ruby_smb 0.0.12 → 0.0.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: feeacf1f58c3116642f6235922092fe0bf6e20d1
-  data.tar.gz: 7297da083b1e96ae1285fa5108dd8681b2bf7afe
+  metadata.gz: e599cfd32ed2eef3ec64db3aeef90291f419a8cd
+  data.tar.gz: 31069aa5863e82e9a681300863f22aa8d3fa9a00
 SHA512:
-  metadata.gz: 1c77ee63edd56e399c014b16a11536009a4bad9d0db2e5bbe77d0be8918157a5520030ee98d87dfb410381e467ad282f3c93c2f4b4f9ddb809967fbbeadec86f
-  data.tar.gz: 76111bb45b72c3f817206e946ba226aa030247f957604361b96821c0c3975c8e4e8b9c29cd5f26b81a5f27d1c5095064ebe48c958197d6eaf3e99238a3a7cc5d
+  metadata.gz: bacd65cd70045c29a402f6d81b9002ff63797203963929e96175466416700a73bbf761bd274902985e6bb0c901124b90740c3accb30d19b14e99e438eda6704a
+  data.tar.gz: b022e98f38ec3e9962b14dc2428f454405eb367205f0a32844a747988818d7c87732162cd1aa0581ad4ae2e93d09329ee76fc43a776df2fbe0f8556501f79c48

checksums.yaml.gz.sig

@@ -1,2 +1 @@
-wD�����$�>�օ6���*Aq����R^�q���A�B=N���xs5	�O�V�T�-苲	�mon��}i�����+�f��������~��9�)���b3�
-e�F">E��U��IQ�;�$����ท�ϐ%���JE���@�U�.���֏��PH<��ÕF���S�v�F����9?hz�_I��^�� BH�/&��d�ٕvLu��)4����8�of�ǝ�Œ����"�[2��}�t�Zy�ftf�U���Xփ
+l
zK3�->�wU�N+jGC

data/lib/ruby_smb/client/authentication.rb

@@ -92,7 +92,7 @@ module RubySMB
         begin
           packet = RubySMB::SMB1::Packet::SessionSetupResponse.read(raw_response)
         rescue
-          packet = RubySMB::SMB1::Packet::ErrorPacket.read(raw_response)
+          packet = RubySMB::SMB1::Packet::EmptyPacket.read(raw_response)
         end
 
         unless packet.smb_header.command == RubySMB::SMB1::Commands::SMB_COM_SESSION_SETUP

data/lib/ruby_smb/client/echo.rb

@@ -0,0 +1,36 @@
+module RubySMB
+  class Client
+
+    # Contains the methods for doing ECHO commands
+    module Echo
+
+      # Sends an ECHO request packet and returns the
+      # last response packet.
+      #
+      # @param echo [Integer] the number of times the server should echo (ignored in SMB2)
+      # @param data [String] the data the server should echo back (ignored in SMB2)
+      # @return [RubySMB::SMB1::Packet::EchoResponse] the last Echo Response packet received
+      def smb1_echo(count: 1, data: '')
+        request = RubySMB::SMB2::Packet::EchoRequest.new
+        request.parameter_block.echo_count = count
+        request.data_block.data = data
+        raw_response = send_recv(request)
+        (count - 1).times do
+          raw_response = dispatcher.recv_packet
+        end
+        RubySMB::SMB1::Packet::EchoResponse.read(raw_response)
+      end
+
+
+      # Sends an ECHO request packet and returns the
+      # response packet.
+      #
+      # @return [RubySMB::SMB2::Packet::EchoResponse]
+      def smb2_echo
+        request      = RubySMB::SMB2::Packet::EchoRequest.new
+        raw_response = send_recv(request)
+        RubySMB::SMB2::Packet::EchoResponse.read(raw_response)
+      end
+    end
+  end
+end

data/lib/ruby_smb/client/tree_connect.rb

@@ -22,7 +22,7 @@ module RubySMB
         begin
           response = RubySMB::SMB1::Packet::TreeConnectResponse.read(raw_response)
         rescue EOFError
-          response = RubySMB::SMB1::Packet::ErrorPacket.read(raw_response)
+          response = RubySMB::SMB1::Packet::EmptyPacket.read(raw_response)
         end
         smb1_tree_from_response(share, response)
       end

