ruby_smb 1.0.2 → 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +5 -5
- checksums.yaml.gz.sig +0 -0
- data.tar.gz.sig +0 -0
- data/.travis.yml +3 -2
- data/Gemfile +6 -2
- data/README.md +35 -47
- data/examples/enum_registry_key.rb +28 -0
- data/examples/enum_registry_values.rb +30 -0
- data/examples/negotiate.rb +51 -8
- data/examples/pipes.rb +2 -1
- data/examples/read_file_encryption.rb +56 -0
- data/examples/read_registry_key_value.rb +32 -0
- data/lib/ruby_smb.rb +4 -1
- data/lib/ruby_smb/client.rb +200 -20
- data/lib/ruby_smb/client/authentication.rb +70 -33
- data/lib/ruby_smb/client/echo.rb +20 -2
- data/lib/ruby_smb/client/encryption.rb +62 -0
- data/lib/ruby_smb/client/negotiation.rb +160 -24
- data/lib/ruby_smb/client/signing.rb +19 -0
- data/lib/ruby_smb/client/tree_connect.rb +24 -18
- data/lib/ruby_smb/client/utils.rb +8 -7
- data/lib/ruby_smb/client/winreg.rb +46 -0
- data/lib/ruby_smb/crypto.rb +30 -0
- data/lib/ruby_smb/dcerpc.rb +38 -0
- data/lib/ruby_smb/dcerpc/bind.rb +2 -2
- data/lib/ruby_smb/dcerpc/bind_ack.rb +2 -2
- data/lib/ruby_smb/dcerpc/error.rb +3 -0
- data/lib/ruby_smb/dcerpc/ndr.rb +95 -16
- data/lib/ruby_smb/dcerpc/pdu_header.rb +1 -1
- data/lib/ruby_smb/dcerpc/request.rb +28 -9
- data/lib/ruby_smb/dcerpc/rrp_unicode_string.rb +35 -0
- data/lib/ruby_smb/dcerpc/srvsvc.rb +10 -0
- data/lib/ruby_smb/dcerpc/srvsvc/net_share_enum_all.rb +9 -0
- data/lib/ruby_smb/dcerpc/winreg.rb +340 -0
- data/lib/ruby_smb/dcerpc/winreg/close_key_request.rb +24 -0
- data/lib/ruby_smb/dcerpc/winreg/close_key_response.rb +27 -0
- data/lib/ruby_smb/dcerpc/winreg/enum_key_request.rb +45 -0
- data/lib/ruby_smb/dcerpc/winreg/enum_key_response.rb +42 -0
- data/lib/ruby_smb/dcerpc/winreg/enum_value_request.rb +39 -0
- data/lib/ruby_smb/dcerpc/winreg/enum_value_response.rb +36 -0
- data/lib/ruby_smb/dcerpc/winreg/open_key_request.rb +34 -0
- data/lib/ruby_smb/dcerpc/winreg/open_key_response.rb +25 -0
- data/lib/ruby_smb/dcerpc/winreg/open_root_key_request.rb +43 -0
- data/lib/ruby_smb/dcerpc/winreg/open_root_key_response.rb +35 -0
- data/lib/ruby_smb/dcerpc/winreg/query_info_key_request.rb +27 -0
- data/lib/ruby_smb/dcerpc/winreg/query_info_key_response.rb +40 -0
- data/lib/ruby_smb/dcerpc/winreg/query_value_request.rb +39 -0
- data/lib/ruby_smb/dcerpc/winreg/query_value_response.rb +57 -0
- data/lib/ruby_smb/dcerpc/winreg/regsam.rb +40 -0
- data/lib/ruby_smb/dispatcher/socket.rb +5 -3
- data/lib/ruby_smb/error.rb +68 -2
- data/lib/ruby_smb/generic_packet.rb +33 -4
- data/lib/ruby_smb/smb1/commands.rb +1 -1
- data/lib/ruby_smb/smb1/file.rb +66 -15
- data/lib/ruby_smb/smb1/packet/close_request.rb +2 -5
- data/lib/ruby_smb/smb1/packet/close_response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/echo_request.rb +2 -4
- data/lib/ruby_smb/smb1/packet/echo_response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/empty_packet.rb +10 -1
- data/lib/ruby_smb/smb1/packet/logoff_request.rb +2 -4
- data/lib/ruby_smb/smb1/packet/logoff_response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/negotiate_request.rb +2 -5
- data/lib/ruby_smb/smb1/packet/negotiate_response.rb +3 -7
- data/lib/ruby_smb/smb1/packet/negotiate_response_extended.rb +4 -4
- data/lib/ruby_smb/smb1/packet/nt_create_andx_request.rb +2 -4
- data/lib/ruby_smb/smb1/packet/nt_create_andx_response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/nt_trans/create_request.rb +2 -1
- data/lib/ruby_smb/smb1/packet/nt_trans/create_response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/nt_trans/request.rb +2 -4
- data/lib/ruby_smb/smb1/packet/nt_trans/response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/read_andx_request.rb +2 -5
- data/lib/ruby_smb/smb1/packet/read_andx_response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/session_setup_legacy_request.rb +2 -1
- data/lib/ruby_smb/smb1/packet/session_setup_legacy_response.rb +3 -2
