File: //usr/lib/python3/dist-packages/samba/emulate/__pycache__/traffic_packets.cpython-310.pyc
o
�/ap � @ s� d dl Z d dlZd dlZd dlmZ d dlmZmZmZm Z m
Z
m Z d dl m
Z
d dlmZ d dlmZ d dlmZ d dlmZmZmZ d d lmZ d d
lmZm Z d dlZd dl Z d d l m Z d d
� Z!dd� Z"ej#ej$ej%ej&ej'ej(ej)ej*ej+ej,ej-ej.ej/ej0ej1ej2ej3ej4ej5ej6ej7ej8ej9ej:ej;ej<ej=gZ>dd� Z?dd� Z@dd� ZAe@ZBe@ZCe@ZDe@ZEe@ZFe@ZGe@ZHe@ZIdd� ZJdd� ZKdd� ZLe@ZMd d � ZNd d � eOe�D �ZPd d!� ZQd"d#� ZRd$d%� ZSe@ZTe@ZUe@ZVe@ZWd&d'� ZXe@ZYd(d)� ZZe@Z[d*d+� Z\d,d-� Z]e@Z^e@Z_e@Z`e@Zae@Zbe@Zce@Zde@Zee@Zfe@Zge@Zhe@Zie@Zje@Zkd.d/� Zld0d1� Zmd2d3� Zne@Zoe@Zpe@Zqe@Zrd4d5� Zsd6d7� Ztd8d9� Zue@Zve@Zwe@Zxe@Zye@Zze@Z{e@Z|e@Z}d:d;� Z~d<d=� Ze@Z�d>d?� Z�d@dA� Z�dBdC� Z�dDdE� Z�dFdG� Z�dHdI� Z�dJdK� Z�dLdM� Z�dNdO� Z�dPdQ� Z�dRdS� Z�dTdUgZ�dVdW� Z�e@Z�dXdY� Z�dZd[� Z�d\d]� Z�d^d_� Z�d`da� Z�dbdc� Z�ddde� Z�dfdg� Z�e@Z�dhdi� Z�e@Z�e@Z�djdk� Z�dldm� Z�e@Z�dndo� Z�dpdq� Z�dS )r� N)�Net)�security�drsuapi�nbt�lsa�netlogon�ntlmssp)�netr_WorkstationInformation)�dom_sid)�Node)�ndr_pack)�CLI_CRED_NTLMv2_AUTH�MUST_USE_KERBEROS�DONT_USE_KERBEROS)�
NTSTATUSError)� NT_STATUS_OBJECT_NAME_NOT_FOUND�NT_STATUS_NO_SUCH_DOMAIN)�
SCOPE_BASEc C s t �| �jS )N)�ctypes�c_uint32�value)�v� r �?/usr/lib/python3/dist-packages/samba/emulate/traffic_packets.py�uint32* s r c C s* | d u rdS t | jd �}||krdS dS )NFr T)r �args)�runtime�val�err32r r r �check_runtime_error. s r c C s t d| � d S )Nz[37;41;1mWarning: %s[00m)�print)�messager r r �warningX s r" c C s dS �NFr ��packet� conversation�contextr r r � null_packet� s r( c C s8 t |j|jd�}|j|j�d�tjtjB tjB d� dS )N)�creds�lp�realm)�domain�flagsT) r r) r* �finddc�getr �NBT_SERVER_LDAP�
NBT_SERVER_DS�NBT_SERVER_WRITABLE)r% r& r' �netr r r �packet_cldap_3� s ���r4 c C � |j �� tkr td� dS )NzQKerberos disabled but have dcerpc Alter_context_resp indicating Kerberos was usedF)�
user_creds�get_kerberos_stater r" r$ r r r �packet_dcerpc_15� � r8 c C r5 )NzBKerberos enabled but have dcerpc AUTH3 indicating NTLMSSP was usedF)r6 r7 r r" r$ r r r �packet_dcerpc_16� r9 r: c C s |� � \}}tj�||� dS �NT)�guess_a_dns_lookup�dns�resolver�query)r% r& r' �name�rtyper r r � packet_dns_0� s rB c C s |� d� dS r; )�get_drsuapi_connection_pairr$ r r r �packet_drsuapi_0� s
rD c C s g | ] }d |v rt t|��qS )� NAME_FORMAT)�getattrr )�.0�_xr r r �
<listcomp>� s �rI c C sr |� � \}}t�� }|j|_t�� }d|_d|_t� t
�|_ d|_ d|_
d|_d|_|g|_|�|d|�\}}dS )Nr � i� i � T)rC r � DsNameString�server�str�DsNameRequest1� format_flags�format_offered�random�choice� name_formats�format_desired�codepage�language�count�names� DsCrackNames) r% r& r' �drs�handlerY �req�result�ctrr r r �packet_drsuapi_12� s r` c C sd t �� }t j|_d|_|j|_d|_t �� }d� |j
