ruby_smb 3.0.1 → 3.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 720a034c2e6c19fbb116a1d7b44e024a54d4f3006c393c1b1ad2b131f6d515b4
-  data.tar.gz: 4b36bff99e47dd2449d593a03f173f8d0f2da8bf5bab57c6d8f7a1d808cfaf07
+  metadata.gz: 9a0b34939805bf96ca0b83284b946fc2d96c1e5d7b6e63c67c4d0c40b73d257d
+  data.tar.gz: f8c1e25526de8821ec484c820b32734e0cfcefce6e34de2a90b25ce876225e61
 SHA512:
-  metadata.gz: be75feaa8b061d5d1c49dedf68ef6e4c5476ecd85bdb2d5a10a277027d00acd0e3358e1ee60dfdf376d32d5cb1af8ea4c48fde9a8ce4b7f60f9230cd2bf55409
-  data.tar.gz: 64df4daad099138c0e6f57abcb7b1c7894c15df4c17c22dbcf90babf99455edb5a4c99d88526d1e507acf92cd12847b7a9a1ae000ac13aea90140c44c288ff46
+  metadata.gz: b669ae3cdc6e7c875c92890ac15608ab45b8d223eb064756d340e046a5dd3b4273971ebdf8419a033ae87fc75af8f08d7e7ce5466186e2e531adada3efaedab4
+  data.tar.gz: 052ad0693a7f9ea8b3b767a58ecc710e37f2c9c0ef7c910b8c385b22b9a6eee678596a49de385cb0d0200964e620b171bd667a76b7b393f96a1ebded64e6f5b7

data/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_request.rb

@@ -0,0 +1,20 @@
+module RubySMB
+  module Dcerpc
+    module EncryptingFileSystem
+
+      # [3.1.4.2.5 EfsRpcEncryptFileSrv (Opnum 4)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-efsr/0d599976-758c-4dbd-ac8c-c9db2a922d76)
+      class EfsRpcEncryptFileSrvRequest < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        ndr_conf_var_wide_stringz :file_name
+
+        def initialize_instance
+          super
+          @opnum = EFS_RPC_ENCRYPT_FILE_SRV
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_response.rb

@@ -0,0 +1,20 @@
+module RubySMB
+  module Dcerpc
+    module EncryptingFileSystem
+
+      # [3.1.4.2.5 EfsRpcEncryptFileSrv (Opnum 4)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-efsr/0d599976-758c-4dbd-ac8c-c9db2a922d76)
+      class EfsRpcEncryptFileSrvResponse < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        ndr_uint32         :error_status
+
+        def initialize_instance
+          super
+          @opnum = EFS_RPC_ENCRYPT_FILE_SRV
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_request.rb

@@ -0,0 +1,21 @@
+module RubySMB
+  module Dcerpc
+    module EncryptingFileSystem
+
+      # [3.1.4.2.1 EfsRpcOpenFileRaw (Opnum 0)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-efsr/ccc4fb75-1c86-41d7-bbc4-b278ec13bfb8)
+      class EfsRpcOpenFileRawRequest < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        ndr_conf_var_wide_stringz :file_name
+        ndr_uint32                :flags
+
+        def initialize_instance
+          super
+          @opnum = EFS_RPC_OPEN_FILE_RAW
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_response.rb

@@ -0,0 +1,21 @@
+module RubySMB
+  module Dcerpc
+    module EncryptingFileSystem
+
+      # [3.1.4.2.1 EfsRpcOpenFileRaw (Opnum 0)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-efsr/ccc4fb75-1c86-41d7-bbc4-b278ec13bfb8)
+      class EfsRpcOpenFileRawResponse < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        ndr_context_handle :h_context
+        ndr_uint32         :error_status
+
+        def initialize_instance
+          super
+          @opnum = EFS_RPC_OPEN_FILE_RAW
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/encrypting_file_system.rb