- data/lib/ruby_smb/smb1/packet/session_setup_request.rb +2 -5
- data/lib/ruby_smb/smb1/packet/session_setup_response.rb +3 -2
- data/lib/ruby_smb/smb1/packet/trans/peek_nmpipe_request.rb +0 -1
- data/lib/ruby_smb/smb1/packet/trans/peek_nmpipe_response.rb +3 -2
- data/lib/ruby_smb/smb1/packet/trans/request.rb +2 -5
- data/lib/ruby_smb/smb1/packet/trans/response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/trans/transact_nmpipe_request.rb +1 -1
- data/lib/ruby_smb/smb1/packet/trans/transact_nmpipe_response.rb +1 -1
- data/lib/ruby_smb/smb1/packet/trans2/find_first2_request.rb +2 -1
- data/lib/ruby_smb/smb1/packet/trans2/find_first2_response.rb +8 -2
- data/lib/ruby_smb/smb1/packet/trans2/find_next2_request.rb +2 -1
- data/lib/ruby_smb/smb1/packet/trans2/find_next2_response.rb +8 -2
- data/lib/ruby_smb/smb1/packet/trans2/open2_request.rb +2 -1
- data/lib/ruby_smb/smb1/packet/trans2/open2_response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/trans2/request.rb +2 -4
- data/lib/ruby_smb/smb1/packet/trans2/request_secondary.rb +2 -4
- data/lib/ruby_smb/smb1/packet/trans2/response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/trans2/set_file_information_request.rb +2 -1
- data/lib/ruby_smb/smb1/packet/trans2/set_file_information_response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/tree_connect_request.rb +2 -4
- data/lib/ruby_smb/smb1/packet/tree_connect_response.rb +13 -3
- data/lib/ruby_smb/smb1/packet/tree_disconnect_request.rb +2 -4
- data/lib/ruby_smb/smb1/packet/tree_disconnect_response.rb +2 -1
- data/lib/ruby_smb/smb1/packet/write_andx_request.rb +3 -6
- data/lib/ruby_smb/smb1/packet/write_andx_response.rb +2 -1
- data/lib/ruby_smb/smb1/pipe.rb +87 -6
- data/lib/ruby_smb/smb1/tree.rb +41 -3
- data/lib/ruby_smb/smb2/bit_field/session_flags.rb +2 -1
- data/lib/ruby_smb/smb2/bit_field/share_flags.rb +6 -4
- data/lib/ruby_smb/smb2/file.rb +103 -25
- data/lib/ruby_smb/smb2/negotiate_context.rb +108 -0
- data/lib/ruby_smb/smb2/packet.rb +2 -0
- data/lib/ruby_smb/smb2/packet/close_request.rb +2 -4
- data/lib/ruby_smb/smb2/packet/close_response.rb +2 -1
- data/lib/ruby_smb/smb2/packet/compression_transform_header.rb +41 -0
- data/lib/ruby_smb/smb2/packet/create_request.rb +2 -4
- data/lib/ruby_smb/smb2/packet/create_response.rb +2 -1
- data/lib/ruby_smb/smb2/packet/echo_request.rb +2 -4
- data/lib/ruby_smb/smb2/packet/echo_response.rb +2 -1
- data/lib/ruby_smb/smb2/packet/error_packet.rb +15 -3
- data/lib/ruby_smb/smb2/packet/ioctl_request.rb +2 -5
- data/lib/ruby_smb/smb2/packet/ioctl_response.rb +2 -1
- data/lib/ruby_smb/smb2/packet/logoff_request.rb +2 -4
- data/lib/ruby_smb/smb2/packet/logoff_response.rb +2 -1
- data/lib/ruby_smb/smb2/packet/negotiate_request.rb +51 -17
- data/lib/ruby_smb/smb2/packet/negotiate_response.rb +51 -4
- data/lib/ruby_smb/smb2/packet/query_directory_request.rb +2 -4
- data/lib/ruby_smb/smb2/packet/query_directory_response.rb +8 -2
- data/lib/ruby_smb/smb2/packet/read_request.rb +2 -4
- data/lib/ruby_smb/smb2/packet/read_response.rb +2 -1
- data/lib/ruby_smb/smb2/packet/session_setup_request.rb +2 -5
- data/lib/ruby_smb/smb2/packet/session_setup_response.rb +2 -1
- data/lib/ruby_smb/smb2/packet/set_info_request.rb +2 -4
- data/lib/ruby_smb/smb2/packet/set_info_response.rb +2 -1
- data/lib/ruby_smb/smb2/packet/transform_header.rb +84 -0
- data/lib/ruby_smb/smb2/packet/tree_connect_request.rb +93 -10
- data/lib/ruby_smb/smb2/packet/tree_connect_response.rb +10 -22
- data/lib/ruby_smb/smb2/packet/tree_disconnect_request.rb +2 -4
- data/lib/ruby_smb/smb2/packet/tree_disconnect_response.rb +2 -1
- data/lib/ruby_smb/smb2/packet/write_request.rb +2 -4
- data/lib/ruby_smb/smb2/packet/write_response.rb +2 -1
- data/lib/ruby_smb/smb2/pipe.rb +86 -12
- data/lib/ruby_smb/smb2/smb2_header.rb +1 -1
- data/lib/ruby_smb/smb2/tree.rb +65 -21
- data/lib/ruby_smb/version.rb +1 -1