�|_ |g|_ |�
� \}}|�|d|�\}}dS )Nr rK zfoo/{}T)r �DsWriteAccountSpnRequest1� DRSUAPI_DS_SPN_OPERATION_REPLACE� operation�unknown1�user_dn� object_dnrX rL �format�usernamerN � spn_namesrC �DsWriteAccountSpn) r% r& r' r] �spn_namer[ r\ �level�resr r r �packet_drsuapi_13� s rn c C s" |� � \}}|�|� |jd= dS )N���T)rC �DsUnbind�drsuapi_connections)r% r& r' r[ r\ r r r �packet_drsuapi_1 s
rr c C s@ |j �t� |j�t� |j�t� |j�t� |j�t� dS r# )r6 �set_kerberos_stater �user_creds_bad�
machine_creds�machine_creds_badr) r$ r r r �packet_kerberos_ s rw c C s2 | j d dkr|jddd� dS |jddd� dS )N� �simpleT)�newry F)�extra�get_ldap_connectionr$ r r r �
packet_ldap_00 s
�r} c C s |j dd �= dS )Nro F)�ldap_connectionsr$ r r r �
packet_ldap_2@ s r c C sx | j \}}}}}}} |st}|�� }
|�|�} |d u s |dkr*|tkr*|�||| �}|
j| |t|�|�d�dgd� dS )N� �,zpaged_results:1:1000)�
expression�scope�attrs�controlsT)r{ r r| �get_matching_dn�guess_search_filter�search�int�split) r% r& r' r� �dn_sig�filterr� r{ �desc�oid�samdb�dnr r r �
packet_ldap_3G s
�r� c
C s\ |� � }t�� }|�d|tj�}t�� }t�d�t�d�g}tj}d} |� ||||| � dS )Nr� �This Organization�Digest Authenticationr T)
� get_lsarpc_named_pipe_connectionr �ObjectAttribute� OpenPolicy2r �SEC_FLAG_MAXIMUM_ALLOWED�
TransSidArray�String�LSA_LOOKUP_NAMES_ALL� LookupNames)
r% r& r' �c�
objectAttr�
pol_handle�sidsrY rl rX r r r �packet_lsarpc_14� s ��r� c C st |� � }t�� }|�d|tj�}t�� }t�� }td�}||_ |g|_
d|_ t� � } tj
}
d} |�||| |
| � dS )Nr� �S-1-5-7rK r T)r� r r� r� r r� �SidArray�SidPtrr
�sidr� �num_sids�TransNameArrayr� �
LookupSids) r% r& r' r� r� r� r� r� �xrY rl rX r r r �packet_lsarpc_15� s �r� c
C s� |� � }t�� }|�d|tj�}t�|j�}d}z
|�|||� W dS t yG } zt
|t �s5t
|t �s<� W Y d }~dS W Y d }~dS d }~ww )Nr� rK T)
r� r r� r� r r� r
�
domain_sid�QueryTrustedDomainInfoBySidr r r r ) r% r& r' r� r� r� �domsidrl �errorr r r �packet_lsarpc_39� s* � �
�
�
���r� c C sj |� � }t�� }t�� }td�}||_|g|_d|_t�� }tj }d} tj
}
tj } |� |||| |
| � dS )Nr� rK r T)
�get_lsarpc_connectionr r� r� r
r� r� r� �TransNameArray2r� �'LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES�LSA_CLIENT_REVISION_2� LookupSids3) r% r& r' r� r� r� r� rY rl rX �lookup_options�client_revisionr r r �packet_lsarpc_76� s r� c
C sR |� � }t�� }t�d�t�d�g}tj}d}tj}tj} |�|||||| � dS )Nr� r� r T)r� r �TransSidArray3r� r� r� r� � LookupNames4)
r% r& r' r� r� rY rl rX r� r� r r r �packet_lsarpc_77� s �r� c C s. t � }z
|jd|jddd� W dS Y dS )N�ANAME� F)�timeout� broadcastT)r �
query_namerM )r% r& r' �nr r r �
