ruby_smb 3.3.8 → 3.3.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 25bedacb57d3950d1ee6f3bbf731007c4e1f0bd2b8e3f38582679a5cd867793f
-  data.tar.gz: 1369c85136ad8336371ee55c1f8d90f0e85001b2c0d9e01e46b87e9b382ded16
+  metadata.gz: 278206369fbc36f22011dbdaa45154a7a937468c2178e05c76b2ccc0b5032345
+  data.tar.gz: 9fc1a683bc32bd5e35860fba5a74749611d9ae4298c3cd3a93b7b0949adea78d
 SHA512:
-  metadata.gz: 66d3566b68b64d0dc2ff8f58b373d8b6026b4980fcccb4b24c6263f59376373dadbc0b52c531ba5c212b255937d34dd281ce827eec111d0e7ef0b1a6dd5973f1
-  data.tar.gz: 8cee7210c06f8e603342b69706c2779f3e9fef2d46146505154b00bc91d6cc7dbad37735e5e6ae4ac6fac256b0ba6eaf3dda15185c161e992a12bab3b3a91bb1
+  metadata.gz: d7cd41abca3c816ad18fedad7f544a42a46f8d863447678e408661d11688696bab1ef91cf85557c5757b916f5bcaee7b047231a4f35e8d4683f8a9e56a2a559b
+  data.tar.gz: 408e4e81542732f5f31e16c8bc970629518f7a8a56c62c697cd98e3066e93280fb2270f346a63769e05d2cf9cd7bdd2b5ac9344e058c5190d9d88621d321bf24

data/lib/ruby_smb/dcerpc/netlogon/domain_controller_infow.rb

@@ -0,0 +1,28 @@
+require 'ruby_smb/dcerpc/ndr'
+
+module RubySMB
+  module Dcerpc
+    module Netlogon
+
+      # [2.2.1.2.1 DOMAIN_CONTROLLER_INFOW](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-nrpc/9b85a7a4-8d34-4b9e-9500-bf8644ebfc06)
+      class DomainControllerInfoW < Ndr::NdrStruct
+        default_parameters byte_align: 4
+        endian :little
+
+        ndr_wide_stringz_ptr :domain_controller_name
+        ndr_wide_stringz_ptr :domain_controller_address
+        ndr_uint32           :domain_controller_address_type
+        uuid                 :domain_guid
+        ndr_wide_stringz_ptr :domain_name
+        ndr_wide_stringz_ptr :dns_forest_name
+        ndr_uint32           :flags
+        ndr_wide_stringz_ptr :dc_site_name
+        ndr_wide_stringz_ptr :client_site_name
+      end
+
+      class DomainControllerInfoWPtr < DomainControllerInfoW
+        extend Ndr::PointerClassPlugin
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/netlogon/dsr_get_dc_name_ex2_request.rb

@@ -0,0 +1,28 @@
+require 'ruby_smb/dcerpc/ndr'
+
+module RubySMB
+  module Dcerpc
+    module Netlogon
+
+      # [3.5.4.3.1 DsrGetDcNameEx2 (Opnum 34)](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-nrpc/fb8e1146-a045-4c31-98d1-c68507ad5620)
+      class DsrGetDcNameEx2Request < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        logonsrv_handle       :computer_name
+        ndr_wide_stringz_ptr  :account_name
+        ndr_uint32            :allowable_account_control_bits
+        ndr_wide_stringz_ptr  :domain_name
+        uuid_ptr              :domain_guid
+        ndr_wide_stringz_ptr  :site_name
+        ndr_uint32            :flags
+
+        def initialize_instance
+          super
+          @opnum = DSR_GET_DC_NAME_EX2
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/netlogon/dsr_get_dc_name_ex2_response.rb

@@ -0,0 +1,24 @@
+require 'ruby_smb/dcerpc/ndr'
+require 'ruby_smb/dcerpc/netlogon/domain_controller_infow'
+
+module RubySMB
+  module Dcerpc
+    module Netlogon
+
+      # [3.5.4.3.1 DsrGetDcNameEx2 (Opnum 34)](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-nrpc/fb8e1146-a045-4c31-98d1-c68507ad5620)
+      class DsrGetDcNameEx2Response < BinData::Record
+        attr_reader :opnum
+
+        endian :little
+
+        domain_controller_info_w_ptr  :domain_controller_info
+        ndr_uint32                    :error_status
+
+        def initialize_instance
+          super
+          @opnum = DSR_GET_DC_NAME_EX2
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/dcerpc/netlogon.rb

@@ -11,6 +11,7 @@ module RubySMB
       NETR_SERVER_REQ_CHALLENGE = 4
       NETR_SERVER_AUTHENTICATE3 = 26
       NETR_SERVER_PASSWORD_SET2 = 30
+      DSR_GET_DC_NAME_EX2 = 34
 
       # see: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-nrpc/3b224201-b531-43e2-8c79-b61f6dea8640
       class LogonsrvHandle < Ndr::NdrWideStringzPtr; end
@@ -65,6 +66,8 @@ module RubySMB
       require 'ruby_smb/dcerpc/netlogon/netr_server_password_set2_response'
       require 'ruby_smb/dcerpc/netlogon/netr_server_req_challenge_request'
       require 'ruby_smb/dcerpc/netlogon/netr_server_req_challenge_response'
+      require 'ruby_smb/dcerpc/netlogon/dsr_get_dc_name_ex2_request'
+      require 'ruby_smb/dcerpc/netlogon/dsr_get_dc_name_ex2_response'
 
       # Calculate the netlogon session key from the provided shared secret and
       # challenges. The shared secret is an NTLM hash.

data/lib/ruby_smb/version.rb

@@ -1,3 +1,3 @@
 module RubySMB
-  VERSION = '3.3.8'.freeze
+  VERSION = '3.3.9'.freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby_smb
 version: !ruby/object:Gem::Version
-  version: 3.3.8
+  version: 3.3.9
 platform: ruby
 authors:
 - Metasploit Hackers
@@ -38,7 +38,7 @@ cert_chain:
   DgscAao7wB3xW2BWEp1KnaDWkf1x9ttgoBEYyuYwU7uatB67kBQG1PKvLt79wHvz
   Dxs+KOjGbBRfMnPgVGYkORKVrZIwlaboHbDKxcVW5xv+oZc7KYXWGg==
   -----END CERTIFICATE-----
-date: 2024-05-16 00:00:00.000000000 Z
+date: 2024-06-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: redcarpet
@@ -295,6 +295,9 @@ files:
 - lib/ruby_smb/dcerpc/lsarpc/lsar_query_information_policy_response.rb
 - lib/ruby_smb/dcerpc/ndr.rb
 - lib/ruby_smb/dcerpc/netlogon.rb
+- lib/ruby_smb/dcerpc/netlogon/domain_controller_infow.rb
+- lib/ruby_smb/dcerpc/netlogon/dsr_get_dc_name_ex2_request.rb
+- lib/ruby_smb/dcerpc/netlogon/dsr_get_dc_name_ex2_response.rb
 - lib/ruby_smb/dcerpc/netlogon/netr_server_authenticate3_request.rb
 - lib/ruby_smb/dcerpc/netlogon/netr_server_authenticate3_response.rb
 - lib/ruby_smb/dcerpc/netlogon/netr_server_password_set2_request.rb