Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/emulate/__pycache__/traffic_packets.cpython-36.opt-1.pyc
Ðазад
3 �I�dp � @ s� d dl Z d dlZd dlZd dlmZ d dlmZmZmZm Z m Z m Z d dl m Z d dlmZ d dlmZ d dlmZ d dlmZmZmZ d d lmZ d d lmZm Z d dlZd dl Z d d l m Z d d � Z!dd� Z"ej#ej$ej%ej&ej'ej(ej)ej*ej+ej,ej-ej.ej/ej0ej1ej2ej3ej4ej5ej6ej7ej8ej9ej:ej;ej<ej=gZ>dd� Z?dd� Z@dd� ZAe@ZBe@ZCe@ZDe@ZEe@ZFe@ZGe@ZHe@ZIdd� ZJdd� ZKdd� ZLe@ZMd d � ZNd d � eOe�D �ZPd d!� ZQd"d#� ZRd$d%� ZSe@ZTe@ZUe@ZVe@ZWd&d'� ZXe@ZYd(d)� ZZe@Z[d*d+� Z\d,d-� Z]e@Z^e@Z_e@Z`e@Zae@Zbe@Zce@Zde@Zee@Zfe@Zge@Zhe@Zie@Zje@Zkd.d/� Zld0d1� Zmd2d3� Zne@Zoe@Zpe@Zqe@Zrd4d5� Zsd6d7� Ztd8d9� Zue@Zve@Zwe@Zxe@Zye@Zze@Z{e@Z|e@Z}d:d;� Z~d<d=� Ze@Z�d>d?� Z�d@dA� Z�dBdC� Z�dDdE� Z�dFdG� Z�dHdI� Z�dJdK� Z�dLdM� Z�dNdO� Z�dPdQ� Z�dRdS� Z�dTdUgZ�dVdW� Z�e@Z�dXdY� Z�dZd[� Z�d\d]� Z�d^d_� Z�d`da� Z�dbdc� Z�ddde� Z�dfdg� Z�e@Z�dhdi� Z�e@Z�e@Z�djdk� Z�dldm� Z�e@Z�dndo� Z�dpdq� Z�dS )r� N)�Net)�security�drsuapi�nbt�lsa�netlogon�ntlmssp)�netr_WorkstationInformation)�dom_sid)�Node)�ndr_pack)�CLI_CRED_NTLMv2_AUTH�MUST_USE_KERBEROS�DONT_USE_KERBEROS)� NTSTATUSError)� NT_STATUS_OBJECT_NAME_NOT_FOUND�NT_STATUS_NO_SUCH_DOMAIN)� SCOPE_BASEc C s t j| �jS )N)�ctypesZc_uint32�value)�v� r �'/usr/lib64/python3.6/traffic_packets.py�uint32* s r c C s* | d kr dS t | jd �}||kr&dS dS )NFr T)r �args)Zruntime�valZerr32r r r �check_runtime_error. s r c C s t d| � d S )Nz[37;41;1mWarning: %s[00m)�print)�messager r r �warningX s r c C s dS )NFr )�packet� conversation�contextr r r � null_packet� s r# c C s8 t |j|jd�}|j|jjd�tjtjB tjB d� dS )N)�creds�lpZrealm)�domain�flagsT) r r$ r% Zfinddc�getr ZNBT_SERVER_LDAPZ NBT_SERVER_DSZNBT_SERVER_WRITABLE)r r! r" Znetr r r �packet_cldap_3� s r) c C s |j j� tkrtd� dS )NzQKerberos disabled but have dcerpc Alter_context_resp indicating Kerberos was usedF)� user_creds�get_kerberos_stater r )r r! r" r r r �packet_dcerpc_15� s r, c C s |j j� tkrtd� dS )NzBKerberos enabled but have dcerpc AUTH3 indicating NTLMSSP was usedF)r* r+ r r )r r! r" r r r �packet_dcerpc_16� s r- c C s |j � \}}tjj||� dS )NT)Zguess_a_dns_lookup�dnsZresolver�query)r r! r" �nameZrtyper r r � packet_dns_0� s r1 c C s |j d� dS )NT)�get_drsuapi_connection_pair)r r! r" r r r �packet_drsuapi_0� s r3 c C s g | ]}d |krt t|��qS )Z NAME_FORMAT)�getattrr )�.0Z_xr r r � <listcomp>� s r6 c C sr |j � \}}tj� }|j|_tj� }d|_d|_tj t �|_ d|_ d|_ d|_d|_|g|_|j|d|�\}}dS )Nr � i� i � T)r2 r � DsNameString�server�strZDsNameRequest1Z format_flagsZformat_offered�random�choice� name_formatsZformat_desiredZcodepageZlanguage�count�namesZ DsCrackNames) r r! r" �drs�handler@ �req�resultZctrr r r �packet_drsuapi_12� s rE c