search

rapid7 / ruby_smb

A native Ruby implementation of the SMB Protocol Family
Other
80 stars 80 forks source link

Add a couple of MS-DFSNM definitions and functions #233

Closed zeroSteiner closed 2 years ago

zeroSteiner commented 2 years ago

This adds the MS-DFSNM definitions and functions to implement the Dfscoerce attack which is similar to petitpotam.

Testing

Looking through the documentation for NetrDfsAddStdRoot, I was unable to get the function to work with a nil / null pointer comment. From what I can tell the comment must be specified as a string. Also the parameter types are all marked as WCHAR* but the invocation fails when the types are defined as ndr_wide_stringz_ptr.

space-r7 commented 2 years ago

Specs passed and tested successfully with the module. Will go ahead and get this landed.