data/lib/ruby_smb/client.rb

@@ -7,11 +7,13 @@ module RubySMB
     require 'ruby_smb/client/authentication'
     require 'ruby_smb/client/signing'
     require 'ruby_smb/client/tree_connect'
+    require 'ruby_smb/client/echo'
 
     include RubySMB::Client::Negotiation
     include RubySMB::Client::Authentication
     include RubySMB::Client::Signing
     include RubySMB::Client::TreeConnect
+    include RubySMB::Client::Echo
 
     # The Default SMB1 Dialect string used in an SMB1 Negotiate Request
     SMB1_DIALECT_SMB1_DEFAULT = "NT LM 0.12"
@@ -131,6 +133,21 @@ module RubySMB
       dispatcher.tcp_socket.close
     end
 
+    # Sends an Echo request to the server and returns the
+    # NTStatus of the last response packet received.
+    #
+    # @param echo [Integer] the number of times the server should echo (ignored in SMB2)
+    # @param data [String] the data the server should echo back (ignored in SMB2)
+    # @return [WindowsError::ErrorCode] the NTStatus of the last response received
+    def echo(count: 1, data: '' )
+      if smb2
+        response = smb2_echo
+      else
+        response = smb1_echo(count:count, data:data)
+      end
+      response.status_code
+    end
+
     # Sets the message id field in an SMB2 packet's
     # header to the one tracked by the client. It then increments
     # the counter on the client.

data/lib/ruby_smb/dispatcher/socket.rb

@@ -27,10 +27,13 @@ class RubySMB::Dispatcher::Socket < RubySMB::Dispatcher::Base
   def send_packet(packet)
     data = nbss(packet) + packet.to_binary_s
     bytes_written = 0
-    while bytes_written < data.size
-      bytes_written += @tcp_socket.write(data[bytes_written..-1])
+    begin
+      while bytes_written < data.size
+        bytes_written += @tcp_socket.write(data[bytes_written..-1])
+      end
+    rescue IOError => e
+      raise RubySMB::Error::CommunicationError, "An error occured writing to the Socket"
     end
-
     nil
   end
 
@@ -40,17 +43,21 @@ class RubySMB::Dispatcher::Socket < RubySMB::Dispatcher::Base
   # @return [String]
   # @todo should return SMB2::Packet
   def recv_packet
-    IO.select([@tcp_socket])
-    nbss_header = @tcp_socket.read(4) # Length of NBSS header. TODO: remove to a constant
-    if nbss_header.nil?
-      raise ::RubySMB::Error::NetBiosSessionService, 'NBSS Header is missing'
-    else
-      length = nbss_header.unpack('N').first
-    end
-    IO.select([@tcp_socket])
-    data = @tcp_socket.read(length)
-    data << @tcp_socket.read(length - data.length) while data.length < length
+    begin
+      IO.select([@tcp_socket])
+      nbss_header = @tcp_socket.read(4) # Length of NBSS header. TODO: remove to a constant
+      if nbss_header.nil?
+        raise ::RubySMB::Error::NetBiosSessionService, 'NBSS Header is missing'
+      else
+        length = nbss_header.unpack('N').first
+      end
+      IO.select([@tcp_socket])
+      data = @tcp_socket.read(length)
+      data << @tcp_socket.read(length - data.length) while data.length < length
 