- data/ruby_smb.gemspec +5 -3
- data/spec/lib/ruby_smb/client_spec.rb +1563 -104
- data/spec/lib/ruby_smb/crypto_spec.rb +25 -0
- data/spec/lib/ruby_smb/dcerpc/bind_ack_spec.rb +2 -2
- data/spec/lib/ruby_smb/dcerpc/bind_spec.rb +2 -2
- data/spec/lib/ruby_smb/dcerpc/ndr_spec.rb +410 -0
- data/spec/lib/ruby_smb/dcerpc/request_spec.rb +50 -7
- data/spec/lib/ruby_smb/dcerpc/rrp_unicode_string_spec.rb +98 -0
- data/spec/lib/ruby_smb/dcerpc/srvsvc/net_share_enum_all_spec.rb +13 -0
- data/spec/lib/ruby_smb/dcerpc/srvsvc_spec.rb +60 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/close_key_request_spec.rb +28 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/close_key_response_spec.rb +36 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/enum_key_request_spec.rb +108 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/enum_key_response_spec.rb +97 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/enum_value_request_spec.rb +94 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/enum_value_response_spec.rb +82 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/open_key_request_spec.rb +74 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/open_key_response_spec.rb +35 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/open_root_key_request_spec.rb +90 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/open_root_key_response_spec.rb +38 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/query_info_key_request_spec.rb +39 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/query_info_key_response_spec.rb +113 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/query_value_request_spec.rb +88 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/query_value_response_spec.rb +150 -0
- data/spec/lib/ruby_smb/dcerpc/winreg/regsam_spec.rb +32 -0
- data/spec/lib/ruby_smb/dcerpc/winreg_spec.rb +710 -0
- data/spec/lib/ruby_smb/dcerpc_spec.rb +81 -0
- data/spec/lib/ruby_smb/dispatcher/socket_spec.rb +3 -1
- data/spec/lib/ruby_smb/error_spec.rb +59 -0
- data/spec/lib/ruby_smb/generic_packet_spec.rb +52 -4
- data/spec/lib/ruby_smb/smb1/file_spec.rb +191 -2
- data/spec/lib/ruby_smb/smb1/packet/empty_packet_spec.rb +68 -0
- data/spec/lib/ruby_smb/smb1/packet/session_setup_legacy_request_spec.rb +2 -2
- data/spec/lib/ruby_smb/smb1/packet/session_setup_legacy_response_spec.rb +2 -2
- data/spec/lib/ruby_smb/smb1/packet/session_setup_request_spec.rb +2 -2
- data/spec/lib/ruby_smb/smb1/packet/session_setup_response_spec.rb +1 -1
- data/spec/lib/ruby_smb/smb1/packet/trans2/find_first2_response_spec.rb +11 -2
- data/spec/lib/ruby_smb/smb1/packet/trans2/find_next2_response_spec.rb +11 -2
- data/spec/lib/ruby_smb/smb1/packet/tree_connect_response_spec.rb +40 -0
- data/spec/lib/ruby_smb/smb1/pipe_spec.rb +272 -149
- data/spec/lib/ruby_smb/smb1/tree_spec.rb +44 -7
- data/spec/lib/ruby_smb/smb2/bit_field/session_flags_spec.rb +9 -0
- data/spec/lib/ruby_smb/smb2/bit_field/share_flags_spec.rb +27 -0
- data/spec/lib/ruby_smb/smb2/file_spec.rb +323 -6
- data/spec/lib/ruby_smb/smb2/negotiate_context_spec.rb +332 -0
- data/spec/lib/ruby_smb/smb2/packet/compression_transform_header_spec.rb +108 -0
- data/spec/lib/ruby_smb/smb2/packet/error_packet_spec.rb +78 -0
- data/spec/lib/ruby_smb/smb2/packet/negotiate_request_spec.rb +138 -3
- data/spec/lib/ruby_smb/smb2/packet/negotiate_response_spec.rb +120 -2
- data/spec/lib/ruby_smb/smb2/packet/query_directory_response_spec.rb +8 -0
- data/spec/lib/ruby_smb/smb2/packet/transform_header_spec.rb +220 -0
- data/spec/lib/ruby_smb/smb2/packet/tree_connect_request_spec.rb +339 -9
- data/spec/lib/ruby_smb/smb2/packet/tree_connect_response_spec.rb +3 -22
- data/spec/lib/ruby_smb/smb2/pipe_spec.rb +286 -149
- data/spec/lib/ruby_smb/smb2/smb2_header_spec.rb +2 -2
- data/spec/lib/ruby_smb/smb2/tree_spec.rb +261 -2
- metadata +191 -83
- metadata.gz.sig +0 -0
- data/lib/ruby_smb/smb1/dcerpc.rb +0 -67
