34
+ @_mtime = "\x00" * 8
35
+ @_sectStart = SECT_END
36
+ @_ulSize = 0
37
+
38
+ # keep track of logical children (in a tree)
39
+ @children = []
40
+ end
41
+
42
+
43
+ def length
44
+ @_ulSize
45
+ end
46
+
47
+ def <<(expr)
48
+ @children << expr
49
+ end
50
+
51
+ def each
52
+ @children.each { |de|
53
+ yield de
54
+ }
55
+ end
56
+
57
+
58
+ def type
59
+ @_mse
60
+ end
61
+ def type=(arg)
62
+ @_mse = arg
63
+ end
64
+
65
+ def name
66
+ @_ab
67
+ end
68
+ def name=(arg)
69
+ # XXX: validate?
70
+ @_ab = arg
71
+ end
72
+
73
+ def start_sector
74
+ @_sectStart
75
+ end
76
+ def start_sector=(expr)
77
+ @_sectStart = expr
78
+ end
79
+
80
+
81
+ # NOTE: this will not look at children
82
+ def find_stream_by_name_and_type(name, type)
83
+ @children.each { |de|
84
+ next if (de.type != type)
85
+
86
+ if (de.name == name)
87
+ return de
88
+ end
89
+ }
90
+ nil
91
+ end
92
+
93
+
94
+ def find_by_sid(sid, de=self)
95
+ if (de.sid == sid)
96
+ return de
97
+ end
98
+ @children.each { |cde|
99
+ ret = find_by_sid(cde, sid)
100
+ if (ret)
101
+ return ret
102
+ end
103
+ }
104
+ nil
105
+ end
106
+
107
+
108
+ #
109
+ # low-level functions
110
+ #
111
+ def from_s(sid, buf)
112
+ @sid = sid
113
+ @_ab = Util.getUnicodeString(buf[0x00,64])
114
+ @_cb = Util.get16(buf, 0x40)
115
+
116
+ # too big?
117
+ if (@_cb > 0x40)
118
+ raise RuntimeError, 'Invalid directory entry name length %#x' % @_cb
119
+ end
120
+
121
+ # mismatch?
122
+ if (@_ab.length > 0)
123
+ declen = ((@_cb) / 2) - 1
124
+ if (declen != @_ab.length)
125
+ raise RuntimeError, 'Directory entry name and length mismatch (%d != %d)' % [declen, @_ab.length]
126
+ end
127
+ end
128
+
129
+ @_mse = Util.get8(buf, 0x42)
130
+ @_bflags = Util.get8(buf, 0x43)
131
+ @_sidLeftSib = Util.get32(buf, 0x44)
132
+ @_sidRightSib = Util.get32(buf, 0x48)
133
+ @_sidChild = Util.get32(buf, 0x4c)
134
+
135
+ # only used for storages..
136
+ @_clsId = CLSID.new(buf[0x50,16])
137
+ @_dwUserFlags = Util.get32(buf, 0x60)
138
+ @_ctime = buf[0x64,8]
139
+ @_mtime = buf[0x6c,8]
140
+
141
+ # only used for streams...
142
+ @_sectStart = Util.get32(buf, 0x74)
143
+ if (@stg.header._uMajorVersion == 4)
144
+ @_ulSize = Util.get64(buf, 0x78)
145
+ else
146
+ @_ulSize = Util.get32(buf, 0x78)
147
+ end
148
+
149
+ # ignore _dptPropType and pad
150
+ end
151
+
152
+
153
+ def pack
154
+ @_sectStart ||= SECT_END
155
+ @_cb = (@_ab.length + 1) * 2