C sd t j� }t j|_d|_|j|_d|_t j� }dj |j �|_ |g|_ |j � \}}|j|d|�\}}dS )Nr r8 zfoo/{}T)r ZDsWriteAccountSpnRequest1Z DRSUAPI_DS_SPN_OPERATION_REPLACEZ operationZunknown1Zuser_dnZ object_dnr? r9 �format�usernamer; Z spn_namesr2 ZDsWriteAccountSpn) r r! r" rC Zspn_namerA rB �level�resr r r �packet_drsuapi_13� s rJ c C s" |j � \}}|j|� |jd= dS )Nr8 T���)r2 ZDsUnbindZdrsuapi_connections)r r! r" rA rB r r r �packet_drsuapi_1 s rL c C s@ |j jt� |jjt� |jjt� |jjt� |jjt� dS )NF)r* �set_kerberos_stater �user_creds_bad� machine_credsZmachine_creds_badr$ )r r! r" r r r �packet_kerberos_ s rP c C s0 | j d dkr |jddd� n|jddd� dS )N� �simpleT)�newrR F)�extra�get_ldap_connection)r r! r" r r r � packet_ldap_00 s rV c C s |j dd �= dS )Nr8 FrK )Zldap_connections)r r! r" r r r � packet_ldap_2@ s rW c C sx | j \}}}}}}} |s t}|j� } |j|�} |d ks>|dkrT|tkrT|j||| �}| j| |t|�|jd�dgd� dS )N� �,zpaged_results:1:1000)Z expression�scope�attrsZcontrolsT)rT r rU Zget_matching_dnZguess_search_filter�search�int�split) r r! r" rZ Zdn_sig�filterr[ rT ZdescZoidZsamdbZdnr r r � packet_ldap_3G s r` c C s\ |j � }tj� }|jd|tj�}tj� }tjd�tjd�g}tj}d} |j ||||| � dS )NrX zThis OrganizationzDigest Authenticationr T) � get_lsarpc_named_pipe_connectionr �ObjectAttribute� OpenPolicy2r �SEC_FLAG_MAXIMUM_ALLOWEDZ TransSidArray�String�LSA_LOOKUP_NAMES_ALL� LookupNames) r r! r" �c� objectAttr� pol_handle�sidsr@ rH r? r r r �packet_lsarpc_14� s rl c C st |j � }tj� }|jd|tj�}tj� }tj� }td�}||_ |g|_ d|_ tj � } tj } d} |j||| | | � dS )NrX zS-1-5-7r8 r T)ra r rb rc r rd �SidArray�SidPtrr �sidrk �num_sidsZTransNameArrayrf Z LookupSids) r r! r" rh ri rj rk ro �xr@ rH r? r r r �packet_lsarpc_15� s rr c C s� |j � }tj� }|jd|tj�}tj|j�}d}y|j|||� W n< t k r~ } z t |t � rnt |t � rn� W Y d d }~X nX dS )NrX r8 T) ra r rb rc r rd r � domain_sidZQueryTrustedDomainInfoBySidr r r r ) r r! r" rh ri rj ZdomsidrH �errorr r r �packet_lsarpc_39� s ru c C sj |j � }tj� }tj� }td�}||_|g|_d|_tj� }tj }d} tj } tj } |j |||| | | � dS )NzS-1-5-7r8 r T) �get_lsarpc_connectionr rm rn r ro rk rp ZTransNameArray2rf �'LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES�LSA_CLIENT_REVISION_2Z LookupSids3) r r! r" rh rk ro rq r@ rH r? �lookup_options�client_revisionr r r �packet_lsarpc_76� s r{ c C sR |j � }tj� }tjd�tjd�g}tj}d}tj}tj} |j|||||| � dS )NzThis OrganizationzDigest Authenticationr T)rv r ZTransSidArray3re rf rw rx Z LookupNames4) r r! r" rh rk r@ rH r? ry rz r r r �packet_lsarpc_77� s r| c C s0 t � }y|jd|jddd� W n Y nX dS )NZANAME� F)ZtimeoutZ broadcastT)r Z query_namer: )r r! r" �nr r r � packet_nbns_0� s r c C s6 |j � }|j� \}}t� }|j|j|j||d|� dS )N� T)�get_netlogon_connection�get_authenticatorr Znetr_LogonGetDomainInfor: � netbios_name)r r! r" rh �auth�succr/ r r r �packet_rpc_netlogon_29# s r� c C s� |j � }|j� \}}d}|jj� jd�}t|�}dd� tj|| �D �} tj � } || _ | dd� |D � | _ |jj | � |j |j|jj� |jj� |j|| � dS )Ni z utf-16-lec S s" g | ]}t |t�r|nt|��qS r )� isinstancer] �ord)r5 rq r r r r6 < s z*packet_rpc_netlogon_30.