ai-remote 0.4.2 → 0.4.4

package/dist/protocols/rdp/ntlm.js

@@ -1,304 +0,0 @@
-import { Writer, concatBytes } from "./buffer.js";
-import { md5, rc4Crypt, rc4Init } from "./crypto.js";
-function rotl32(value, count) {
-  return value << count | value >>> 32 - count;
-}
-function md4(message) {
-  const blockCount = Math.floor((message.length + 8) / 64) + 1;
-  const padded = new Uint8Array(blockCount * 64);
-  padded.set(message);
-  padded[message.length] = 128;
-  const view = new DataView(padded.buffer);
-  const bitLength = message.length * 8;
-  view.setUint32(padded.length - 8, bitLength >>> 0, true);
-  view.setUint32(padded.length - 4, Math.floor(bitLength / 4294967296), true);
-  let a0 = 1732584193, b0 = 4023233417, c0 = 2562383102, d0 = 271733878;
-  const x = new Uint32Array(16);
-  const round1Shifts = [3, 7, 11, 19];
-  const round2Order = [0, 4, 8, 12, 1, 5, 9, 13, 2, 6, 10, 14, 3, 7, 11, 15];
-  const round2Shifts = [3, 5, 9, 13];
-  const round3Order = [0, 8, 4, 12, 2, 10, 6, 14, 1, 9, 5, 13, 3, 11, 7, 15];
-  const round3Shifts = [3, 9, 11, 15];
-  for (let block = 0; block < blockCount; block++) {
-    for (let i = 0; i < 16; i++) x[i] = view.getUint32(block * 64 + i * 4, true);
-    let a = a0, b = b0, c = c0, d = d0;
-    const step = (value, shift) => rotl32(value | 0, shift);
-    for (let i = 0; i < 16; i++) {
-      const f = b & c | ~b & d;
-      const shift = round1Shifts[i % 4];
-      const next = step(a + f + x[i] | 0, shift);
-      a = d;
-      d = c;
-      c = b;
-      b = next;
-    }
-    for (let i = 0; i < 16; i++) {
-      const g = b & c | b & d | c & d;
-      const shift = round2Shifts[i % 4];
-      const next = step(a + g + x[round2Order[i]] + 1518500249 | 0, shift);
-      a = d;
-      d = c;
-      c = b;
-      b = next;
-    }
-    for (let i = 0; i < 16; i++) {
-      const h = b ^ c ^ d;
-      const shift = round3Shifts[i % 4];
-      const next = step(a + h + x[round3Order[i]] + 1859775393 | 0, shift);
-      a = d;
-      d = c;
-      c = b;
-      b = next;
-    }
-    a0 = a0 + a | 0;
-    b0 = b0 + b | 0;
-    c0 = c0 + c | 0;
-    d0 = d0 + d | 0;
-  }
-  const digest = new Uint8Array(16);
-  const out = new DataView(digest.buffer);
-  out.setUint32(0, a0 >>> 0, true);
-  out.setUint32(4, b0 >>> 0, true);
-  out.setUint32(8, c0 >>> 0, true);
-  out.setUint32(12, d0 >>> 0, true);
-  return digest;
-}
-function hmacMd5(key, message) {
-  const blockSize = 64;
-  const normalized = key.length > blockSize ? md5(key) : key;
-  const padded = new Uint8Array(blockSize);
-  padded.set(normalized);
-  const inner = new Uint8Array(blockSize);
-  const outer = new Uint8Array(blockSize);
-  for (let i = 0; i < blockSize; i++) {
-    inner[i] = padded[i] ^ 54;
-    outer[i] = padded[i] ^ 92;
-  }
-  return md5(concatBytes(outer, md5(concatBytes(inner, message))));
-}
-const NTLMSSP_SIGNATURE = new Uint8Array([78, 84, 76, 77, 83, 83, 80, 0]);
-const NTLM_FLAG = {
-  UNICODE: 1,
-  REQUEST_TARGET: 4,
-  SIGN: 16,
-  SEAL: 32,
-  NTLM: 512,
-  ALWAYS_SIGN: 32768,
-  EXTENDED_SESSION_SECURITY: 524288,
-  TARGET_INFO: 8388608,
-  VERSION: 33554432,
-  KEY_128: 536870912,
-  KEY_EXCH: 1073741824,
-  KEY_56: 2147483648
-};
-const CLIENT_FLAGS = NTLM_FLAG.UNICODE | NTLM_FLAG.REQUEST_TARGET | NTLM_FLAG.SIGN | NTLM_FLAG.SEAL | NTLM_FLAG.NTLM | NTLM_FLAG.ALWAYS_SIGN | NTLM_FLAG.EXTENDED_SESSION_SECURITY | NTLM_FLAG.TARGET_INFO | NTLM_FLAG.VERSION | NTLM_FLAG.KEY_128 | NTLM_FLAG.KEY_EXCH | NTLM_FLAG.KEY_56;