-    data
+      data
+    rescue Errno::EINVAL, TypeError => e
+      raise RubySMB::Error::CommunicationError, "An error occured reading from the Socket"
+    end
   end
 end

data/lib/ruby_smb/error.rb

@@ -14,4 +14,7 @@ module RubySMB::Error
 
   # Raised when a response packet has a NTStatus code that was unexpected.
   class UnexpectedStatusCode < StandardError; end
+
+  # Raised when an error occurs with the underlying socket.
+  class CommunicationError < StandardError; end
 end

data/lib/ruby_smb/field/ea_info_array.rb

@@ -0,0 +1,58 @@
+module RubySMB
+  module Field
+    # Convenience class that extend the normal {BinData::Array} for use
+    # with {RubySMB::Field::FileFullEaInfo}. This array will automatically
+    # updates the {RubySMB::Field::FileFullEaInfo#next_entry_offset} of
+    # each element in the array.
+    class EaInfoArray < BinData::Array
+
+      # Overrides the method from {BinData::Array} to
+      # call #update_offsets
+      # @raise [ArgumentError] if the inserted element is not a {RubySMB::Field::FileFullEaInfo}
+      def []=(index, value)
+        unless value.is_a? RubySMB::Field::FileFullEaInfo
+          raise ArgumentError, "This array can only contain RubySMB::Field::FileFullEaInfo objects"
+        end
+        retval = super(index,value)
+        update_offsets
+        retval
+      end
+
+      # Overrides the insert method in {BinData::Array} to
+      # call #update_offsets.
+      #
+      # @param index [Integer] the index to insert into the array at
+      # @param objs [Array<Object>] the objects to be inserted
+      # @raise [ArgumentError] if the inserted element is not a {RubySMB::Field::FileFullEaInfo}
+      # @return [self]
+      def insert(index, *objs)
+        objs.each do |x|
+          unless x.is_a? RubySMB::Field::FileFullEaInfo
+            raise ArgumentError, "This array can only contain RubySMB::Field::FileFullEaInfo objects"
+          end
+        end
+        super(index, *objs)
+        update_offsets
+      end
+
+      # Iterates through all of the elements in the array and
+      # dynamically updates all of the next_record_offset fields
+      # to properly reflect the chain.
+      #
+      # @return [self]
+      def update_offsets
+        self.each do |element|
+          if element == self.last
+            # If this is the end of our array, the offset must be 0
+            element.next_entry_offset = 0
+          else
+            # If there is an element after this one, set the offset
+            element.next_entry_offset = element.do_num_bytes
+          end
+        end
+        self
+      end
+
+    end
+  end
+end

data/lib/ruby_smb/field/extended_attribute_flag.rb

@@ -0,0 +1,10 @@
+module RubySMB
+  module Field
+    # Representation of the ExtendedAttributeFlag bit-field as defined in
+    # [2.2.1.2.2 SMB_FEA](https://msdn.microsoft.com/en-us/library/ee915515.aspx)
+    class ExtendedAttributeFlag < BinData::Record
+      bit1  :file_need_ea,  label: 'EA Required'
+      bit7  :reserved,      label: 'Reserved Space'
+    end
+  end
+end

data/lib/ruby_smb/field/file_full_ea_info.rb

@@ -0,0 +1,15 @@
+module RubySMB
+  module Field
+    # Class representing a FillFullEaInformation structure as defined in
+    # [2.4.15 FileFullEaInformation](https://msdn.microsoft.com/en-us/library/cc232069.aspx)
+    class FileFullEaInfo < BinData::Record
+      endian  :little
+      uint32                  :next_entry_offset, label: 'Next Entry Offset'
+      extended_attribute_flag :flags
+      uint8                   :ea_name_length,    label: 'EA Name Length',  value: lambda { ea_name.do_num_bytes }
+      uint8                   :ea_value_length,   label: 'EA Value Length', value: lambda { ea_value.do_num_bytes }
+      string                  :ea_name,           label: 'EA Name'
+      string                  :ea_value,          label: 'EA Value'
+    end
+  end
+end