<locals>.<listcomp>c S s" g | ]}t |t�r|nt|��qS r )r� r] r� )r5 rq r r r r6 ? s T)r� r� rO Z get_password�encode�len�os�urandomr Znetr_CryptPassword�length�dataZencrypt_netr_crypt_passwordZnetr_ServerPasswordSet2r: Z get_usernameZget_secure_channel_typer� ) r r! r" rh r� r� ZDATA_LENZnewpassZpwd_lenZfiller�pwdr r r �packet_rpc_netlogon_302 s" r� c s( � fdd�}� j |� j� j� j�� _dS )Nc sd � j � }| j� }| jt� t� j� j| �}tj}tj }d}|j � j � j j � ||||� | j|� d S )Nr )r� r+ rM r �samlogon_logon_infor& r� r �$NetlogonNetworkTransitiveInformation�NetlogonValidationSamInfo4Znetr_LogonSamLogonExr: rO �get_workstation)r$ rh � old_state�logon� logon_level�validation_level� netr_flags)r" r r �connectQ s z'packet_rpc_netlogon_39.<locals>.connectT)�with_random_bad_credentialsr* rN �last_samlogon_bad)r r! r" r� r )r" r �packet_rpc_netlogon_39O s r� c C s^ t j� }d|_t j� }t j|_||_t j� }t j|_| |_t j� }t j|_|||g|_ t |�S )N� ) r Z AV_PAIR_LISTr? ZAV_PAIRZMsvAvNbComputerNameZAvIdZValueZMsvAvNbDomainNameZMsvAvEOLZpairr )� domain_name� computer_name� target_infoZ computernameZ domainnameZeolr r r �samlogon_targeto s r� c C s� t | |�}d}|jt||d�}tj� }dd� |D �|_tj� |_t|d �|j_ dd� |d D �|j_ tj � |_ |j � \}}||j j_||j j_|j� |j j_|S )Ns abcdefgh)r' � challenger� c S s" g | ]}t |t�r|nt|��qS r )r� r] r� )r5 rq r r r r6 � s z'samlogon_logon_info.<locals>.<listcomp>Z nt_responsec S s" g | ]}t |t�r|nt|��qS r )r� r] r� )r5 rq r r r r6 � s )r� Zget_ntlm_responser r Znetr_NetworkInfor� Znetr_ChallengeResponse�ntr� r� r� Znetr_IdentityInfoZ identity_infoZget_ntlm_username_domainr� �stringZ account_namer� Z workstation) r� r� r$ Ztarget_info_blobr� Zresponser� rG r& r r r r� � s r� c C s( |j � }|j|jtjtjB tjB � dS )NT)r� Z netr_DsrEnumerateDomainTrustsr: r ZNETR_TRUST_FLAG_IN_FORESTZNETR_TRUST_FLAG_OUTBOUNDZNETR_TRUST_FLAG_INBOUND)r r! r" rh r r r �packet_rpc_netlogon_40� s r� c s( � fdd�}� j |� j� j� j�� _dS )Nc st � j � }� j� \}}| j� }| jt� t� j� j| �}tj }tj }d}|j � j � j j� ||||||� | j|� d S )Nr )r� r� r+ rM r r� r& r� r r� r� Znetr_LogonSamLogonWithFlagsr: rO r� ) r$ rh r� r� r� r� r� r� r� )r" r r r� � s& z'packet_rpc_netlogon_45.<locals>.connectT)r� r* rN r� )r r! r" r� r )r" r �packet_rpc_netlogon_45� s r� c C s |j � }|j� dS )NT)�get_samr_context� get_handle)r r! r" rh r r r � packet_samr_0� s r� c C s� |j � }|j� }|jd k r.