packet_nbns_0� s �r� c C s6 |� � }|�� \}}t� }|�|j|j||d|� dS )N� T)�get_netlogon_connection�get_authenticatorr �netr_LogonGetDomainInforM � netbios_name)r% r& r' r� �auth�succr? r r r �packet_rpc_netlogon_29# s �r� c C s� |� � }|�� \}}d}|j�� �d�}t|�}dd� t�|| �D �} t� � }
||
_
| dd� |D � |
_ |j� |
� |�
|j|j�� |j�� |j||
� dS )Ni z utf-16-lec S �" g | ]
}t |t�r |nt|��qS r ��
isinstancer� �ord�rG r� r r r rI < � " z*packet_rpc_netlogon_30.<locals>.<listcomp>c S r� r r� r� r r r rI ? r� T)r� r� ru � get_password�encode�len�os�urandomr �netr_CryptPassword�length�data�encrypt_netr_crypt_password�netr_ServerPasswordSet2rM � get_username�get_secure_channel_typer� ) r% r& r' r� r� r� �DATA_LEN�newpass�pwd_len�filler�pwdr r r �packet_rpc_netlogon_302 s$ �r� c �( � fdd�}� � |� j� j� j�� _dS )Nc sd � � � }| �� }| �t� t� j� j| �}tj}tj }d}|�
� j � j �
� ||||� | �|� d S �Nr )r� r7 rs r �samlogon_logon_infor, r� r �$NetlogonNetworkTransitiveInformation�NetlogonValidationSamInfo4�netr_LogonSamLogonExrM ru �get_workstation)r) r� � old_state�logon� logon_level�validation_level�
netr_flags�r' r r �connectQ s$
��z'packet_rpc_netlogon_39.<locals>.connectT��with_random_bad_credentialsr6 rt �last_samlogon_bad�r% r& r' r� r r� r �packet_rpc_netlogon_39O s ��r� c C s^ t �� }d|_t �� }t j|_||_t �� }t j|_| |_t �� }t j|_|||g|_ t
|�S )N� ) r � AV_PAIR_LISTrX �AV_PAIR�MsvAvNbComputerName�AvId�Value�MsvAvNbDomainName�MsvAvEOL�pairr )� domain_name�
computer_name� target_info� computername�
domainname�eolr r r �samlogon_targeto s r c C s� t | |�}d}|jt||d�}t�� }dd� |D �|_t�� |_t|d �|j_ dd� |d D �|j_
t� � |_ |�
� \}}||j j_||j j_|�� |j j_|S )Ns abcdefgh)r- � challenger� c S r� r r� r� r r r rI � r� z'samlogon_logon_info.<locals>.<listcomp>� nt_responsec S r� r r� r� r r r rI � r� )r �get_ntlm_responser
r �netr_NetworkInfor �netr_ChallengeResponse�ntr� r� r� �netr_IdentityInfo�
identity_info�get_ntlm_username_domainr� �string� account_namer� � workstation) r� r� r) �target_info_blobr �responser� rh r, r r r r� � s"
�
r� c C s( |� � }|�|jtjtjB tjB � dS r; )r� � netr_DsrEnumerateDomainTrustsrM r �NETR_TRUST_FLAG_IN_FOREST�NETR_TRUST_FLAG_OUTBOUND�NETR_TRUST_FLAG_INBOUND�r% r& r' r� r r r �packet_rpc_netlogon_40� s ���r c r� )Nc
st � � � }� �� \}}| �� }| �t� t� j� j| �}tj }tj
}d}|� � j � j
�� ||||||� | �|� d S r� )r� r� r7 rs r r� r, r� r r� r� �netr_LogonSamLogonWithFlagsrM ru r� ) r) r� r� r� r� r� r� r� r� r� r r r� � s*
�� z'packet_rpc_netlogon_45.<locals>.connectTr� r� r r� r �packet_rpc_netlogon_45� s ��r c C � |� � }|�� dS r; ��get_samr_context�
get_handler r r r �
packet_samr_0� � r c C s� |� � }|�� }|jd ur|�|j� d |_dS |jd ur(|�|j� d |_dS |jd ur;|�|j� d |_d |_dS |jd urL|�|j� d |_d |_dS r; ) r �get_connection� user_handle�Close� group_handle�
domain_handle�ridsr\ r� �r% r& r' r� �sr r r �
packet_samr_1� s(
�
�
� r( c C s8 |� � }|�� }|jd u rt| ||� |�|jd� dS �NrK T)r r r! �packet_samr_34�
QuerySecurityr& r r r �
packet_samr_3� s
r, c C s: |� � }|�� }|�� }t�� }|j|_|�||�|_dS r; ) r r r r r� r, r
� LookupDomainr� )r% r& r' r� r' �h�dr r r �
packet_samr_5� s r0 c C s* |� � }|�� }|�� }|�|dd� dS �Nr T)r r r � EnumDomains�r% r& r' r� r' r. r r r �
packet_samr_6� s
r4 c C sF |� � }|�� }|�� }|jd u rt| ||� |�|tj|j�|_dS r; ) r r r r� r0 �
OpenDomainr r� r$ r3 r r r �
packet_samr_7 s
�r6 � � c C sB |� � }|�� }|jd u rt| ||� t�t�}|�|j|� dS r; )r r r$ r6 rR rS � SAMR_QUERY_DOMAIN_INFO_LEVELS�QueryDomainInfo�r% r& r' r� r' rl r r r �
packet_samr_8 s
r< c C s: |� � }|�� }|jd u rt| ||� |�|jdd� dS )N�d r T)r r r$ r6 �EnumDomainAliasesr& r r r �packet_samr_15' s
r? c C sX |� � }|�� }|jd u rt| ||� t�� }t�� }|j|_|g|_ |�
|j|� dS r; ) r r r$ r6 r r� r� r� r� r� �GetAliasMembership)r% r& r' r� r' r� r� r r r �packet_samr_162 s
rA c C sH |� � }|�� }|jd u rt| ||� t�|j�}|�|j|g�|_dS r; ) r r r$ r6 r r� rh r� r% )r% r& r' r� r' r@ r r r �packet_samr_17A s
rB c C s^ |� � }|�� }|jd u rt| ||� g }|jD ]
}|jD ]}|�|� q q|�|j|� dS r; )r r r% rB �ids�append�
LookupRidsr$ )r% r& r' r� r' r% �r�ir r r �packet_samr_18M s
�rH c C sB |� � }|�� }|jd u rt| ||� d}|�|jtj|�|_dS )Ni T)r r r$ r6 � OpenGroupr r� r# )r% r& r' r� r' �ridr r r �packet_samr_19[ s
�rK c C �6 |� � }|�� }|jd u rt| ||� |�|j� dS r; )r r r# rK �QueryGroupMemberr& r r r �packet_samr_25i �
rN c C sJ |� � }|�� }|jd u rt| ||� |�|jtj|jd jd �|_ dS r1 )
r r r% rB �OpenUserr$ r r� rC r! r& r r r r* s s
�r* c C s< |� � }|�� }|jd u rt| ||� d}|�|j|� dS r) )r r r! r* �
QueryUserInfor; r r r �packet_samr_36 s
rR c C rL r; )r r r! r* �GetGroupsForUserr& r r r �packet_samr_39� rO rT c C r r; r r r r r �packet_samr_57� r rU c C r r; r r r r r �packet_samr_64� r rV c C s, |� � }d|j }d}d}|�|||� dS )N�\\zIPC$rK T)�get_srvsvc_connectionrM �NetShareGetInfo)r% r& r' r' �
server_unc�
share_namerl r r r �packet_srvsvc_16� s
r\ c C s& |� � }d|j }d}|�||� dS )a* NetSrvGetInfo
FIXME: Level changed from 102 to 101 here, to bypass Windows error.
Level 102 will cause WERR_ACCESS_DENIED error against Windows, because:
> If the level is 102 or 502, the Windows implementation checks whether
> the caller is a member of one of the groups previously mentioned or
> is a member of the Power Users local group.
It passed against Samba since this check is not implemented by Samba yet.
refer to:
https://msdn.microsoft.com/en-us/library/cc247297.aspx#Appendix_A_80
rW �e T)rX rM �
NetSrvGetInfo)r% r& r' �srvsvcrZ rl r r r �packet_srvsvc_21� s
r` )�r� r rR � samba.netr � samba.dcerpcr r r r r r �samba.dcerpc.netlogonr �samba.dcerpc.securityr
�
samba.netbiosr � samba.ndrr �samba.credentialsr
r r �sambar �samba.ntstatusr r � dns.resolverr= �ldbr r r � DRSUAPI_DS_NAME_FORMAT_FQDN_1779�"DRSUAPI_DS_NAME_FORMAT_NT4_ACCOUNT� DRSUAPI_DS_NAME_FORMAT_DISPLAY�DRSUAPI_DS_NAME_FORMAT_GUID� DRSUAPI_DS_NAME_FORMAT_CANONICAL�%DRSUAPI_DS_NAME_FORMAT_USER_PRINCIPAL�#DRSUAPI_DS_NAME_FORMAT_CANONICAL_EX�(DRSUAPI_DS_NAME_FORMAT_SERVICE_PRINCIPAL�)DRSUAPI_DS_NAME_FORMAT_SID_OR_SID_HISTORY�!DRSUAPI_DS_NAME_FORMAT_DNS_DOMAIN�'DRSUAPI_DS_NAME_FORMAT_UPN_AND_ALTSECID�6DRSUAPI_DS_NAME_FORMAT_NT4_ACCOUNT_NAME_SANS_DOMAIN_EX�2DRSUAPI_DS_NAME_FORMAT_LIST_GLOBAL_CATALOG_SERVERS�$DRSUAPI_DS_NAME_FORMAT_UPN_FOR_LOGON�4DRSUAPI_DS_NAME_FORMAT_LIST_SERVERS_WITH_DCS_IN_SITE�&DRSUAPI_DS_NAME_FORMAT_STRING_SID_NAME�3DRSUAPI_DS_NAME_FORMAT_ALT_SECURITY_IDENTITIES_NAME� DRSUAPI_DS_NAME_FORMAT_LIST_NCS�#DRSUAPI_DS_NAME_FORMAT_LIST_DOMAINS�&DRSUAPI_DS_NAME_FORMAT_MAP_SCHEMA_GUID�3DRSUAPI_DS_NAME_FORMAT_NT4_ACCOUNT_NAME_SANS_DOMAIN�!DRSUAPI_DS_NAME_FORMAT_LIST_ROLES�+DRSUAPI_DS_NAME_FORMAT_LIST_INFO_FOR_SERVER�6DRSUAPI_DS_NAME_FORMAT_LIST_SERVERS_FOR_DOMAIN_IN_SITE�+DRSUAPI_DS_NAME_FORMAT_LIST_DOMAINS_IN_SITE�+DRSUAPI_DS_NAME_FORMAT_LIST_SERVERS_IN_SITE�!DRSUAPI_DS_NAME_FORMAT_LIST_SITESrT r" r( r4 �packet_cldap_5�packet_dcerpc_0�packet_dcerpc_2�packet_dcerpc_3�packet_dcerpc_11�packet_dcerpc_12�packet_dcerpc_13�packet_dcerpc_14r8 r: rB � packet_dns_1rD �dir� NAME_FORMATSr` rn rr �packet_drsuapi_2�packet_drsuapi_3�packet_drsuapi_4� packet_epm_3rw � packet_ldap_r} �
packet_ldap_1r r� �
packet_ldap_4�
packet_ldap_5�
packet_ldap_6�
packet_ldap_7�
packet_ldap_8�
packet_ldap_9�packet_ldap_16�packet_lsarpc_0�packet_lsarpc_1�packet_lsarpc_2�packet_lsarpc_3�packet_lsarpc_4�packet_lsarpc_5�packet_lsarpc_6r� r� r� �packet_lsarpc_40�packet_lsarpc_43�packet_lsarpc_44�packet_lsarpc_68r� r� r� �
packet_nbns_1�packet_rpc_netlogon_0�packet_rpc_netlogon_1�packet_rpc_netlogon_4�packet_rpc_netlogon_14�packet_rpc_netlogon_15�packet_rpc_netlogon_21�packet_rpc_netlogon_26r� r� �packet_rpc_netlogon_34r� r r� r r r r( r, r0 r4 r6 r9 r< �packet_samr_14r? rA rB rH rK rN r* rR �packet_samr_37rT �packet_samr_40�packet_samr_44rU rV �packet_samr_68r\ r` r r r r �<module> s � *
#