@@ -0,0 +1,44 @@
+module RubySMB
+  module Dcerpc
+    module EncryptingFileSystem
+      # see: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-efsr/403c7ae0-1a3a-4e96-8efc-54e79a2cc451
+      UUID = EFSRPC_UUID = 'df1941c5-fe89-4e79-bf10-463657acf44d'.freeze
+      LSARPC_UUID = 'c681d488-d850-11d0-8c52-00c04fd90f7e'.freeze
+      VER_MAJOR = 1
+      VER_MINOR = 0
+
+      # Operation numbers
+      EFS_RPC_OPEN_FILE_RAW = 0
+      EFS_RPC_WRITE_FILE_RAW = 1
+      EFS_RPC_CLOSE_RAW = 3
+      EFS_RPC_ENCRYPT_FILE_SRV = 4
+      EFS_RPC_DECRYPT_FILE_SRV = 5
+      EFS_RPC_QUERY_USERS_ON_FILE = 6
+      EFS_RPC_QUERY_RECOVERY_AGENTS = 7
+      EFS_RPC_REMOVE_USERS_FROM_FILE = 8
+      EFS_RPC_ADD_USERS_TO_FILE = 9
+      EFS_RPC_NOT_SUPPORTED = 11
+      EFS_RPC_FILE_KEY_INFO = 12
+      EFS_RPC_DUPLICATE_ENCRYPTION_INFO_FILE = 13
+      EFS_RPC_ADD_USERS_TO_FILE_EX = 15
+      EFS_RPC_FILE_KEY_INFO_EX = 16
+      EFS_RPC_GET_ENCRYPTED_FILE_METADATA = 18
+      EFS_RPC_SET_ENCRYPTED_FILE_METADATA = 19
+      EFS_RPC_FLUSH_EFS_CACHE = 20
+      EFS_RPC_ENCRYPT_FILE_EX_SRV = 21
+      EFS_RPC_QUERY_PROTECTORS = 22
+
+      # EfsRpcOpenFileRaw flags,
+      # see: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-efsr/ccc4fb75-1c86-41d7-bbc4-b278ec13bfb8
+      CREATE_FOR_IMPORT = 0x00000001
+      CREATE_FOR_DIR = 0x00000002
+      OVERWRITE_HIDDEN = 0x00000004
+      EFS_DROP_ALTERNATE_STREAMS = 0x00000010
+
+      require 'ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_request'
+      require 'ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_response'
+      require 'ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_request'
+      require 'ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_response'
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_request.rb

@@ -0,0 +1,22 @@
+module RubySMB
+  module Dcerpc
+    module PrintSystem
+
+      # [3.1.4.4.8 RpcAddPrinterDriverEx (Opnum 89)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/b96cc497-59e5-4510-ab04-5484993b259b)
+      class RpcAddPrinterDriverExRequest < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        ndr_wide_stringz_ptr :p_name
+        driver_container     :p_driver_container
+        ndr_uint32           :dw_file_copy_flags
+
+        def initialize_instance
+          super
+          @opnum = RPC_ADD_PRINTER_DRIVER_EX
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_response.rb

@@ -0,0 +1,20 @@
+module RubySMB
+  module Dcerpc
+    module PrintSystem
+
+      # [3.1.4.4.8 RpcAddPrinterDriverEx (Opnum 89)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/b96cc497-59e5-4510-ab04-5484993b259b)
+      class RpcAddPrinterDriverExResponse < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        def initialize_instance
+          super
+          @opnum = RPC_ADD_PRINTER_DRIVER_EX
+        end
+
+        ndr_uint32 :error_status
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_request.rb

@@ -0,0 +1,24 @@
+module RubySMB
+  module Dcerpc
+    module PrintSystem
+
+      # [3.1.4.4.2 RpcEnumPrinterDrivers (Opnum 10)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/857d00ac-3682-4a0d-86ca-3d3c372e5e4a)
+      class RpcEnumPrinterDriversRequest < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        def initialize_instance
+          super
+          @opnum = RPC_ENUM_PRINTER_DRIVERS
+        end
+
+        ndr_wide_stringz_ptr :p_name
+        ndr_wide_stringz_ptr :p_environment
+        ndr_uint32           :level
+        rprn_byte_array_ptr  :p_drivers
+        ndr_uint32           :cb_buf
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_response.rb

