search

rapid7 / ruby_smb

A native Ruby implementation of the SMB Protocol Family
Other
79 stars 82 forks source link

Add New DCERPC Definitions #191

Closed zeroSteiner closed 2 years ago

zeroSteiner commented 2 years ago

This adds more DCERPC definitions for EFSRPC and RPRN. The EFSRPC definitions will be used by a new PetitPotam module that will be submitted shortly. The RPRN definitions were moved from the PrintNightmare Metasploit module.

Testing this will be easiest with the corresponding module changes.

The RPRN definitions were originally added directly to the module because at the time the RubySMB DCERPC code was in the process of a large refactor/redesign which has since been completed.

zeroSteiner commented 2 years ago

The related PRs to use these definitions have been opened.

zeroSteiner commented 2 years ago

Also, would it be possible to add the related specs for these structures?

Done, RPRN struct specs are in 27033a9bb62c34bb9d9939258ae6aa97654ff38f and EFS struct specs are in 0658f7d80e967fb218af1568f4483cfd01e2c161.

cdelafuente-r7 commented 2 years ago

Great! Thanks for adding specs! I'll go ahead and land it.