- data/lib/ruby_smb/smb2/dcerpc.rb +0 -70
- data/spec/lib/ruby_smb/smb1/packet/error_packet_spec.rb +0 -37
@@ -0,0 +1,108 @@
|
|
1
|
+
module RubySMB
|
2
|
+
module SMB2
|
3
|
+
|
4
|
+
# An SMB2 PREAUTH_INTEGRITY_CAPABILITIES context struct as defined in
|
5
|
+
# [2.2.3.1.1 SMB2_PREAUTH_INTEGRITY_CAPABILITIES](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/5a07bd66-4734-4af8-abcf-5a44ff7ee0e5)
|
6
|
+
class PreauthIntegrityCapabilities < BinData::Record
|
7
|
+
SHA_512 = 0x0001
|
8
|
+
HASH_ALGORITM_MAP = {
|
9
|
+
SHA_512 => 'SHA512'
|
10
|
+
}
|
11
|
+
|
12
|
+
endian :little
|
13
|
+
|
14
|
+
uint16 :hash_algorithm_count, label: 'Hash Algorithm Count', initial_value: -> { hash_algorithms.size }
|
15
|
+
uint16 :salt_length, label: 'Salt Length', initial_value: -> { salt.num_bytes }
|
16
|
+
array :hash_algorithms, label: 'Hash Algorithms', type: :uint16, initial_length: -> { hash_algorithm_count }
|
17
|
+
string :salt, label: 'Salt', read_length: -> { salt_length }
|
18
|
+
end
|
19
|
+
|
20
|
+
# An SMB2 ENCRYPTION_CAPABILITIES context struct as defined in
|
21
|
+
# [2.2.3.1.2 SMB2_ENCRYPTION_CAPABILITIES](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/16693be7-2b27-4d3b-804b-f605bde5bcdd)
|
22
|
+
class EncryptionCapabilities < BinData::Record
|
23
|
+
AES_128_CCM = 0x0001
|
24
|
+
AES_128_GCM = 0x0002
|
25
|
+
ENCRYPTION_ALGORITHM_MAP = {
|
26
|
+
AES_128_CCM => 'AES-128-CCM',
|
27
|
+
AES_128_GCM => 'AES-128-GCM'
|
28
|
+
}
|
29
|
+
|
30
|
+
endian :little
|
31
|
+
|
32
|
+
uint16 :cipher_count, label: 'Cipher Count', initial_value: -> { ciphers.size }
|
33
|
+
array :ciphers, label: 'Ciphers', type: :uint16, initial_length: -> { cipher_count }
|
34
|
+
end
|
35
|
+
|
36
|
+
# An SMB2 COMPRESSION_CAPABILITIES context struct as defined in
|
37
|
+
# [2.2.3.1.3 SMB2_COMPRESSION_CAPABILITIES](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/78e0c942-ab41-472b-b117-4a95ebe88271)
|
38
|
+
class CompressionCapabilities < BinData::Record
|
39
|
+
# Flags
|
40
|
+
# Chained compression is not supported.
|
41
|
+
SMB2_COMPRESSION_CAPABILITIES_FLAG_NONE = 0x00000000
|
42
|
+
# Chained compression is supported on this connection.
|
43
|
+
SMB2_COMPRESSION_CAPABILITIES_FLAG_CHAINED = 0x00000001
|
44
|
+
|
45
|
+
# Compression Algorithms
|
46
|
+
NONE = 0x0000
|
47
|
+
LZNT1 = 0x0001
|
48
|
+
LZ77 = 0x0002
|
49
|
+
LZ77_Huffman = 0x0003
|
50
|
+
Pattern_V1 = 0x0004
|
51
|
+
COMPRESSION_ALGORITHM_MAP = {
|
52
|
+
NONE => 'NONE',
|
53
|
+
LZNT1 => 'LZNT1',
|
54
|
+
LZ77 => 'LZ77',
|
55
|
+
LZ77_Huffman => 'LZ77_Huffman',
|
56
|
+
Pattern_V1 => 'Pattern_V1'
|
57
|
+
}
|
58
|
+
|
59
|
+
endian :little
|
60
|
+
|
61
|
+
uint16 :compression_algorithm_count, label: 'Compression Algorithm Count', initial_value: -> { compression_algorithms.size }
|
62
|
+
uint16 :padding, label: 'Padding', initial_value: 0
|
63
|
+
uint32 :flags, label: 'Flags'
|
64
|
+
array :compression_algorithms, label: 'Compression Algorithms', type: :uint16, initial_length: -> { compression_algorithm_count }
|
65
|
+
end
|
66
|
+
|
67
|
+
# An SMB2 NETNAME_NEGOTIATE_CONTEXT_ID context struct as defined in
|
68
|
+
# [2.2.3.1.4 SMB2_NETNAME_NEGOTIATE_CONTEXT_ID](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/ca6726bd-b9cf-43d9-b0bc-d127d3c993b3)
|
69
|
+
class NetnameNegotiateContextId < BinData::Record
|
70
|
+
endian :little
|
71
|
+
|
72
|
+
stringz16 :net_name, label: 'Net Name'
|
73
|
+
end
|
74
|
+
|
75
|
+
|
76
|
+
# An SMB2 NEGOTIATE_CONTEXT struct as defined in
|
77
|
+
# [2.2.3.1 SMB2 NEGOTIATE_CONTEXT Request Values](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/15332256-522e-4a53-8cd7-0bd17678a2f7)
|
78
|
+
class NegotiateContext < BinData::Record
|
79
|
+
# The NegotiateContext Data field contains a list of preauthentication integrity hash functions as well as an optional salt value, as specified in section 2.2.3.1.1.