|j|j� d |_nd|jd k rL|j|j� d |_nF|jd k rp|j|j� d |_d |_n"|jd k r�|j|j� d |_d |_dS )NT) r� �get_connection� user_handleZClose� group_handle� domain_handle�ridsrB rs )r r! r" rh �sr r r � packet_samr_1� s" r� c C s8 |j � }|j� }|jd kr&t| ||� |j|jd� dS )Nr8 T)r� r� r� �packet_samr_34Z QuerySecurity)r r! r" rh r� r r r � packet_samr_3� s r� c C s: |j � }|j� }|j� }tj� }|j|_|j||�|_dS )NT) r� r� r� r re r& r� Z LookupDomainrs )r r! r" rh r� �h�dr r r � packet_samr_5� s r� c C s* |j � }|j� }|j� }|j|dd� dS )Nr T)r� r� r� Z EnumDomains)r r! r" rh r� r� r r r � packet_samr_6� s r� c C sF |j � }|j� }|j� }|jd kr.t| ||� |j|tj|j�|_dS )NT) r� r� r� rs r� Z OpenDomainr rd r� )r r! r" rh r� r� r r r � packet_samr_7 s r� � � c C sB |j � }|j� }|jd kr&t| ||� tjt�}|j|j|� dS )NT)r� r� r� r� r< r= � SAMR_QUERY_DOMAIN_INFO_LEVELSZQueryDomainInfo)r r! r" rh r� rH r r r � packet_samr_8 s r� c C s: |j � }|j� }|jd kr&t| ||� |j|jdd� dS )N�d r T)r� r� r� r� ZEnumDomainAliases)r r! r" rh r� r r r �packet_samr_15' s r� c C sX |j � }|j� }|jd kr&t| ||� tj� }tj� }|j|_|g|_ |j |j|� dS )NT) r� r� r� r� r rm rn rs ro rk ZGetAliasMembership)r r! r" rh r� rk ro r r r �packet_samr_162 s r� c C sH |j � }|j� }|jd kr&t| ||� tj|j�}|j|j|g�|_dS )NT) r� r� r� r� r re rG rg r� )r r! r" rh r� r0 r r r �packet_samr_17A s r� c C sf |j � }|j� }|jd kr&t| ||� g }x(|jD ] }x|jD ]}|j|� q>W q2W |j|j|� dS )NT)r� r� r� r� �ids�appendZ LookupRidsr� )r r! r" rh r� r� �r�ir r r �packet_samr_18M s r� c C sB |j � }|j� }|jd kr&t| ||� d}|j|jtj|�|_dS )Ni T)r� r� r� r� Z OpenGroupr rd r� )r r! r" rh r� Zridr r r �packet_samr_19[ s r� c C s6 |j � }|j� }|jd kr&t| ||� |j|j� dS )NT)r� r� r� r� ZQueryGroupMember)r r! r" rh r� r r r �packet_samr_25i s r� c C sJ |j � }|j� }|jd kr&t| ||� |j|jtj|jd jd �|_ dS )Nr T) r� r� r� r� ZOpenUserr� r rd r� r� )r r! r" rh r� r r r r� s s r� c C s< |j � }|j� }|jd kr&t| ||� d}|j|j|� dS )Nr8 T)r� r� r� r� Z QueryUserInfo)r r! r" rh r� rH r r r �packet_samr_36 s r� c C s6 |j � }|j� }|jd kr&t| ||� |j|j� dS )NT)r� r� r� r� ZGetGroupsForUser)r r! r" rh r� r r r �packet_samr_39� s r� c C s |j � }|j� dS )NT)r� r� )r r! r" rh r r r �packet_samr_57� s r� c C s |j � }|j� dS )NT)r� r� )r r! r" rh r r r �packet_samr_64� s r� c C s, |j � }d|j }d}d}|j|||� dS )Nz\\zIPC$r8 T)�get_srvsvc_connectionr: ZNetShareGetInfo)r r! r" r� � server_uncZ share_namerH r r r �packet_srvsvc_16� s r� c C s& |j � }d|j }d}|j||� dS )a* NetSrvGetInfo FIXME: Level changed from 102 to 101 here, to bypass Windows error. Level 102 will cause WERR_ACCESS_DENIED error against Windows, because: > If the level is 102 or 502, the Windows implementation checks whether > the caller is a member of one of the groups previously