@@ -0,0 +1,23 @@
+module RubySMB
+  module Dcerpc
+    module PrintSystem
+
+      # [3.1.4.4.2 RpcEnumPrinterDrivers (Opnum 10)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/857d00ac-3682-4a0d-86ca-3d3c372e5e4a)
+      class RpcEnumPrinterDriversResponse < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        def initialize_instance
+          super
+          @opnum = RPC_ENUM_PRINTER_DRIVERS
+        end
+
+        rprn_byte_array_ptr  :p_drivers
+        ndr_uint32           :pcb_needed
+        ndr_uint32           :pc_returned
+        ndr_uint32           :error_status
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_request.rb

@@ -0,0 +1,24 @@
+module RubySMB
+  module Dcerpc
+    module PrintSystem
+
+      # [3.1.4.4.4 RpcGetPrinterDriverDirectory (Opnum 12)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/9df11cf4-4098-4852-ad72-d1f75a82bffe)
+      class RpcGetPrinterDriverDirectoryRequest < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        def initialize_instance
+          super
+          @opnum = RPC_GET_PRINTER_DRIVER_DIRECTORY
+        end
+
+        ndr_wide_stringz_ptr :p_name
+        ndr_wide_stringz_ptr :p_environment
+        ndr_uint32           :level
+        rprn_byte_array_ptr  :p_driver_directory
+        ndr_uint32           :cb_buf
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_response.rb

@@ -0,0 +1,22 @@
+module RubySMB
+  module Dcerpc
+    module PrintSystem
+
+      # [3.1.4.4.4 RpcGetPrinterDriverDirectory (Opnum 12)](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/9df11cf4-4098-4852-ad72-d1f75a82bffe)
+      class RpcGetPrinterDriverDirectoryResponse < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        def initialize_instance
+          super
+          @opnum = RPC_GET_PRINTER_DRIVER_DIRECTORY
+        end
+
+        rprn_byte_array_ptr :p_driver_directory
+        ndr_uint32          :pcb_needed
+        ndr_uint32          :error_status
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/print_system.rb

@@ -0,0 +1,69 @@
+module RubySMB
+  module Dcerpc
+    module PrintSystem
+
+      # see: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/848b8334-134a-4d02-aea4-03b673d6c515
+      UUID = '12345678-1234-abcd-ef00-0123456789ab'.freeze
+      VER_MAJOR = 1
+      VER_MINOR = 0
+
+      # Operation numbers
+      RPC_ENUM_PRINTER_DRIVERS = 10
+      RPC_GET_PRINTER_DRIVER_DIRECTORY = 12
+      RPC_ADD_PRINTER_DRIVER_EX = 89
+
+      # see: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/b96cc497-59e5-4510-ab04-5484993b259b
+      APD_STRICT_UPGRADE = 0x00000001
+      APD_STRICT_DOWNGRADE = 0x00000002
+      APD_COPY_ALL_FILES = 0x00000004
+      APD_COPY_NEW_FILES = 0x00000008
+      APD_COPY_FROM_DIRECTORY = 0x00000010
+      APD_DONT_COPY_FILES_TO_CLUSTER = 0x00001000
+      APD_COPY_TO_ALL_SPOOLERS = 0x00002000
+      APD_INSTALL_WARNED_DRIVER = 0x00008000
+      APD_RETURN_BLOCKING_STATUS_CODE = 0x00010000
+
+      # [2.2.1.5.2 DRIVER_INFO_2](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/39bbfc30-8768-4cd4-9930-434857e2c2a2)
+      class DriverInfo2 < RubySMB::Dcerpc::Ndr::NdrStruct
+        default_parameter byte_align: 4
+        endian :little
+
+        ndr_uint32 :c_version
+        ndr_wide_stringz_ptr :p_name
+        ndr_wide_stringz_ptr :p_environment
+        ndr_wide_stringz_ptr :p_driver_path
+        ndr_wide_stringz_ptr :p_data_file
+        ndr_wide_stringz_ptr :p_config_file
+      end
+
+      class PDriverInfo2 < DriverInfo2
+        extend RubySMB::Dcerpc::Ndr::PointerClassPlugin
+      end
+
+      # [2.2.1.2.3 DRIVER_CONTAINER](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/3a3f9cf7-8ec4-4921-b1f6-86cf8d139bc2)
+      class DriverContainer < RubySMB::Dcerpc::Ndr::NdrStruct
+        default_parameter byte_align: 4
+        endian :little
+
+        ndr_uint32 :level, check_value: -> { [2].include?(value) }
+        ndr_uint32 :tag
+        choice :driver_info, selection: :level, byte_align: 4 do
+          p_driver_info2 2
+        end
+      end
+
+      # for RpcEnumPrinterDrivers and RpcGetPrinterDriverDirectory `BYTE*` fields
+      class RprnByteArrayPtr < RubySMB::Dcerpc::Ndr::NdrConfArray
+        default_parameters type: :ndr_uint8
+        extend RubySMB::Dcerpc::Ndr::PointerClassPlugin
+      end
+
+      require 'ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_request'
+      require 'ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_response'
+      require 'ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_request'
+      require 'ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_response'
+      require 'ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_request'
+      require 'ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_response'
+    end
+  end
+end