|
80
|
+
SMB2_PREAUTH_INTEGRITY_CAPABILITIES = 0x0001
|
81
|
+
# The NegotiateContext Data field contains a list of encryption algorithms, as specified in section 2.2.3.1.2.
|
82
|
+
SMB2_ENCRYPTION_CAPABILITIES = 0x0002
|
83
|
+
# The NegotiateContext Data field contains a list of compression algorithms, as specified in section 2.2.3.1.3.
|
84
|
+
SMB2_COMPRESSION_CAPABILITIES = 0x0003
|
85
|
+
# The NegotiateContext Data field contains the server name to which the client connects.
|
86
|
+
SMB2_NETNAME_NEGOTIATE_CONTEXT_ID = 0x0005
|
87
|
+
|
88
|
+
endian :little
|
89
|
+
|
90
|
+
string :pad, label: 'Padding', length: -> { pad_length }
|
91
|
+
uint16 :context_type, label: 'Context Type'
|
92
|
+
uint16 :data_length, label: 'Data Length', initial_value: -> { data.num_bytes }
|
93
|
+
uint32 :reserved, label: 'Reserved', initial_value: 0
|
94
|
+
choice :data, label: 'Data', selection: -> { context_type } do
|
95
|
+
preauth_integrity_capabilities SMB2_PREAUTH_INTEGRITY_CAPABILITIES, label: 'Preauthentication Integrity Capabilities'
|
96
|
+
encryption_capabilities SMB2_ENCRYPTION_CAPABILITIES, label: 'Encryption Capabilities'
|
97
|
+
compression_capabilities SMB2_COMPRESSION_CAPABILITIES, label: 'Compression Capabilities'
|
98
|
+
netname_negotiate_context_id SMB2_NETNAME_NEGOTIATE_CONTEXT_ID, label: 'Netname Negotiate Context ID'
|
99
|
+
end
|
100
|
+
|
101
|
+
def pad_length
|
102
|
+
offset = pad.abs_offset % 8
|
103
|
+
(8 - offset) % 8
|
104
|
+
end
|
105
|
+
|
106
|
+
end
|
107
|
+
end
|
108
|
+
end
|
data/lib/ruby_smb/smb2/packet.rb
CHANGED
@@ -30,6 +30,8 @@ module RubySMB
|
|
30
30
|
require 'ruby_smb/smb2/packet/write_response'
|
31
31
|
require 'ruby_smb/smb2/packet/ioctl_request'
|
32
32
|
require 'ruby_smb/smb2/packet/ioctl_response'
|
33
|
+
require 'ruby_smb/smb2/packet/transform_header'
|
34
|
+
require 'ruby_smb/smb2/packet/compression_transform_header'
|
33
35
|
end
|
34
36
|
end
|
35
37
|
end
|
@@ -4,6 +4,8 @@ module RubySMB
|
|
4
4
|
# An SMB2 Close Request Packet as defined in
|
5
5
|
# [2.2.15 SMB2 CLOSE Request](https://msdn.microsoft.com/en-us/library/cc246523.aspx)
|
6
6
|
class CloseRequest < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::CLOSE
|
8
|
+
|
7
9
|
endian :little
|
8
10
|
|
9
11
|
smb2_header :smb2_header
|
@@ -12,10 +14,6 @@ module RubySMB
|
|
12
14
|
uint32 :reserved, label: 'Reserved Space'
|
13
15
|
smb2_fileid :file_id, label: 'File ID'
|
14
16
|
|
15
|
-
def initialize_instance
|
16
|
-
super
|
17
|
-
smb2_header.command = RubySMB::SMB2::Commands::CLOSE
|
18
|
-
end
|
19
17
|
end
|
20
18
|
end
|
21
19
|
end
|
@@ -4,6 +4,8 @@ module RubySMB
|
|
4
4
|
# An SMB2 Close Response Packet as defined in
|
5
5
|
# [2.2.16 SMB2 CLOSE Response](https://msdn.microsoft.com/en-us/library/cc246524.aspx)
|
6
6
|
class CloseResponse < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::CLOSE
|
8
|
+
|
7
9
|
endian :little
|
8
10
|
|
9
11
|
smb2_header :smb2_header
|
@@ -20,7 +22,6 @@ module RubySMB
|
|
20
22
|
|
21
23
|
def initialize_instance
|
22
24
|
super
|
23
|
-
smb2_header.command = RubySMB::SMB2::Commands::CLOSE
|
24
25
|
smb2_header.flags.reply = 1
|
25
26
|
end
|
26
27
|
end
|
@@ -0,0 +1,41 @@
|
|
1
|
+
module RubySMB
|
2
|
+
module SMB2
|
3
|
+
module Packet
|
4
|
+
# An SMB2 COMPRESSION_TRANSFORM_HEADER Packet as defined in
|
5
|
+
# [2.2.42 SMB2 COMPRESSION_TRANSFORM_HEADER](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/1d435f21-9a21-4f4c-828e-624a176cf2a0)
|
6
|
+
class CompressionTransformHeader < BinData::Record
|
7
|
+
endian :little
|
8
|
+
|
9
|
+
bit32 :protocol, label: 'Protocol ID Field', initial_value: 0xFC534D42
|
10
|
+
uint32 :original_compressed_segment_size, label: 'Original Compressed Segment Size'
|
11
|
+
uint16 :compression_algorithm, label: 'Compression Algorithm'
|
12
|
+
uint16 :flags, label: 'Flags'
|
13
|
+
uint32 :offset, label: 'Offset / Length'
|
14
|
+
end
|
15
|
+
|
16
|
+
# An SMB2 SMB2_COMPRESSION_TRANSFORM_HEADER_PAYLOAD Packet as defined in
|
17
|
+
# [2.2.42.1 SMB2_COMPRESSION_TRANSFORM_HEADER_PAYLOAD](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/8898e8e7-f1b2-47f5-a525-2ce5bad6db64)
|
18
|
+