mentioned or > is a member of the Power Users local group. It passed against Samba since this check is not implemented by Samba yet. refer to: https://msdn.microsoft.com/en-us/library/cc247297.aspx#Appendix_A_80 z\\�e T)r� r: Z NetSrvGetInfo)r r! r" Zsrvsvcr� rH r r r �packet_srvsvc_21� s r� )�r� r r< Z samba.netr Z samba.dcerpcr r r r r r Zsamba.dcerpc.netlogonr Zsamba.dcerpc.securityr Z samba.netbiosr Z samba.ndrr Zsamba.credentialsr r r Zsambar Zsamba.ntstatusr r Z dns.resolverr. Zldbr r r Z DRSUAPI_DS_NAME_FORMAT_FQDN_1779Z"DRSUAPI_DS_NAME_FORMAT_NT4_ACCOUNTZ DRSUAPI_DS_NAME_FORMAT_DISPLAYZDRSUAPI_DS_NAME_FORMAT_GUIDZ DRSUAPI_DS_NAME_FORMAT_CANONICALZ%DRSUAPI_DS_NAME_FORMAT_USER_PRINCIPALZ#DRSUAPI_DS_NAME_FORMAT_CANONICAL_EXZ(DRSUAPI_DS_NAME_FORMAT_SERVICE_PRINCIPALZ)DRSUAPI_DS_NAME_FORMAT_SID_OR_SID_HISTORYZ!DRSUAPI_DS_NAME_FORMAT_DNS_DOMAINZ'DRSUAPI_DS_NAME_FORMAT_UPN_AND_ALTSECIDZ6DRSUAPI_DS_NAME_FORMAT_NT4_ACCOUNT_NAME_SANS_DOMAIN_EXZ2DRSUAPI_DS_NAME_FORMAT_LIST_GLOBAL_CATALOG_SERVERSZ$DRSUAPI_DS_NAME_FORMAT_UPN_FOR_LOGONZ4DRSUAPI_DS_NAME_FORMAT_LIST_SERVERS_WITH_DCS_IN_SITEZ&DRSUAPI_DS_NAME_FORMAT_STRING_SID_NAMEZ3DRSUAPI_DS_NAME_FORMAT_ALT_SECURITY_IDENTITIES_NAMEZ DRSUAPI_DS_NAME_FORMAT_LIST_NCSZ#DRSUAPI_DS_NAME_FORMAT_LIST_DOMAINSZ&DRSUAPI_DS_NAME_FORMAT_MAP_SCHEMA_GUIDZ3DRSUAPI_DS_NAME_FORMAT_NT4_ACCOUNT_NAME_SANS_DOMAINZ!DRSUAPI_DS_NAME_FORMAT_LIST_ROLESZ+DRSUAPI_DS_NAME_FORMAT_LIST_INFO_FOR_SERVERZ6DRSUAPI_DS_NAME_FORMAT_LIST_SERVERS_FOR_DOMAIN_IN_SITEZ+DRSUAPI_DS_NAME_FORMAT_LIST_DOMAINS_IN_SITEZ+DRSUAPI_DS_NAME_FORMAT_LIST_SERVERS_IN_SITEZ!DRSUAPI_DS_NAME_FORMAT_LIST_SITESr> r r# r) Zpacket_cldap_5Zpacket_dcerpc_0Zpacket_dcerpc_2Zpacket_dcerpc_3Zpacket_dcerpc_11Zpacket_dcerpc_12Zpacket_dcerpc_13Zpacket_dcerpc_14r, r- r1 Z packet_dns_1r3 �dirZ NAME_FORMATSrE rJ rL Zpacket_drsuapi_2Zpacket_drsuapi_3Zpacket_drsuapi_4Z packet_epm_3rP Z packet_ldap_rV Z packet_ldap_1rW r` Z packet_ldap_4Z packet_ldap_5Z packet_ldap_6Z packet_ldap_7Z packet_ldap_8Z packet_ldap_9Zpacket_ldap_16Zpacket_lsarpc_0Zpacket_lsarpc_1Zpacket_lsarpc_2Zpacket_lsarpc_3Zpacket_lsarpc_4Zpacket_lsarpc_5Zpacket_lsarpc_6rl rr ru Zpacket_lsarpc_40Zpacket_lsarpc_43Zpacket_lsarpc_44Zpacket_lsarpc_68r{ r| r Z packet_nbns_1Zpacket_rpc_netlogon_0Zpacket_rpc_netlogon_1Zpacket_rpc_netlogon_4Zpacket_rpc_netlogon_14Zpacket_rpc_netlogon_15Zpacket_rpc_netlogon_21Zpacket_rpc_netlogon_26r� r� Zpacket_rpc_netlogon_34r� r� r� r� r� r� r� r� r� r� r� r� r� Zpacket_samr_14r� r� r� r� r� r� r� r� Zpacket_samr_37r� Zpacket_samr_40Zpacket_samr_44r� r� Zpacket_samr_68r� r� r r r r �<module> s * #
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка