+funcs: remoteCreateInstance, remoteActivation

pkg/goexec/dcom/activation.go

@@ -0,0 +1,101 @@
+package dcomexec
+
+import (
+	"context"
+	"fmt"
+
+	googleUUID "github.com/google/uuid"
+	"github.com/oiweiwei/go-msrpc/dcerpc"
+	"github.com/oiweiwei/go-msrpc/midl/uuid"
+	"github.com/oiweiwei/go-msrpc/msrpc/dcom"
+	"github.com/oiweiwei/go-msrpc/msrpc/dcom/iactivation/v0"
+	"github.com/oiweiwei/go-msrpc/msrpc/dcom/iremotescmactivator/v0"
+	"github.com/oiweiwei/go-msrpc/msrpc/dtyp"
+	"github.com/oiweiwei/go-msrpc/msrpc/erref/hresult"
+)
+
+// remoteCreateInstance creates a new instance of a COM class on a remote machine using RemoteCreateInstance (opnum 4).
+func remoteCreateInstance(ctx context.Context, conn dcerpc.Conn, cls *uuid.UUID, iids []*dcom.IID) (opts []dcerpc.Option, err error) {
+	if cls == nil {
+		return nil, fmt.Errorf("class ID is nil")
+	}
+	ap := &dcom.ActivationProperties{
+		DestinationContext: 2,
+		Properties: []dcom.ActivationProperty{
+			&dcom.InstantiationInfoData{
+				ClassID:          (*dcom.ClassID)(dtyp.GUIDFromUUID(cls)),
+				IID:              iids,
+				ClientCOMVersion: ComVersion,
+			},
+			&dcom.ActivationContextInfoData{},
+			&dcom.LocationInfoData{},
+			&dcom.SCMRequestInfoData{
+				RemoteRequest: &dcom.CustomRemoteRequestSCMInfo{
+					RequestedProtocolSequences: []uint16{7, 15}, // ncacn_ip_tcp, ncacn_np
+				},
+			},
+		},
+	}
+	apin, err := ap.ActivationPropertiesIn()
+	if err != nil {
+		return nil, err
+	}
+	act, err := iremotescmactivator.NewRemoteSCMActivatorClient(ctx, conn)
+	if err != nil {
+		return nil, err
+	}
+	cr, err := act.RemoteCreateInstance(ctx, &iremotescmactivator.RemoteCreateInstanceRequest{
+		ORPCThis: &dcom.ORPCThis{
+			Version: ComVersion,
+			CID:     (*dcom.CID)(dtyp.GUIDFromUUID(uuid.MustParse(googleUUID.NewString()))), // Random CID
+		},
+		ActPropertiesIn: apin,
+	})
+	if err != nil {
+		return nil, err
+	}
+	apout := new(dcom.ActivationProperties)
+	if err = apout.Parse(cr.ActPropertiesOut); err != nil {
+		return nil, err
+	}
+	if si := apout.SCMReplyInfoData(); si != nil {
+		opts = append(opts, normalizeStringBindings(si.RemoteReply.OXIDBindings.GetStringBindings())...)
+	} else {
+		return nil, fmt.Errorf("remote create instance response: SCMReplyInfoData is nil")
+	}
+	if pi := apout.PropertiesOutInfo(); pi != nil && pi.InterfaceData != nil && len(pi.InterfaceData) > 0 {
+		opts = append(opts, dcom.WithIPID(pi.InterfaceData[0].GetStandardObjectReference().Std.IPID))
+	} else {
+		return nil, fmt.Errorf("remote create instance response: PropertiesOutInfo is nil")
+	}
+	return opts, err
+}
+
+// remoteActivation activates a COM class on a remote machine using RemoteActivation (opnum 0).
+func remoteActivation(ctx context.Context, conn dcerpc.Conn, cls *uuid.UUID, iids []*dcom.IID) (opts []dcerpc.Option, err error) {
+	if cls == nil {
+		return nil, fmt.Errorf("class ID is nil")
+	}
+	ac, err := iactivation.NewActivationClient(ctx, conn)
+	if err != nil {
+		return nil, fmt.Errorf("init activation client: %w", err)
+	}
+	cv, err := getCOMVersion(ctx, conn)
+	if err != nil {
+		return nil, fmt.Errorf("get COM version: %w", err)
+	}
+	act, err := ac.RemoteActivation(ctx, &iactivation.RemoteActivationRequest{
+		ORPCThis:                   &dcom.ORPCThis{Version: cv},
+		ClassID:                    dtyp.GUIDFromUUID(cls),
+		IIDs:                       iids,
+		RequestedProtocolSequences: []uint16{7, 15},
+	})
+	if err != nil {
+		return nil, fmt.Errorf("remote activation: %w", err)
+	}
+	if act.HResult != 0 {
+		return nil, hresult.FromCode(uint32(act.HResult))
+	}
+	return append(normalizeStringBindings(act.OXIDBindings.GetStringBindings()),
+		dcom.WithIPID(act.InterfaceData[0].GetStandardObjectReference().Std.IPID)), nil
+}