class Smb2CompressionPayloadHeader < BinData::Record
|
19
|
+
endian :little
|
20
|
+
hide :reserved
|
21
|
+
|
22
|
+
uint16 :algorithm_id, label: 'Algorithm ID'
|
23
|
+
uint16 :reserved
|
24
|
+
uint32 :payload_length, label: 'Compressed Payload Length'
|
25
|
+
end
|
26
|
+
|
27
|
+
# An SMB2 SMB2_COMPRESSION_PATTERN_PAYLOAD_V1 Packet as defined in
|
28
|
+
# [2.2.42.2 SMB2_COMPRESSION_PATTERN_PAYLOAD_V1](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/f6859837-395a-4d0a-8971-1fc3919e2d09)
|
29
|
+
class Smb2CompressionPatternPayloadV1 < BinData::Record
|
30
|
+
endian :little
|
31
|
+
hide :reserved1, :reserved2
|
32
|
+
|
33
|
+
uint8 :pattern, label: 'Pattern'
|
34
|
+
uint8 :reserved1
|
35
|
+
uint16 :reserved2
|
36
|
+
uint32 :repetitions, label: 'Repetitions'
|
37
|
+
end
|
38
|
+
end
|
39
|
+
end
|
40
|
+
end
|
41
|
+
|
@@ -4,6 +4,8 @@ module RubySMB
|
|
4
4
|
# An SMB2 Create Request Packet as defined in
|
5
5
|
# [2.2.13 SMB2 CREATE Request](https://msdn.microsoft.com/en-us/library/cc246502.aspx)
|
6
6
|
class CreateRequest < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::CREATE
|
8
|
+
|
7
9
|
require 'ruby_smb/smb1/bit_field/create_options'
|
8
10
|
|
9
11
|
endian :little
|
@@ -44,10 +46,6 @@ module RubySMB
|
|
44
46
|
|
45
47
|
array :context, label: 'Contexts', type: :create_context, read_until: :eof
|
46
48
|
|
47
|
-
def initialize_instance
|
48
|
-
super
|
49
|
-
smb2_header.command = RubySMB::SMB2::Commands::CREATE
|
50
|
-
end
|
51
49
|
end
|
52
50
|
end
|
53
51
|
end
|
@@ -4,6 +4,8 @@ module RubySMB
|
|
4
4
|
# An SMB2 Create Response Packet as defined in
|
5
5
|
# [2.2.14 SMB2 CREATE Response](https://msdn.microsoft.com/en-us/library/cc246512.aspx)
|
6
6
|
class CreateResponse < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::CREATE
|
8
|
+
|
7
9
|
endian :little
|
8
10
|
smb2_header :smb2_header
|
9
11
|
uint16 :structure_size, label: 'Structure Size', initial_value: 89
|
@@ -26,7 +28,6 @@ module RubySMB
|
|
26
28
|
|
27
29
|
def initialize_instance
|
28
30
|
super
|
29
|
-
smb2_header.command = RubySMB::SMB2::Commands::CREATE
|
30
31
|
smb2_header.flags.reply = 1
|
31
32
|
end
|
32
33
|
end
|
@@ -4,15 +4,13 @@ module RubySMB
|
|
4
4
|
# An SMB2 Echo Request Packet as defined in
|
5
5
|
# [2.2.28 SMB2 ECHO Request](https://msdn.microsoft.com/en-us/library/cc246540.aspx)
|
6
6
|
class EchoRequest < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::ECHO
|
8
|
+
|
7
9
|
endian :little
|
8
10
|
smb2_header :smb2_header
|
9
11
|
uint16 :structure_size, label: 'Structure Size', initial_value: 4
|
10
12
|
uint16 :reserved
|
11
13
|
|
12
|
-
def initialize_instance
|
13
|
-
super
|
14
|
-
smb2_header.command = RubySMB::SMB2::Commands::ECHO
|
15
|
-
end
|
16
14
|
end
|
17
15
|
end
|
18
16
|
end
|
@@ -4,6 +4,8 @@ module RubySMB
|
|
4
4
|
# An SMB2 Echo response Packet as defined in
|
5
5
|
# [2.2.29 SMB2 ECHO Response](https://msdn.microsoft.com/en-us/library/cc246541.aspx)
|
6
6
|
class EchoResponse < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::ECHO
|
8
|
+
|
7
9
|
endian :little
|
8
10
|
smb2_header :smb2_header
|
9
11
|
uint16 :structure_size, label: 'Structure Size', initial_value: 4
|
@@ -11,7 +13,6 @@ module RubySMB
|
|
11
13
|
|
12
14
|
def initialize_instance
|
13
15
|
super
|
14
|
-
smb2_header.command = RubySMB::SMB2::Commands::ECHO
|
15
16
|
smb2_header.flags.reply = 1
|
16
17
|
end
|
17
18
|
end
|
@@ -1,12 +1,24 @@
|
|
1
1
|
module RubySMB
|
2
2
|
module SMB2
|
3
3
|
module Packet
|
4
|
-
#
|
4
|
+
# This class represents an SMB2 Error Response Packet as defined in
|
5
|
+
# [2.2.2 SMB2 ERROR Response](https://msdn.microsoft.com/en-us/library/cc246530.aspx)
|
5
6
|
class ErrorPacket < RubySMB::GenericPacket
|
7
|
+
attr_accessor :original_command
|
8
|
+
|
6
9
|
endian :little
|
7
10
|
smb2_header :smb2_header
|
8
|
-
uint16 :structure_size,
|
9
|
-
uint8 :
|
11
|
+
uint16 :structure_size, label: 'Structure Size', initial_value: 9
|
12
|
+
uint8 :error_context_count, label: 'ErrorContextCount'
|
13
|
+
uint8 :reserved
|
14
|
+
uint32 :byte_count, label: 'Byte Count of ErrorData'
|
15
|
+
string :error_data, label: 'Error Data', read_length: -> { byte_count }
|
16
|
+
|
17
|
+
def valid?
|
18
|
+
return smb2_header.protocol == RubySMB::SMB2::SMB2_PROTOCOL_ID &&
|
19
|
+
smb2_header.command == @original_command &&
|
20
|
+
structure_size == 9
|
21
|
+
end
|
10
22
|
end
|
11
23
|
end
|
12
24
|
end
|
@@ -4,6 +4,8 @@ module RubySMB
|
|
4
4
|
# An SMB2 Ioctl Request Packet as defined in
|
5
5
|
# [2.2.31 SMB2 IOCTL Request](https://msdn.microsoft.com/en-us/library/cc246545.aspx)
|
6
6
|
class IoctlRequest < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::IOCTL
|
8
|
+
|
7
9
|
endian :little
|
8
10
|
|
9
11
|
smb2_header :smb2_header
|
@@ -30,11 +32,6 @@ module RubySMB
|
|
30
32
|
uint32 :reserved2, label: 'Reserved Space'
|
31
33
|
string :buffer, label: 'Input Buffer', read_length: -> { input_count + output_count }
|
32
34
|
|
33
|
-
def initialize_instance
|
34
|
-
super
|
35
|
-
smb2_header.command = RubySMB::SMB2::Commands::IOCTL
|
36
|
-
end
|
37
|
-
|
38
35
|
# Calculates the value for the input_offset field.
|
39
36
|
# If the input buffer is empty then this should be set to 0,
|
40
37
|
# otherwise it should return the absolute offset of the input buffer.
|
@@ -4,6 +4,8 @@ module RubySMB
|
|
4
4
|
# An SMB2 Ioctl Response Packet as defined in
|
5
5
|
# [2.2.32 SMB2 IOCTL Response](https://msdn.microsoft.com/en-us/library/cc246548.aspx)
|
6
6
|
class IoctlResponse < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::IOCTL
|
8
|
+
|
7
9
|
endian :little
|
8
10
|
|
9
11
|
smb2_header :smb2_header
|
@@ -22,7 +24,6 @@ module RubySMB
|
|
22
24
|
def initialize_instance
|
23
25
|
super
|
24
26
|
smb2_header.flags.reply = 1
|
25
|
-
smb2_header.command = RubySMB::SMB2::Commands::IOCTL
|
26
27
|
end
|
27
28
|
|
28
29
|
def input_data
|
@@ -4,15 +4,13 @@ module RubySMB
|
|
4
4
|
# An SMB2 LOGOFF Request Packet as defined in
|
5
5
|
# [2.2.7 SMB2 LOGOFF Request](https://msdn.microsoft.com/en-us/library/cc246565.aspx)
|
6
6
|
class LogoffRequest < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::LOGOFF
|
8
|
+
|
7
9
|
endian :little
|
8
10
|
smb2_header :smb2_header
|
9
11
|
uint16 :structure_size, label: 'Structure Size', initial_value: 4
|
10
12
|
uint16 :reserved, label: 'Reserved Space'
|
11
13
|
|
12
|
-
def initialize_instance
|
13
|
-
super
|
14
|
-
smb2_header.command = RubySMB::SMB2::Commands::LOGOFF
|
15
|
-
end
|
16
14
|
end
|
17
15
|
end
|
18
16
|
end
|
@@ -4,6 +4,8 @@ module RubySMB
|
|
4
4
|
# An SMB2 LOGOFF Response Packet as defined in
|
5
5
|
# [2.2.8 SMB2 LOGOFF Response](https://msdn.microsoft.com/en-us/library/cc246566.aspx)
|
6
6
|
class LogoffResponse < RubySMB::GenericPacket
|
7
|
+
COMMAND = RubySMB::SMB2::Commands::LOGOFF
|
8
|
+
|
7
9
|
endian :little
|
8
10
|
smb2_header :smb2_header
|
9
11
|
uint16 :structure_size, label: 'Structure Size', initial_value: 4
|
@@ -11,7 +13,6 @@ module RubySMB
|
|
11
13
|
|
12
14
|
def initialize_instance
|
13
15
|
super
|
14
|
-
smb2_header.command = RubySMB::SMB2::Commands::LOGOFF
|
15
16
|
smb2_header.flags.reply = 1
|
16
17
|
end
|
17
18
|
end
|
@@ -1,33 +1,39 @@
|
|
1
|
+
require 'ruby_smb/smb2/negotiate_context'
|
2
|
+
|
1
3
|
module RubySMB
|
2
4
|
module SMB2
|
3
5
|
module Packet
|
4
6
|
# An SMB2 NEGOTIATE Request packet as defined by
|
5
7
|
# [2.2.3 SMB2 NEGOTIATE Request](https://msdn.microsoft.com/en-us/library/cc246543.aspx)
|
6
8
|
class NegotiateRequest < RubySMB::GenericPacket
|
9
|
+
COMMAND = RubySMB::SMB2::Commands::NEGOTIATE
|
10
|
+
|
7
11
|
endian :little
|
8
12
|
smb2_header :smb2_header
|
9
|
-
uint16 :structure_size,
|
10
|
-
uint16 :dialect_count,
|
11
|
-
smb2_security_mode :security_mode
|
12
|
-
uint16 :reserved1,
|
13
|
-
smb2_capabilities :capabilities
|
14
|
-
string :client_guid,
|
15
|
-
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
super
|
20
|
-
smb2_header.command = RubySMB::SMB2::Commands::NEGOTIATE
|
13
|
+
uint16 :structure_size, label: 'Structure Size', initial_value: 36
|
14
|
+
uint16 :dialect_count, label: 'Dialect Count', initial_value: -> { dialects.size }
|
15
|
+
smb2_security_mode :security_mode, label: 'Security Mode'
|
16
|
+
uint16 :reserved1, label: 'Reserved', initial_value: 0
|
17
|
+
smb2_capabilities :capabilities, label: 'Capabilities'
|
18
|
+
string :client_guid, label: 'Client GUID', length: 16
|
19
|
+
struct :negotiate_context_info, label: 'Negotiate Context Info', onlyif: -> { has_negotiate_context? } do
|
20
|
+
uint32 :negotiate_context_offset, label: 'Negotiate Context Offset', initial_value: -> { negotiate_context_list.abs_offset }
|
21
|
+
uint16 :negotiate_context_count, label: 'Negotiate Context Count', initial_value: -> { negotiate_context_list.size }
|
22
|
+
uint16 :reserved2, label: 'Reserved', initial_value: 0
|
21
23
|
end
|
24
|
+
file_time :client_start_time, label: 'Client Start Time', initial_value: 0, onlyif: -> { !has_negotiate_context? }
|
25
|
+
array :dialects, label: 'Dialects', type: :uint16, initial_length: -> { dialect_count }
|
26
|
+
string :pad, label: 'Padding', length: -> { pad_length(self.dialects) }, onlyif: -> { has_negotiate_context? }
|
27
|
+
array :negotiate_context_list, label: 'Negotiate Context List', type: :negotiate_context, onlyif: -> { has_negotiate_context? }, read_until: :eof
|
22
28
|
|
23
|
-
# Adds a dialect to the Dialects array
|
29
|
+
# Adds a dialect to the Dialects array
|
24
30
|
#
|
25
31
|
# @param [Fixnum] the numeric code for the dialect you wish to add
|
26
32
|
# @return [Array<Fixnum>] the array of all currently selected dialects
|
33
|
+
# @raise [ArgumentError] if the dialect is not an Integer
|
27
34
|
def add_dialect(dialect)
|
28
|
-
|
29
|
-
self.
|
30
|
-
dialects << dialect
|
35
|
+
raise ArgumentError, 'Must be a number' unless dialect.is_a? Integer
|
36
|
+
self.dialects << dialect
|
31
37
|
end
|
32
38
|
|
33
39
|
# Takes an array of dialects and sets it on the packet. Also updates
|
@@ -38,12 +44,40 @@ module RubySMB
|
|
38
44
|
# @return [Array<Fixnum>] the current value of the dialects array
|
39
45
|
def set_dialects(add_dialects = [])
|
40
46
|
self.dialects = []
|
41
|
-
self.dialect_count = 0
|
42
47
|
add_dialects.each do |dialect|
|
43
48
|
add_dialect(dialect)
|
44
49
|
end
|
45
50
|
dialects
|
46
51
|
end
|
52
|
+
|
53
|
+
# Adds a Negotiate Context to the #negotiate_context_list
|
54
|
+
#
|
55
|
+
# @param [NegotiateContext] the Negotiate Context structure you wish to add
|
56
|
+
# @return [Array<Fixnum>] the array of all currently added Negotiate Contexts
|
57
|
+
# @raise [ArgumentError] if the dialect is not a NegotiateContext structure
|
58
|
+
def add_negotiate_context(nc)
|
59
|
+
raise ArgumentError, 'Must be a NegotiateContext' unless nc.is_a? NegotiateContext
|
60
|
+
previous_element = negotiate_context_list.last || negotiate_context_list
|
61
|
+
pad_length = pad_length(previous_element)
|
62
|
+
self.negotiate_context_list << nc
|
63
|
+
self.negotiate_context_list.last.pad = "\x00" * pad_length
|
64
|
+
self.negotiate_context_list
|
65
|
+
end
|
66
|
+
|
67
|
+
|
68
|
+
private
|
69
|
+
|
70
|
+
# Determines the correct length for the padding, so that the next
|
71
|
+
# field is 8-byte aligned.
|
72
|
+
def pad_length(prev_element)
|
73
|
+
offset = (prev_element.abs_offset + prev_element.to_binary_s.length) % 8
|
74
|
+
(8 - offset) % 8
|
75
|
+
end
|
76
|
+
|
77
|
+
# Return true if the dialect version requires Negotiate Contexts
|
78
|
+
def has_negotiate_context?
|
79
|
+
dialects.any? { |dialect| dialect.to_i == 0x0311 }
|
80
|
+
end
|
47
81
|
end
|
48
82
|
end
|
49
83
|
end
|