data/lib/ruby_smb/field/security_descriptor.rb

@@ -0,0 +1,42 @@
+module RubySMB
+  module Field
+    # Class representing a SECURITY_DESCRIPTOR as defined in
+    # [2.4.6 SECURITY_DESCRIPTOR](https://msdn.microsoft.com/en-us/library/cc230366.aspx)
+    class SecurityDescriptor < BinData::Record
+      endian  :little
+      uint8   :revision,  label: 'Revision',  initial_value: 0x01
+      uint8   :sbz1,      label: 'Resource Manager Control Bits'
+
+      struct :control do
+        endian  :little
+        bit1    :dacl_computed_inheritance, label: 'DACL Computed Inheritance'
+        bit1    :sacl_computed_inheritance, label: 'SACL Computed Inheritance'
+        bit1    :dacl_auto_inherited,       label: 'DACL Auto-Inherited'
+        bit1    :sacl_auto_inherited,       label: 'SACL Auto-Inherited'
+        bit1    :dacl_protected,            label: 'DACL Protected'
+        bit1    :sacl_protected,            label: 'SACL Protected'
+        bit1    :rm_control_valid,          label: 'RM Control Valid'
+        bit1    :self_relative,             label: 'Self-Relative Format', initial_value: 0x01
+        # Byte Boundary
+        bit1    :owner_defaulted,           label: 'Owner Defaulted'
+        bit1    :group_defaulted,           label: 'Group Defaulted'
+        bit1    :dacl_present,              label: 'DACL Present'
+        bit1    :dacl_defaulted,            label: 'DACL Defaulted'
+        bit1    :sacl_present,              label: 'SACL Present'
+        bit1    :sacl_defaulted,            label: 'SACL Defaulted'
+        bit1    :server_security,           label: 'Server Security'
+        bit1    :dacl_trusted,              label: 'DACL Trusted'
+      end
+
+      uint32  :offset_owner,  label: 'Offset Owner',  value: lambda { owner_sid.rel_offset }
+      uint32  :offset_group,  label: 'Offset Group',  value: lambda { group_sid.rel_offset }
+      uint32  :offset_sacl,   label: 'Offset SACL',   value: lambda { sacl.rel_offset }
+      uint32  :offset_dacl,   label: 'Offset DACL',   value: lambda { dacl.rel_offset }
+
+      string  :owner_sid, label: 'Owner SID'
+      string  :group_sid, label: 'Group SID'
+      string  :sacl,      label: 'SACL'
+      string  :dacl,      label: 'DACL'
+    end
+  end
+end

data/lib/ruby_smb/field/smb_fea.rb

@@ -0,0 +1,14 @@
+module RubySMB
+  module Field
+    # Class representing an SMB File Extended Attribute as defined in
+    # [2.2.1.2.2 SMB_FEA](https://msdn.microsoft.com/en-us/library/ee915515.aspx)
+    class SmbFea < BinData::Record
+      endian :little
+      extended_attribute_flag :ea_flag,                   label: 'Extended Attribute Flag'
+      uint8                   :attribute_name_length,     label: 'Attribute Name Length',   value: lambda { attribute_name.length}
+      uint16                  :attribute_value_length,    label: 'Attribute Value Length',  value: lambda { attribute_value.length}
+      string                  :attribute_name,            label: 'Attribute Name'
+      string                  :attribute_value,           label: 'Attribute Value'
+    end
+  end
+end

data/lib/ruby_smb/field/smb_fea_list.rb

@@ -0,0 +1,13 @@
+module RubySMB
+  module Field
+    # Class representing an SMB File Extended Attribute List as defined in
+    # [2.2.1.2.2.1 SMB_FEA_LIST](https://msdn.microsoft.com/en-us/library/ff359296.aspx)
+    class SmbFeaList < BinData::Record
+      endian :little
+      uint32  :size_of_list,  label: 'Size of List in Bytes', value: lambda { fea_list.do_num_bytes }
+      array   :fea_list,  initial_length: 0 do
+        smb_fea
+      end
+    end
+  end
+end