-const MSV_AV_EOL = 0;
-const MSV_AV_TIMESTAMP = 7;
-const MSV_AV_FLAGS = 6;
-const MSV_AV_FLAGS_MIC = 2;
-const utf16 = (text) => {
-  const writer = new Writer(text.length * 2 + 2);
-  writer.utf16le(text);
-  return writer.take();
-};
-const VERSION_FIELD = new Uint8Array([10, 0, 99, 69, 0, 0, 0, 15]);
-function negotiateMessage() {
-  const writer = new Writer(40);
-  writer.raw(NTLMSSP_SIGNATURE);
-  writer.u32le(1);
-  writer.u32le(CLIENT_FLAGS >>> 0);
-  writer.u16le(0).u16le(0).u32le(0);
-  writer.u16le(0).u16le(0).u32le(0);
-  writer.raw(VERSION_FIELD);
-  return writer.take();
-}
-function parseChallengeMessage(bytes) {
-  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-  if (view.getUint32(8, true) !== 2) {
-    throw new Error("NTLM: the host did not answer with a challenge message");
-  }
-  const targetNameLength = view.getUint16(12, true);
-  const targetNameOffset = view.getUint32(16, true);
-  const flags = view.getUint32(20, true);
-  const serverChallenge = bytes.subarray(24, 32).slice();
-  const targetInfoLength = view.getUint16(40, true);
-  const targetInfoOffset = view.getUint32(44, true);
-  return {
-    flags,
-    serverChallenge,
-    targetName: bytes.subarray(targetNameOffset, targetNameOffset + targetNameLength).slice(),
-    targetInfo: bytes.subarray(targetInfoOffset, targetInfoOffset + targetInfoLength).slice()
-  };
-}
-function readAvPairs(targetInfo) {
-  const pairs = [];
-  let offset = 0;
-  const view = new DataView(targetInfo.buffer, targetInfo.byteOffset, targetInfo.byteLength);
-  while (offset + 4 <= targetInfo.length) {
-    const id = view.getUint16(offset, true);
-    const length = view.getUint16(offset + 2, true);
-    const value = targetInfo.subarray(offset + 4, offset + 4 + length);
-    offset += 4 + length;
-    if (id === MSV_AV_EOL) break;
-    pairs.push({ id, value });
-  }
-  return pairs;
-}
-function writeAvPairs(pairs) {
-  const writer = new Writer(256);
-  for (const pair of pairs) {
-    writer.u16le(pair.id);
-    writer.u16le(pair.value.length);
-    writer.raw(pair.value);
-  }
-  writer.u16le(MSV_AV_EOL).u16le(0);
-  return writer.take();
-}
-function fileTimeNow() {
-  const ticks = (BigInt(Date.now()) + 11644473600000n) * 10000n;
-  const out = new Uint8Array(8);
-  new DataView(out.buffer).setBigUint64(0, ticks, true);
-  return out;
-}
-function authenticateMessage({ username, domain, password, challenge, negotiateBytes, challengeBytes }) {
-  const responseKey = hmacMd5(
-    md4(utf16(password)),
-    utf16(username.toUpperCase() + domain)
-  );
-  const pairs = readAvPairs(challenge.targetInfo);
-  const timestamp = pairs.find((pair) => pair.id === MSV_AV_TIMESTAMP)?.value.slice() || fileTimeNow();
-  const flagsPair = pairs.find((pair) => pair.id === MSV_AV_FLAGS);
-  if (flagsPair) {
-    const view = new DataView(flagsPair.value.buffer, flagsPair.value.byteOffset, 4);
-    view.setUint32(0, view.getUint32(0, true) | MSV_AV_FLAGS_MIC, true);
-  } else {
-    const value = new Uint8Array(4);
-    new DataView(value.buffer).setUint32(0, MSV_AV_FLAGS_MIC, true);
-    pairs.push({ id: MSV_AV_FLAGS, value });
-  }
-  const targetInfo = writeAvPairs(pairs);
-  const clientChallenge = new Uint8Array(8);