data/lib/ruby_smb/dcerpc.rb

@@ -50,8 +50,8 @@ module RubySMB
     require 'ruby_smb/dcerpc/rpc_auth3'
     require 'ruby_smb/dcerpc/bind'
     require 'ruby_smb/dcerpc/bind_ack'
-
-
+    require 'ruby_smb/dcerpc/print_system'
+    require 'ruby_smb/dcerpc/encrypting_file_system'
 
     # Bind to the remote server interface endpoint.
     #

data/lib/ruby_smb/version.rb

@@ -1,3 +1,3 @@
 module RubySMB
-  VERSION = '3.0.1'.freeze
+  VERSION = '3.0.2'.freeze
 end

data/spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_request_spec.rb

@@ -0,0 +1,30 @@
+RSpec.describe RubySMB::Dcerpc::EncryptingFileSystem::EfsRpcEncryptFileSrvRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :file_name }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#file_name' do
+    it 'is a NdrConfVarWideStringz' do
+      expect(packet.file_name).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to EFS_RPC_ENCRYPT_FILE_SRV constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::EncryptingFileSystem::EFS_RPC_ENCRYPT_FILE_SRV)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      file_name: 'file_name'
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_response_spec.rb

@@ -0,0 +1,30 @@
+RSpec.describe RubySMB::Dcerpc::EncryptingFileSystem::EfsRpcEncryptFileSrvResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :error_status }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#error_status' do
+    it 'is a NdrUint32' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to EFS_RPC_ENCRYPT_FILE_SRV constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::EncryptingFileSystem::EFS_RPC_ENCRYPT_FILE_SRV)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      error_status: 0
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_request_spec.rb

@@ -0,0 +1,38 @@
+RSpec.describe RubySMB::Dcerpc::EncryptingFileSystem::EfsRpcOpenFileRawRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :file_name }
+  it { is_expected.to respond_to :flags }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#file_name' do
+    it 'is a NdrConfVarWideStringz' do
+      expect(packet.file_name).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+
+  describe '#flags' do
+    it 'is a NdrUint32' do
+      expect(packet.flags).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to EFS_RPC_OPEN_FILE_RAW constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::EncryptingFileSystem::EFS_RPC_OPEN_FILE_RAW)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      file_name: 'file_name',
+      flags: 0
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_response_spec.rb