156
+
157
+ data = ""
158
+ data << Util.putUnicodeString(@_ab) # gets padded/truncated to 0x40 bytes
159
+ data << Util.pack16(@_cb)
160
+ data << Util.pack8(@_mse)
161
+ data << Util.pack8(@_bflags)
162
+ data << Util.pack32(@_sidLeftSib)
163
+ data << Util.pack32(@_sidRightSib)
164
+ data << Util.pack32(@_sidChild)
165
+ data << @_clsId.pack
166
+ data << Util.pack32(@_dwUserFlags)
167
+ data << @_ctime
168
+ data << @_mtime
169
+ data << Util.pack32(@_sectStart)
170
+ data << Util.pack64(@_ulSize)
171
+ data
172
+ end
173
+
174
+
175
+ def to_s(extra_spaces=0)
176
+ @_sectStart ||= SECT_END
177
+ @_cb = (@_ab.length + 1) * 2
178
+
179
+ spstr = " " * extra_spaces
180
+
181
+ ret = "%s{\n" % spstr
182
+ ret << "%s sid => 0x%x" % [spstr, @sid]
183
+ ret << ",\n"
184
+ ret << "%s _ab => \"%s\"" % [spstr, Util.Printable(@_ab)]
185
+ ret << ",\n"
186
+ ret << "%s _cb => 0x%04x" % [spstr, @_cb]
187
+ ret << ",\n"
188
+ ret << "%s _mse => 0x%02x" % [spstr, @_mse]
189
+ ret << ",\n"
190
+ ret << "%s _bflags => 0x%02x" % [spstr, @_bflags]
191
+ ret << ",\n"
192
+ ret << "%s _sidLeftSib => 0x%08x" % [spstr, @_sidLeftSib]
193
+ ret << ",\n"
194
+ ret << "%s _sidRightSib => 0x%08x" % [spstr, @_sidRightSib]
195
+ ret << ",\n"
196
+ ret << "%s _sidChild => 0x%08x" % [spstr, @_sidChild]
197
+ ret << ",\n"
198
+ ret << "%s _clsId => %s" % [spstr, @_clsId.to_s]
199
+ ret << ",\n"
200
+ ret << "%s _dwUserFlags => 0x%08x" % [spstr, @_dwUserFlags]
201
+ ret << ",\n"
202
+ ret << "%s _ctime => %s" % [spstr, Rex::Text.to_hex_dump(@_ctime).strip]
203
+ ret << "\n"
204
+ ret << "%s _mtime => %s" % [spstr, Rex::Text.to_hex_dump(@_mtime).strip]
205
+ ret << "\n"
206
+ ret << "%s _sectStart => 0x%08x" % [spstr, @_sectStart]
207
+ ret << ",\n"
208
+ ret << "%s _ulSize => 0x%016x" % [spstr, @_ulSize]
209
+ if (@_mse == STGTY_STREAM)
210
+ ret << ",\n"
211
+ ret << "%s data =>\n" % spstr
212
+ if (@data)
213
+ #ret << Util.Printable(@data)
214
+ ret << Rex::Text.to_hex_dump(@data).strip
215
+ else
216
+ if (@_ulSize > 0)
217
+ ret << "--NOT OPENED YET--"
218
+ end
219
+ end
220
+ elsif (@_mse == STGTY_STORAGE) or (@_mse == STGTY_ROOT)
221
+ if (@children.length > 0)
222
+ ret << ",\n"
223
+ ret << "%s *children* =>\n" % spstr
224
+ @children.each { |de|
225
+ ret << de.to_s(extra_spaces+2)
226
+ ret << "\n"
227
+ }
228
+ end
229
+ end
230
+ ret << "\n"
231
+ ret << "%s}" % spstr
232
+ end
237
233
 
238
234
  end
239
235
 
@@ -1,8 +1,4 @@
1
1
  # -*- coding: binary -*-
2
- ##
3
- # $Id: fat.rb 15548 2012-06-29 06:08:20Z rapid7 $
4
- # Version: $Revision: 15548 $
5
- ##
6
2
 
7
3
  ##
8
4
  # Rex::OLE - an OLE implementation
@@ -14,85 +10,85 @@ module OLE
14
10
 
15
11
  class FAT < DIFAT
16
12
 
17
- #
18
- # low-level functions
19
- #
20
- def read(difat)
21
- @entries = []
22
- cnt = left = @stg.header._csectFat
23
- difat.each { |fs|
24
- break if (left == 0)
25
-
26
- if (fs != SECT_FREE)
27
- buf = @stg.read_sector(fs, @stg.header.sector_size)
28
- arr = Util.get32array(buf)
29
-
30
- # hax!
31
- if (@entries[fs] == SECT_DIF)
32
- # chop the next ptr
33
- @entries += arr.slice!(0, arr.length - 1)
34
- else
35
- @entries += arr
36
- end
37
- left -= 1
38
- end
39
- }
40
-
41
- if (left != 0)
42
- raise RuntimeError, 'Only found %u of %u sectors' % [(cnt - left), cnt]
43
- end
44
- end
45
-
46
- def allocate_sector(type=nil)
47
- idx = @entries.index(SECT_FREE)
48
- if (not idx)
49
- # add a sector worth
50
- idx = @entries.length
51
- @stg.header.idx_per_sect.times {
52
- @entries << SECT_FREE
53
- }
54
- end
55
-
56
- # mark the sector as in use
57
- if (type)
58
- @entries[idx] = type
59
- else
60
- # default normal sectors to end of chain
61
- @entries[idx] = SECT_END
62
- end
63
- idx
64
- end
65
-
66
- def write(difat)
67
- # we build the difat as we write these..
68
- difat.reset
69
-
70
- # allocate the sectors
71
- fat_sects = []
72
- left = @entries.length
73
- while (left > 0)
74
- if (left > @stg.header.idx_per_sect)
75
- left -= @stg.header.idx_per_sect
76
- else
77
- left = 0
78
- end
79
- fat_sects << allocate_sector(SECT_FAT)
80
- end
81
-
82
- # write the fat into the difat/allocated sectors
83
- copy = @entries.dup
84
- fat_sects.each { |fs|
85
- part = copy.slice!(0, @stg.header.idx_per_sect)
86
- sbuf = Util.pack32array(part)
87
-
88
- if (sbuf.length != @stg.header.sector_size)
89
- raise RuntimeError, 'Unsupported number of fat sectors (not multiple of idx per sect)'
90
- end
91
-
92
- @stg.write_sector_raw(fs, sbuf)
93
- difat << fs
94
- }
95
- end
13
+ #
14
+ # low-level functions
15
+ #
16
+ def read(difat)
17
+ @entries = []
18
+ cnt = left = @stg.header._csectFat
19
+ difat.each { |fs|
20
+ break if (left == 0)
21
+
22
+ if (fs != SECT_FREE)
23
+ buf = @stg.read_sector(fs, @stg.header.sector_size)
24
+ arr = Util.get32array(buf)
25
+
26
+ # hax!
27
+ if (@entries[fs] == SECT_DIF)
28
+ # chop the next ptr
29
+ @entries += arr.slice!(0, arr.length - 1)
30
+ else
31
+ @entries += arr
32
+ end
33
+ left -= 1
34
+ end
35
+ }
36
+
37
+ if (left != 0)
38
+ raise RuntimeError, 'Only found %u of %u sectors' % [(cnt - left), cnt]
39
+ end
40
+ end
41
+
42
+ def allocate_sector(type=nil)
43
+ idx = @entries.index(SECT_FREE)
44
+ if (not idx)
45
+ # add a sector worth
46
+ idx = @entries.length
47
+ @stg.header.idx_per_sect.times {
48
+ @entries << SECT_FREE
49
+ }
50
+ end
51
+
52
+ # mark the sector as in use
53
+ if (type)
54
+ @entries[idx] = type
55
+ else
56
+ # default normal sectors to end of chain
57
+ @entries[idx] = SECT_END
58
+ end
59
+ idx
60
+ end
61
+
62
+ def write(difat)
63
+ # we build the difat as we write these..
64
+ difat.reset
65
+
66
+ # allocate the sectors
67
+ fat_sects = []
68
+ left = @entries.length
69
+ while (left > 0)
70
+ if (left > @stg.header.idx_per_sect)
71
+ left -= @stg.header.idx_per_sect
72
+ else
73
+ left = 0
74
+ end
75
+ fat_sects << allocate_sector(SECT_FAT)
76
+ end
77
+
78
+ # write the fat into the difat/allocated sectors
79
+ copy = @entries.dup
80
+ fat_sects.each { |fs|
81
+ part = copy.slice!(0, @stg.header.idx_per_sect)
82
+ sbuf = Util.pack32array(part)
83
+
84
+ if (sbuf.length != @stg.header.sector_size)
85
+ raise RuntimeError, 'Unsupported number of fat sectors (not multiple of idx per sect)'
86
+ end
87
+
88
+ @stg.write_sector_raw(fs, sbuf)
89
+ difat << fs
90
+ }
91
+ end
96
92
 
97
93
  end
98
94