diff options
Diffstat (limited to 'pkg/goexec/dce/client.go')
-rw-r--r-- | pkg/goexec/dce/client.go | 103 |
1 files changed, 56 insertions, 47 deletions
diff --git a/pkg/goexec/dce/client.go b/pkg/goexec/dce/client.go index e8dadae..2fab71d 100644 --- a/pkg/goexec/dce/client.go +++ b/pkg/goexec/dce/client.go @@ -1,89 +1,98 @@ package dce import ( - "context" - "fmt" - "github.com/oiweiwei/go-msrpc/dcerpc" - "github.com/oiweiwei/go-msrpc/msrpc/epm/epm/v3" - "github.com/rs/zerolog" + "context" + "fmt" + "github.com/RedTeamPentesting/adauth/smbauth" + "github.com/oiweiwei/go-msrpc/dcerpc" + "github.com/oiweiwei/go-msrpc/msrpc/epm/epm/v3" + "github.com/rs/zerolog" ) type Client struct { - Options + Options - conn dcerpc.Conn - hostname string + conn dcerpc.Conn + hostname string } func NewClient() *Client { - return new(Client) + return new(Client) } func (c *Client) String() string { - return ClientName + return ClientName } func (c *Client) Reconnect(ctx context.Context, opts ...dcerpc.Option) (err error) { - c.DcerpcOptions = append(c.DcerpcOptions, opts...) + c.DcerpcOptions = append(c.DcerpcOptions, opts...) - return c.Connect(ctx) + return c.Connect(ctx) } func (c *Client) Dce() (dce dcerpc.Conn) { - return c.conn + return c.conn } func (c *Client) Logger(ctx context.Context) (log zerolog.Logger) { - return zerolog.Ctx(ctx).With(). - Str("client", c.String()).Logger() + return zerolog.Ctx(ctx).With(). + Str("client", c.String()).Logger() } func (c *Client) Connect(ctx context.Context) (err error) { - log := c.Logger(ctx) - ctx = log.WithContext(ctx) + log := c.Logger(ctx) + ctx = log.WithContext(ctx) - var do, eo []dcerpc.Option + var do, eo []dcerpc.Option - do = append(do, c.DcerpcOptions...) - do = append(do, c.authOptions...) + do = append(do, c.DcerpcOptions...) + do = append(do, c.authOptions...) - if !c.NoSign { - do = append(do, dcerpc.WithSign()) - eo = append(eo, dcerpc.WithSign()) - } - if !c.NoSeal { - do = append(do, dcerpc.WithSeal(), dcerpc.WithSecurityLevel(dcerpc.AuthLevelPktPrivacy)) - eo = append(eo, dcerpc.WithSeal(), dcerpc.WithSecurityLevel(dcerpc.AuthLevelPktPrivacy)) - } + if c.Smb { + if smbDialer, err := smbauth.Dialer(ctx, c.Credential, c.Target, &smbauth.Options{}); err != nil { + return fmt.Errorf("parse smb auth: %w", err) + } else { + do = append(do, dcerpc.WithSMBDialer(smbDialer)) + } + } - if !c.NoLog { - do = append(do, dcerpc.WithLogger(log)) - eo = append(eo, dcerpc.WithLogger(log)) - } + if !c.NoSign { + do = append(do, dcerpc.WithSign()) + eo = append(eo, dcerpc.WithSign()) + } + if !c.NoSeal { + do = append(do, dcerpc.WithSeal(), dcerpc.WithSecurityLevel(dcerpc.AuthLevelPktPrivacy)) + eo = append(eo, dcerpc.WithSeal(), dcerpc.WithSecurityLevel(dcerpc.AuthLevelPktPrivacy)) + } - if !c.NoEpm { - log.Debug().Msg("Using endpoint mapper") + if !c.NoLog { + do = append(do, dcerpc.WithLogger(log)) + eo = append(eo, dcerpc.WithLogger(log)) + } - eo = append(eo, c.epmOptions...) - eo = append(eo, c.authOptions...) + if !c.NoEpm { + log.Debug().Msg("Using endpoint mapper") - do = append(do, epm.EndpointMapper(ctx, c.Host, eo...)) - } + eo = append(eo, c.epmOptions...) + eo = append(eo, c.authOptions...) - for _, e := range c.stringBindings { - do = append(do, dcerpc.WithEndpoint(e.String())) - } + do = append(do, epm.EndpointMapper(ctx, c.Host, eo...)) + } - if c.conn, err = dcerpc.Dial(ctx, c.Host, do...); err != nil { + for _, e := range c.stringBindings { + do = append(do, dcerpc.WithEndpoint(e.String())) + } - log.Error().Err(err).Msgf("Failed to connect to %s endpoint", c.String()) - return fmt.Errorf("dial %s: %w", c.String(), err) - } + if c.conn, err = dcerpc.Dial(ctx, c.Host, do...); err != nil { - return + log.Error().Err(err).Msgf("Failed to connect to %s endpoint", c.String()) + return fmt.Errorf("dial %s: %w", c.String(), err) + } + + return } func (c *Client) Close(ctx context.Context) (err error) { - return c.conn.Close(ctx) + return c.conn.Close(ctx) } |