@@ -0,0 +1,38 @@
+RSpec.describe RubySMB::Dcerpc::EncryptingFileSystem::EfsRpcOpenFileRawResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :h_context }
+  it { is_expected.to respond_to :error_status }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#h_context' do
+    it 'is a NdrContextHandle' do
+      expect(packet.h_context).to be_a RubySMB::Dcerpc::Ndr::NdrContextHandle
+    end
+  end
+
+  describe '#error_status' do
+    it 'is a NdrUint32' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to EFS_RPC_OPEN_FILE_RAW constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::EncryptingFileSystem::EFS_RPC_OPEN_FILE_RAW)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      h_context: RubySMB::Dcerpc::Ndr::NdrContextHandle.new,
+      error_status: 0
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/print_system/driver_container_spec.rb

@@ -0,0 +1,41 @@
+RSpec.describe RubySMB::Dcerpc::PrintSystem::DriverContainer do
+  subject(:struct) { described_class.new }
+
+  it { is_expected.to respond_to :level }
+  it { is_expected.to respond_to :tag }
+  it { is_expected.to respond_to :driver_info }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#level' do
+    it 'is a NdrUint32' do
+      expect(struct.level).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#tag' do
+    it 'is a NdrUint32' do
+      expect(struct.tag).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same struct' do
+    struct = described_class.new(
+      level: 2,
+      tag: 0,
+      driver_info: RubySMB::Dcerpc::PrintSystem::DriverInfo2.new(
+        c_version: 0,
+        p_name: 'p_name',
+        p_environment: 'p_environment',
+        p_driver_path: 'p_driver_path',
+        p_data_file: 'p_data_file',
+        p_config_file: 'p_config_file'
+      )
+    )
+    binary = struct.to_binary_s
+    expect(described_class.read(binary)).to eq(struct)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/print_system/driver_info2_spec.rb

@@ -0,0 +1,64 @@
+RSpec.describe RubySMB::Dcerpc::PrintSystem::DriverInfo2 do
+  subject(:struct) { described_class.new }
+
+  it { is_expected.to respond_to :c_version }
+  it { is_expected.to respond_to :p_name }
+  it { is_expected.to respond_to :p_environment }
+  it { is_expected.to respond_to :p_driver_path }
+  it { is_expected.to respond_to :p_data_file }
+  it { is_expected.to respond_to :p_config_file }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#c_version' do
+    it 'is a NdrUint32' do
+      expect(struct.c_version).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#p_name' do
+    it 'is a NdrWideStringzPtr' do
+      expect(struct.p_name).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  describe '#p_environment' do
+    it 'is a NdrWideStringzPtr' do
+      expect(struct.p_environment).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  describe '#p_driver_path' do
+    it 'is a NdrWideStringzPtr' do
+      expect(struct.p_driver_path).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  describe '#p_data_file' do
+    it 'is a NdrWideStringzPtr' do
+      expect(struct.p_data_file).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  describe '#p_config_file' do
+    it 'is a NdrWideStringzPtr' do
+      expect(struct.p_config_file).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same struct' do
+    struct = described_class.new(
+      c_version: 0,
+      p_name: 'p_name',
+      p_environment: 'p_environment',
+      p_driver_path: 'p_driver_path',
+      p_data_file: 'p_data_file',
+      p_config_file: 'p_config_file'
+    )
+    binary = struct.to_binary_s
+    expect(described_class.read(binary)).to eq(struct)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_request_spec.rb

@@ -0,0 +1,59 @@
+RSpec.describe RubySMB::Dcerpc::PrintSystem::RpcAddPrinterDriverExRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :p_name }
+  it { is_expected.to respond_to :p_driver_container }
+  it { is_expected.to respond_to :dw_file_copy_flags }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#p_name' do
+    it 'is a NdrWideStringzPtr' do
+      expect(packet.p_name).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  describe '#p_driver_container' do
+    it 'is a DriverContainer structure' do
+      expect(packet.p_driver_container).to be_a RubySMB::Dcerpc::PrintSystem::DriverContainer
+    end
+  end
+
+  describe '#dw_file_copy_flags' do
+    it 'is a NdrUint32' do
+      expect(packet.dw_file_copy_flags).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to RPC_ADD_PRINTER_DRIVER_EX constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::PrintSystem::RPC_ADD_PRINTER_DRIVER_EX)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      p_name: 'p_name',
+      p_driver_container: RubySMB::Dcerpc::PrintSystem::DriverContainer.new(
+        RubySMB::Dcerpc::PrintSystem::DriverContainer.new(
+          level: 2,
+          tag: 2,
+          driver_info: RubySMB::Dcerpc::PrintSystem::DriverInfo2.new(
+            c_version: 0,
+            p_name: 'p_name',
+            p_environment: 'p_environment',
+            p_driver_path: 'p_driver_path',
+            p_data_file: 'p_data_file',
+            p_config_file: 'p_config_file'
+          )
+        )
+      ),
+      dw_file_copy_flags: 0
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_response_spec.rb

@@ -0,0 +1,30 @@
+RSpec.describe RubySMB::Dcerpc::PrintSystem::RpcAddPrinterDriverExResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :error_status }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#error_status' do
+    it 'is a NdrUint32' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to RPC_ADD_PRINTER_DRIVER_EX constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::PrintSystem::RPC_ADD_PRINTER_DRIVER_EX)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      error_status: 0
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_request_spec.rb

@@ -0,0 +1,62 @@
+RSpec.describe RubySMB::Dcerpc::PrintSystem::RpcEnumPrinterDriversRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :p_name }
+  it { is_expected.to respond_to :p_environment }
+  it { is_expected.to respond_to :level }
+  it { is_expected.to respond_to :p_drivers }
+  it { is_expected.to respond_to :cb_buf }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#p_name' do
+    it 'is a NdrWideStringzPtr' do
+      expect(packet.p_name).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  describe '#p_environment' do
+    it 'is a NdrWideStringzPtr' do
+      expect(packet.p_environment).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  describe '#level' do
+    it 'is a NdrUint32' do
+      expect(packet.level).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#p_drivers' do
+    it 'is a RprnByteArrayPtr' do
+      expect(packet.p_drivers).to be_a RubySMB::Dcerpc::PrintSystem::RprnByteArrayPtr
+    end
+  end
+
+  describe '#cb_buf' do
+    it 'is a NdrUint32' do
+      expect(packet.cb_buf).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to RPC_ENUM_PRINTER_DRIVERS constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::PrintSystem::RPC_ENUM_PRINTER_DRIVERS)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      p_name: 'p_name',
+      p_environment: 'p_environment',
+      level: 0,
+      p_drivers: [0, 1, 2],
+      cb_buf: 0
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_response_spec.rb

@@ -0,0 +1,54 @@
+RSpec.describe RubySMB::Dcerpc::PrintSystem::RpcEnumPrinterDriversResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :p_drivers }
+  it { is_expected.to respond_to :pcb_needed }
+  it { is_expected.to respond_to :pc_returned }
+  it { is_expected.to respond_to :error_status }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#p_drivers' do
+    it 'is a RprnByteArrayPtr' do
+      expect(packet.p_drivers).to be_a RubySMB::Dcerpc::PrintSystem::RprnByteArrayPtr
+    end
+  end
+
+  describe '#pcb_needed' do
+    it 'is a NdrUint32' do
+      expect(packet.pcb_needed).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#pc_returned' do
+    it 'is a NdrUint32' do
+      expect(packet.pc_returned).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#error_status' do
+    it 'is a NdrUint32' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to RPC_ENUM_PRINTER_DRIVERS constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::PrintSystem::RPC_ENUM_PRINTER_DRIVERS)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      p_drivers: [0, 1, 2],
+      pcb_needed: 0,
+      pc_returned: 0,
+      error_status: 0
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_request_spec.rb

@@ -0,0 +1,62 @@
+RSpec.describe RubySMB::Dcerpc::PrintSystem::RpcGetPrinterDriverDirectoryRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :p_name }
+  it { is_expected.to respond_to :p_environment }
+  it { is_expected.to respond_to :level}
+  it { is_expected.to respond_to :p_driver_directory }
+  it { is_expected.to respond_to :cb_buf }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#p_name' do
+    it 'is a NdrWideStringzPtr' do
+      expect(packet.p_name).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  describe '#p_environment' do
+    it 'is a NdrWideStringzPtr' do
+      expect(packet.p_environment).to be_a RubySMB::Dcerpc::Ndr::NdrWideStringzPtr
+    end
+  end
+
+  describe '#level' do
+    it 'is a NdrUint32' do
+      expect(packet.level).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#p_driver_directory' do
+    it 'is a RprnByteArrayPtr' do
+      expect(packet.p_driver_directory).to be_a RubySMB::Dcerpc::PrintSystem::RprnByteArrayPtr
+    end
+  end
+
+  describe '#cb_buf' do
+    it 'is a NdrUint32' do
+      expect(packet.cb_buf).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to RPC_GET_PRINTER_DRIVER_DIRECTORY constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::PrintSystem::RPC_GET_PRINTER_DRIVER_DIRECTORY)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      p_name: 'p_name',
+      p_environment: 'p_environment',
+      level: 0,
+      p_driver_directory: [0, 1, 2],
+      cb_buf: 0
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data/spec/lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_response_spec.rb

@@ -0,0 +1,46 @@
+RSpec.describe RubySMB::Dcerpc::PrintSystem::RpcGetPrinterDriverDirectoryResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :p_driver_directory }
+  it { is_expected.to respond_to :pcb_needed }
+  it { is_expected.to respond_to :error_status }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#p_driver_directory' do
+    it 'is a RprnByteArrayPtr' do
+      expect(packet.p_driver_directory).to be_a RubySMB::Dcerpc::PrintSystem::RprnByteArrayPtr
+    end
+  end
+
+  describe '#pcb_needed' do
+    it 'is a NdrUint32' do
+      expect(packet.pcb_needed).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#error_status' do
+    it 'is a NdrUint32' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to RPC_GET_PRINTER_DRIVER_DIRECTORY constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::PrintSystem::RPC_GET_PRINTER_DRIVER_DIRECTORY)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      p_driver_directory: [0, 1, 2],
+      pcb_needed: 0,
+      error_status: 0
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end
+

data.tar.gz.sig

@@ -1,2 +1,2 @@
-�˾I}��XdH���t�7q��jc�m<�����ֿ��v���:�HK0��s�2��ǃ��	O���@EH5�F��T�<2����]��
�}.@��E2�O."}��=�+�N�A��̀�M:�H7D���~|c�q��ݽ�^��
-�f3_�
6���7�YX�w	%�:𦅎G������`�8�G1������G	\�k9�%꒰��S��Sr�����h�,^ۺ3����V���TIh*�>J��!>,
+v!�J�a�m.��y�����:;��*]q����鋊K��B�M6$��r=�X��n)��������C~�'��^�k5�;�/38Xr�M�t���L��Q��m�ig6#�Q�A�C�,K�hÀ`#'��톟�������>��j�"$�Ӽ�SdR�Գ���������i�΍ꎈ{�f�8N��\Gx��bO��vh����%�Mx���r[�iM�u���E��Ŀ@�N�hg��
+����l�����ֆ��	`3���

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby_smb
 version: !ruby/object:Gem::Version
-  version: 3.0.1
+  version: 3.0.2
 platform: ruby
 authors:
 - Metasploit Hackers
@@ -97,7 +97,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2022-01-20 00:00:00.000000000 Z
+date: 2022-02-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: redcarpet
@@ -308,6 +308,11 @@ files:
 - lib/ruby_smb/dcerpc/drsr/drs_get_nc_changes_response.rb
 - lib/ruby_smb/dcerpc/drsr/drs_unbind_request.rb
 - lib/ruby_smb/dcerpc/drsr/drs_unbind_response.rb
+- lib/ruby_smb/dcerpc/encrypting_file_system.rb
+- lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_request.rb
+- lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_response.rb
+- lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_request.rb
+- lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_response.rb
 - lib/ruby_smb/dcerpc/epm.rb
 - lib/ruby_smb/dcerpc/epm/epm_ept_map_request.rb
 - lib/ruby_smb/dcerpc/epm/epm_ept_map_response.rb
@@ -323,6 +328,13 @@ files:
 - lib/ruby_smb/dcerpc/netlogon/netr_server_req_challenge_response.rb
 - lib/ruby_smb/dcerpc/p_syntax_id_t.rb
 - lib/ruby_smb/dcerpc/pdu_header.rb
+- lib/ruby_smb/dcerpc/print_system.rb
+- lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_request.rb
+- lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_response.rb
+- lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_request.rb
+- lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_response.rb
+- lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_request.rb
+- lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_response.rb
 - lib/ruby_smb/dcerpc/ptypes.rb
 - lib/ruby_smb/dcerpc/request.rb
 - lib/ruby_smb/dcerpc/response.rb
@@ -609,6 +621,10 @@ files:
 - spec/lib/ruby_smb/dcerpc/bind_spec.rb
 - spec/lib/ruby_smb/dcerpc/client_spec.rb
 - spec/lib/ruby_smb/dcerpc/drsr_spec.rb
+- spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_response_spec.rb
+- spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_response_spec.rb
 - spec/lib/ruby_smb/dcerpc/ndr_spec.rb
 - spec/lib/ruby_smb/dcerpc/netlogon/netr_server_authenticate3_request_spec.rb
 - spec/lib/ruby_smb/dcerpc/netlogon/netr_server_authenticate3_response_spec.rb
@@ -618,6 +634,14 @@ files:
 - spec/lib/ruby_smb/dcerpc/netlogon/netr_server_req_challenge_response_spec.rb
 - spec/lib/ruby_smb/dcerpc/p_syntax_id_t_spec.rb
 - spec/lib/ruby_smb/dcerpc/pdu_header_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/driver_container_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/driver_info2_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_response_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_response_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_response_spec.rb
 - spec/lib/ruby_smb/dcerpc/request_spec.rb
 - spec/lib/ruby_smb/dcerpc/response_spec.rb
 - spec/lib/ruby_smb/dcerpc/rpc_auth3_spec.rb
@@ -877,6 +901,10 @@ test_files:
 - spec/lib/ruby_smb/dcerpc/bind_spec.rb
 - spec/lib/ruby_smb/dcerpc/client_spec.rb
 - spec/lib/ruby_smb/dcerpc/drsr_spec.rb
+- spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_encrypt_file_srv_response_spec.rb
+- spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/encrypting_file_system/efs_rpc_open_file_raw_response_spec.rb
 - spec/lib/ruby_smb/dcerpc/ndr_spec.rb
 - spec/lib/ruby_smb/dcerpc/netlogon/netr_server_authenticate3_request_spec.rb
 - spec/lib/ruby_smb/dcerpc/netlogon/netr_server_authenticate3_response_spec.rb
@@ -886,6 +914,14 @@ test_files:
 - spec/lib/ruby_smb/dcerpc/netlogon/netr_server_req_challenge_response_spec.rb
 - spec/lib/ruby_smb/dcerpc/p_syntax_id_t_spec.rb
 - spec/lib/ruby_smb/dcerpc/pdu_header_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/driver_container_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/driver_info2_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_add_printer_driver_ex_response_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_enum_printer_drivers_response_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_request_spec.rb
+- spec/lib/ruby_smb/dcerpc/print_system/rpc_get_printer_driver_directory_response_spec.rb
 - spec/lib/ruby_smb/dcerpc/request_spec.rb
 - spec/lib/ruby_smb/dcerpc/response_spec.rb
 - spec/lib/ruby_smb/dcerpc/rpc_auth3_spec.rb