data/lib/ruby_smb/field/utime.rb

@@ -0,0 +1,54 @@
+module RubySMB
+  module Field
+
+    # Conveneince class for dealing with 32-bit unsigned UTIME
+    # fields in SMB, as defined in
+    # [2.2.1.4.3 UTIME](https://msdn.microsoft.com/en-us/library/ee441907.aspx)
+    class Utime < BinData::Primitive
+      endian :little
+      uint32 :val
+
+      # Gets the value of the field
+      #
+      # @return [BinData::Bit32] the 64-bit value of the field
+      def get
+        val
+      end
+
+      # Sets the value of the field from a DateTime,Time,Fixnum, or object
+      # that can be converted to an integer. Any other
+      # parameter passed in will be assumed to already be correct.
+      #
+      # @param value [DateTime,Time,Fixnum,#to_i] the value to set
+      # @return
+      def set(value)
+        case value
+          when DateTime
+            set(value.to_time)
+          when Time
+            set(value.to_i)
+          when Fixnum
+            self.val = value
+          else
+            self.val = value.to_i
+        end
+        val
+      end
+
+      # Returns the value of the field as a {DateTime}
+      #
+      # @return [DateTime] the {DateTime} representation of the current value
+      def to_datetime
+        time = to_time
+        time.to_datetime
+      end
+
+      # Returns the value of the field as a {Time}
+      #
+      # @return [Time] the {Time} representation of the current value
+      def to_time
+        Time.at val
+      end
+    end
+  end
+end

data/lib/ruby_smb/field.rb

@@ -1,7 +1,14 @@
 module RubySMB
   module Field
     require 'ruby_smb/field/file_time'
+    require 'ruby_smb/field/utime'
     require 'ruby_smb/field/stringz16'
     require 'ruby_smb/field/nt_status'
+    require 'ruby_smb/field/extended_attribute_flag'
+    require 'ruby_smb/field/smb_fea'
+    require 'ruby_smb/field/smb_fea_list'
+    require 'ruby_smb/field/security_descriptor'
+    require 'ruby_smb/field/file_full_ea_info'
+    require 'ruby_smb/field/ea_info_array'
   end
 end

data/lib/ruby_smb/generic_packet.rb

@@ -35,15 +35,19 @@ module RubySMB
     end
 
     def status_code
+      value = -1
       smb_version = packet_smb_version
       case smb_version
         when 'SMB1'
-          status_code = WindowsError::NTStatus.find_by_retval(self.smb_header.nt_status.value).first
+          value = self.smb_header.nt_status.value
         when 'SMB2'
-          status_code = WindowsError::NTStatus.find_by_retval(self.smb2_header.nt_status.value).first
-        else
-          nil
+          value = self.smb2_header.nt_status.value
+      end
+      status_code = WindowsError::NTStatus.find_by_retval(value).first
+      if status_code.nil?
+        status_code = WindowsError::ErrorCode.new("0x#{value.to_s(16)}", value, "Unknown 0x#{value.to_s(16)}")
       end
+      status_code
     end
 
     private

data/lib/ruby_smb/impersonation_levels.rb

@@ -0,0 +1,22 @@
+module RubySMB
+  # Contains constants for the various Impersonation levels as defined in
+  # [2.2.4.64.1 Request](https://msdn.microsoft.com/en-us/library/ee442175.aspx)
+  # See also [Impersonation Levels](https://msdn.microsoft.com/en-us/library/ms686632(v=vs.85).aspx)
+  module ImpersonationLevels
+    # The client is anonymous to the server. The server process can impersonate the client, but the impersonation
+    # token does not contain any information about the client. This level is only supported over the local
+    # interprocess communication transport. All other transports silently promote this level to identify.
+    SEC_ANONYMOUS   = 0x00000000
+
+    # The system default level. The server can obtain the client's identity,
+    # and the server can impersonate the client to do ACL checks.
+    SEC_IDENTIFY    = 0x00000001
+
+    # The server can impersonate the client's security context while acting on behalf of the client.
+    # The server can access local resources as the client. If the server is local, it can access
+    # network resources as the client. If the server is remote, it can access only resources
+    # that are on the same computer as the server.
+    SEC_IMPERSONATE = 0x00000002
+
+  end
+end

data/lib/ruby_smb/smb1/bit_field/create_options.rb

@@ -0,0 +1,38 @@
+module RubySMB
+  module SMB1
+    module BitField
+
+      # Represents a CreateOptions BitField as used by both the NT_CREATE_ANDX
+      # and the NT_TRANSACT_CREATE Requests. The definition for this field can be found at
+      # [2.2.4.64.1 Request](https://msdn.microsoft.com/en-us/library/ee442175.aspx)
+      class CreateOptions < BinData::Record
+        endian  :little
+        bit1    :create_tree_connection,      label: 'Create Tree Connection'
+        bit1    :non_directory_file,          label: 'Non-Directory File'
+        bit1    :synchronous_io_nonalert,     label: 'Synchronous IO Nonalert'
+        bit1    :synchronous_io_alert,        label: 'Synchronous IO Alert'
+        bit1    :no_intermediate_buffer,      label: 'No Intermediate Buffering'
+        bit1    :sequential_only,             label: 'Sequential Only'
+        bit1    :write_through,               label: 'Write Through'
+        bit1    :directory_file,              label: 'Directory File'
+        # Byte Boundary
+        bit1    :no_compression,              label: 'No Compression'
+        bit1    :open_for_backup_intent,      label: 'Open For Backup Intent'
+        bit1    :open_by_file_id,             label: 'Open by File ID'
+        bit1    :delete_on_close,             label: 'Delete on Close'
+        bit1    :random_access,               label: 'Random Access'
+        bit1    :open_for_recovery,           label: 'Open for Recovery'
+        bit1    :no_ea_knowledge,             label: 'No EA Knowledge'
+        bit1    :complete_if_oplocked,        label: 'Complete if OPLocked'
+        # Byte Boundary
+        bit1    :open_for_free_space_query,   label: 'Open for Free Space Query'
+        bit1    :open_no_recall,              label: 'Open No Recall'
+        bit1    :reserved2,                   label: 'Reserved Space'
+        bit1    :reserve_opfilter,            label: 'Reserve OPFilter'
+        bit4    :reserved,                    label: 'Reserved Space'
+        # Byte Boundary
+        bit8
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/bit_field/file_access_mask.rb

@@ -7,7 +7,7 @@ module RubySMB
         endian  :little
         bit1    :read_attr,       label: 'Read Attributes'
         bit1    :delete_child,    label: 'Delete Child'
-        bit1    :execute,         label: 'Traverse'
+        bit1    :execute,         label: 'Execute'
         bit1    :write_ea,        label: 'Write Extended Attributes'
         bit1    :read_ea,         label: 'Read Extended Attributes'
         bit1    :append_data,     label: 'Append Data'

data/lib/ruby_smb/smb1/bit_field/open2_access_mode.rb

@@ -0,0 +1,42 @@
+module RubySMB
+  module SMB1
+    module BitField
+      # The AccessMode bit-field for an SMB1 Open2 Request as defined in
+      # [2.2.6.1.1 Request](https://msdn.microsoft.com/en-us/library/ee441733.aspx)
+      class Open2AccessMode< BinData::Record
+        endian  :little
+        bit1    :reserved2,           label: 'Reserved Space'
+        bit3    :sharing_mode,        label: 'Sharing Mode'
+        bit1    :reserved,            label: 'Reserved Space'
+        bit3    :access_mode,         label: 'Access Mode'
+        # byte boundary
+        bit1    :reserved5,           label: 'Reserved Space'
+        bit1    :writethrough,        label: 'Writethrough mode'
+        bit1    :reserved4,           label: 'Reserved Space'
+        bit1    :cache_mode,          label: 'Cache Mode'
+        bit1    :reserved3,           label: 'Reserved Space'
+        bit3    :reference_locality,  label: 'Reference'
+
+        # Sets the #access_mode based on more human readableinput.
+        # Takes the symbols :r, :w, :rw, and :x to set Read, Write,
+        # ReadWrite, and Execute respectively.
+        #
+        # @param mode [Symbol] the access mode to set
+        def set_access_mode(mode=:r)
+          modes = [:r, :w, :rw, :x]
+          raise ArgumentError, "Mode must be one of #{modes.to_s}" unless modes.include? mode
+          case mode
+            when :r
+              self.access_mode = 0
+            when :w
+              self.access_mode = 1
+            when :rw
+              self.access_mode = 2
+            when :x
+              self.access_mode = 3
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/bit_field/open2_flags.rb

@@ -0,0 +1,18 @@
+module RubySMB
+  module SMB1
+    module BitField
+      # The Flags bit-field for an SMB1 Open2 Request as defined in
+      # [2.2.6.1.1 Request](https://msdn.microsoft.com/en-us/library/ee441733.aspx)
+      class Open2Flags < BinData::Record
+        endian  :little
+        bit4    :reserved,    label: 'Reserved Space'
+        bit1    :req_easize,  label: 'Request EA Size',      initial_value: 1
+        bit1    :req_opbatch, label: 'Request Batch OpLock', initial_value: 0
+        bit1    :req_oplock,  label: 'Request OpLock',       initial_value: 0
+        bit1    :req_attrib,  label: 'Request Attributes',   initial_value: 1
+        # Byte boundary
+        bit8    :reserved2,   label: 'Reserved Space'
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/bit_field/open2_open_mode.rb

@@ -0,0 +1,17 @@
+module RubySMB
+  module SMB1
+    module BitField
+      # The OpenMode bit-field for an SMB1 Open2 Request as defined in
+      # [2.2.6.1.1 Request](https://msdn.microsoft.com/en-us/library/ee441733.aspx)
+      class Open2OpenMode< BinData::Record
+        endian  :little
+        bit3    :reserved2,           label: 'Reserved Space'
+        bit1    :create_file,         label: 'Create File Options'
+        bit2    :reserved,            label: 'Reserved Space'
+        bit2    :file_exists_opts,    label: 'File Exists Options'
+        # byte boundary
+        bit8    :reserved5,           label: 'Reserved Space'
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/bit_field/share_access.rb

@@ -0,0 +1,20 @@
+module RubySMB
+  module SMB1
+    module BitField
+
+      # Represents a ShareAccess Bit-Field as defined in
+      # [2.2.4.64.1 Request](https://msdn.microsoft.com/en-us/library/ee442175.aspx)
+      class ShareAccess < BinData::Record
+        endian  :little
+        bit5  :reserved,        label: 'Reserved Space'
+        bit1  :share_delete,    label: 'Share Delete Access'
+        bit1  :share_write,     label: 'Share Write Access'
+        bit1  :share_read,      label: 'Share Read Access'
+        # Byte Boundary
+        bit8  :reserved2, label: 'Reserved Space'
+        bit8  :reserved3, label: 'Reserved Space'
+        bit8  :reserved4, label: 'Reserved Space'
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/bit_field/smb_ext_file_attributes.rb

@@ -0,0 +1,35 @@
+module RubySMB
+  module SMB1
+    module BitField
+      # The bit-field for SMB1 Extended File Attributes as defined in
+      # [2.2.1.2.3 SMB_EXT_FILE_ATTR](https://msdn.microsoft.com/en-us/library/ee878573.aspx)
+      class SmbExtFileAttributes < BinData::Record
+        endian  :little
+        bit1  :normal,            label: 'Normal File'
+        bit1  :reserved,          label: 'Reserved Space'
+        bit1  :archive,           label: 'Archive'
+        bit1  :directory,         label: 'Directory'
+        bit1  :reserved2,         label: 'Reserved Space'
+        bit1  :system,            label: 'System File'
+        bit1  :hidden,            label: 'Hidden File'
+        bit1  :read_only,         label: 'Read Only'
+        # Byte boundary
+        bit4  :reserved3,         label: 'Reserved Space'
+        bit1  :compressed,        label: 'Compressed File'
+        bit2  :reserved4,         label: 'Reserved Space'
+        bit1  :temporary,         label: 'Temporary File'
+        # Byte Boundary
+        bit8  :reserved5,         label: 'Reserved Space'
+        # Byte Boundary
+        bit1  :write_through,     label: 'Write through'
+        bit1  :reserved6,         label: 'Reserved Space'
+        bit1  :no_buffering,      label: 'Do not Buffer'
+        bit1  :random_access,     label: 'Random Access'
+        bit1  :sequential_scan,   label: 'Sequential Access'
+        bit1  :delete_on_close,   label: 'Delete on close'
+        bit1  :backup_semantics,  label: 'Backup Semantics'
+        bit1  :posix_semantics,   label: 'POSIX Semantics'
+      end
+    end
+  end
+end