-  crypto.getRandomValues(clientChallenge);
-  const temp = concatBytes(
-    new Uint8Array([1, 1, 0, 0, 0, 0, 0, 0]),
-    // version, reserved
-    timestamp,
-    clientChallenge,
-    new Uint8Array(4),
-    targetInfo,
-    new Uint8Array(4)
-  );
-  const proof = hmacMd5(responseKey, concatBytes(challenge.serverChallenge, temp));
-  const ntResponse = concatBytes(proof, temp);
-  const sessionBaseKey = hmacMd5(responseKey, proof);
-  const exportedSessionKey = new Uint8Array(16);
-  crypto.getRandomValues(exportedSessionKey);
-  const encryptedSessionKey = rc4Crypt(rc4Init(sessionBaseKey), exportedSessionKey);
-  const domainBytes = utf16Trimmed(domain);
-  const userBytes = utf16Trimmed(username);
-  const workstationBytes = utf16Trimmed("");
-  const lmResponse = new Uint8Array(24);
-  const headerLength = 72;
-  let offset = headerLength;
-  const layout = [];
-  const place = (bytes) => {
-    layout.push({ bytes, offset });
-    offset += bytes.length;
-    return layout[layout.length - 1];
-  };
-  const lm = place(lmResponse);
-  const nt = place(ntResponse);
-  const dom = place(domainBytes);
-  const user = place(userBytes);
-  const workstation = place(workstationBytes);
-  const sessionKey = place(encryptedSessionKey);
-  const writer = new Writer(offset + 16);
-  writer.raw(NTLMSSP_SIGNATURE);
-  writer.u32le(3);
-  const field = (entry) => {
-    writer.u16le(entry.bytes.length);
-    writer.u16le(entry.bytes.length);
-    writer.u32le(entry.offset + 16);
-  };
-  field(lm);
-  field(nt);
-  field(dom);
-  field(user);
-  field(workstation);
-  field(sessionKey);
-  writer.u32le(CLIENT_FLAGS >>> 0);
-  writer.raw(VERSION_FIELD);
-  writer.zeros(16);
-  for (const entry of layout) writer.raw(entry.bytes);
-  const message = writer.take();
-  const mic = hmacMd5(
-    exportedSessionKey,
-    concatBytes(negotiateBytes, challengeBytes, message)
-  );
-  message.set(mic, headerLength);
-  return {
-    message,
-    exportedSessionKey,
-    keys: sessionKeys(exportedSessionKey)
-  };
-}
-function utf16Trimmed(text) {
-  if (!text) return new Uint8Array(0);
-  const bytes = utf16(text);
-  return bytes.subarray(0, text.length * 2).slice();
-}
-const CLIENT_SIGNING = "session key to client-to-server signing key magic constant\0";
-const SERVER_SIGNING = "session key to server-to-client signing key magic constant\0";
-const CLIENT_SEALING = "session key to client-to-server sealing key magic constant\0";
-const SERVER_SEALING = "session key to server-to-client sealing key magic constant\0";
-function sessionKeys(exportedSessionKey) {
-  const derive = (label) => md5(concatBytes(exportedSessionKey, new TextEncoder().encode(label)));
-  return {
-    clientSigningKey: derive(CLIENT_SIGNING),
-    serverSigningKey: derive(SERVER_SIGNING),
-    clientSealing: rc4Init(derive(CLIENT_SEALING)),
-    serverSealing: rc4Init(derive(SERVER_SEALING))
-  };
-}
-class NtlmSealer {
-  keys;
-  sendSequence;
-  receiveSequence;
-  constructor(keys) {
-    this.keys = keys;
-    this.sendSequence = 0;
-    this.receiveSequence = 0;
-  }
-  seal(plaintext) {
-    const sequence = new Uint8Array(4);
-    new DataView(sequence.buffer).setUint32(0, this.sendSequence, true);
-    const digest = hmacMd5(this.keys.clientSigningKey, concatBytes(sequence, plaintext));
-    const sealed = rc4Crypt(this.keys.clientSealing, plaintext);
-    const checksum = rc4Crypt(this.keys.clientSealing, digest.subarray(0, 8));
-    this.sendSequence += 1;
-    return concatBytes(new Uint8Array([1, 0, 0, 0]), checksum, sequence, sealed);
-  }
-  unseal(bytes) {
-    if (bytes.length < 16) throw new Error("NTLM: sealed message is too short");
-    const sealed = bytes.subarray(16);
-    const plaintext = rc4Crypt(this.keys.serverSealing, sealed);
-    const sequence = bytes.subarray(12, 16);
-    const digest = hmacMd5(this.keys.serverSigningKey, concatBytes(sequence, plaintext));
-    const expected = rc4Crypt(this.keys.serverSealing, digest.subarray(0, 8));
-    const actual = bytes.subarray(4, 12);
-    if (!expected.every((byte, i) => byte === actual[i])) {
-      throw new Error("NTLM: the host signature did not verify");
-    }
-    this.receiveSequence += 1;
-    return plaintext;
-  }
-}
-export {
-  NTLM_FLAG,
-  NtlmSealer,
-  authenticateMessage,
-  hmacMd5,
-  md4,
-  negotiateMessage,
-  parseChallengeMessage
-};

package/dist/protocols/rdp/pdu.d.ts

@@ -1,155 +0,0 @@
-import { Reader } from './buffer';
-export declare const PDU_TYPE: {
-    DEMAND_ACTIVE: number;
-    CONFIRM_ACTIVE: number;
-    DEACTIVATE_ALL: number;
-    DATA: number;
-    SERVER_REDIRECT: number;
-};
-export declare const PDU_TYPE2: {
-    UPDATE: number;
-    CONTROL: number;
-    POINTER: number;
-    INPUT: number;
-    SYNCHRONIZE: number;
-    REFRESH_RECT: number;
-    PLAY_SOUND: number;
-    SUPPRESS_OUTPUT: number;
-    SHUTDOWN_REQUEST: number;
-    SHUTDOWN_DENIED: number;
-    SAVE_SESSION_INFO: number;
-    FONT_LIST: number;
-    FONT_MAP: number;
-    SET_ERROR_INFO: number;
-    MONITOR_LAYOUT: number;
-};
-export declare const UPDATE_TYPE: {
-    ORDERS: number;
-    BITMAP: number;
-    PALETTE: number;
-    SYNCHRONIZE: number;
-};
-export declare const CONTROL_ACTION: {
-    REQUEST_CONTROL: number;
-    GRANTED_CONTROL: number;
-    DETACH: number;
-    COOPERATE: number;
-};
-export declare const INPUT_EVENT: {
-    SYNC: number;
-    SCANCODE: number;
-    UNICODE: number;
-    MOUSE: number;
-    MOUSEX: number;
-};
-export declare const KEYBOARD_FLAG: {
-    EXTENDED: number;
-    DOWN: number;
-    RELEASE: number;
-};
-export declare const POINTER_FLAG: {
-    WHEEL: number;
-    HWHEEL: number;
-    WHEEL_NEGATIVE: number;
-    MOVE: number;
-    DOWN: number;
-    BUTTON1: number;
-    BUTTON2: number;
-    BUTTON3: number;
-};
-/** Translate browser-style wheel direction to the signed RDP rotation flags. */
-export declare function pointerWheelFlags(delta: number, horizontal?: boolean): number;
-export declare const TOGGLE_FLAG: {
-    SCROLL_LOCK: number;
-    NUM_LOCK: number;
-    CAPS_LOCK: number;
-    KANA_LOCK: number;
-};
-export declare function errorInfoMessage(errorInfo: any): any;
-/** TS_SHARECONTROLHEADER + payload. */
-export declare function shareControlPdu(pduType: any, userId: number, payload: Uint8Array): Uint8Array<ArrayBufferLike>;
-/** TS_SHAREDATAHEADER inside a share control PDU of type DATA. */
-export declare function shareDataPdu(shareId: number, userId: number, pduType2: any, payload: Uint8Array): Uint8Array<ArrayBufferLike>;
-/**
- * Client Info PDU (MS-RDPBCGR 2.2.1.11). The credential lengths sit in front of
- * the strings, so the strings are written to a scratch buffer first.
- */
-export declare function clientInfoPdu({ domain, username, password, performanceFlags, autoLogon, remoteApp }: {
-    autoLogon: any;
-    domain: any;
-    password: any;
-    performanceFlags: any;
-    remoteApp?: boolean;
-    username: any;
-}): Uint8Array<ArrayBufferLike>;
-export declare function synchronizePdu(targetUser: any): Uint8Array<ArrayBufferLike>;
-export declare function controlPdu(action: any): Uint8Array<ArrayBufferLike>;
-export declare function fontListPdu(): Uint8Array<ArrayBufferLike>;
-export declare function confirmActivePdu(shareId: number, capabilities: any, capabilityCount: any): Uint8Array<ArrayBufferLike>;
-/** TS_INPUT_PDU_DATA: a batch of input events sharing one header. */
-export declare function inputEventsPdu(events: any): Uint8Array<ArrayBufferLike>;
-export declare function scancodeEvent(scancode: any, pressed: boolean, extended: any): Uint8Array<ArrayBufferLike>;
-export declare function unicodeEvent(codeUnit: any, pressed: boolean): Uint8Array<ArrayBufferLike>;
-export declare function mouseEvent(flags: number, x: number, y: number): Uint8Array<ArrayBufferLike>;
-export declare function extendedMouseEvent(flags: number, x: number, y: number): Uint8Array<ArrayBufferLike>;
-export declare function syncEvent(toggleFlags: number): Uint8Array<ArrayBufferLike>;
-export declare function refreshRectPdu(rects: any): Uint8Array<ArrayBufferLike>;
-export declare function suppressOutputPdu(allowDisplayUpdates: any, rect: any): Uint8Array<ArrayBufferLike>;
-export declare function parseShareControlHeader(bytes: Uint8Array): {
-    totalLength: number;
-    pduType: number;
-    pduSource: number;
-    payload: Uint8Array<ArrayBufferLike>;
-};
-export declare function parseShareDataHeader(bytes: Uint8Array): {
-    shareId: number;
-    pduType2: number;
-    compressedType: number;
-    compressedLength: number;
-    payload: Uint8Array<ArrayBufferLike>;
-};
-export declare function parseDemandActive(bytes: Uint8Array): {
-    shareId: number;
-    capabilities: Uint8Array<ArrayBufferLike>;
-};
-export declare function parseBitmapUpdate(reader: Reader): any[];
-export declare function parsePaletteUpdate(reader: Reader): Uint8Array<ArrayBuffer>;
-export declare function parsePointerUpdate(reader: Reader): {
-    kind: string;
-    cacheIndex: number;
-    hotSpotX: number;
-    hotSpotY: number;
-    width: number;
-    height: number;
-    xorBpp: any;
-    xorMask: Uint8Array<ArrayBuffer>;
-    andMask: Uint8Array<ArrayBuffer>;
-} | {
-    kind: string;
-    x: number;
-    y: number;
-    hidden?: undefined;
-    cacheIndex?: undefined;
-    messageType?: undefined;
-} | {
-    x?: undefined;
-    y?: undefined;
-    kind: string;
-    hidden: boolean;
-    cacheIndex?: undefined;
-    messageType?: undefined;
-} | {
-    x?: undefined;
-    y?: undefined;
-    hidden?: undefined;
-    kind: string;
-    cacheIndex: number;
-    messageType?: undefined;
-} | {
-    x?: undefined;
-    y?: undefined;
-    hidden?: undefined;
-    cacheIndex?: undefined;
-    kind: string;
-    messageType: number;
-};