mirror of
https://github.com/mandiant/gopacket
synced 2026-06-21 13:57:02 +00:00
Merge pull request #11 from mandiant/module-rename
module: rename to github.com/mandiant/gopacket
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
module gopacket
|
||||
module github.com/mandiant/gopacket
|
||||
|
||||
go 1.24.13
|
||||
|
||||
|
||||
+3
-3
@@ -20,9 +20,9 @@ import (
|
||||
"log"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/ntlm"
|
||||
"gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/ntlm"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
)
|
||||
|
||||
// RPCAuthHandler is the interface for RPC authentication handlers.
|
||||
|
||||
@@ -32,8 +32,8 @@ import (
|
||||
"github.com/oiweiwei/gokrb5.fork/v9/credentials"
|
||||
"github.com/oiweiwei/gokrb5.fork/v9/iana/flags"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
)
|
||||
|
||||
// KerberosAuthHandler manages Kerberos authentication for RPC using go-msrpc.
|
||||
|
||||
@@ -21,7 +21,7 @@ import (
|
||||
"encoding/binary"
|
||||
"fmt"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// BKRP Interface UUID: 3dde7c30-165d-11d1-ab8f-00805f14db40
|
||||
|
||||
@@ -22,11 +22,11 @@ import (
|
||||
"log"
|
||||
"math/big"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc/header"
|
||||
"gopacket/pkg/session"
|
||||
"gopacket/pkg/structure"
|
||||
"gopacket/pkg/third_party/smb2"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/header"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/pkg/structure"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2"
|
||||
)
|
||||
|
||||
type Client struct {
|
||||
|
||||
@@ -20,8 +20,8 @@ import (
|
||||
"encoding/binary"
|
||||
"fmt"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
)
|
||||
|
||||
// DCOM UUIDs
|
||||
|
||||
@@ -21,8 +21,8 @@ import (
|
||||
"fmt"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/dcerpc/dcom"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/dcom"
|
||||
)
|
||||
|
||||
// IDispatch UUID
|
||||
|
||||
@@ -19,7 +19,7 @@ import (
|
||||
"encoding/binary"
|
||||
"fmt"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// IRemUnknown operation numbers
|
||||
|
||||
@@ -19,9 +19,9 @@ import (
|
||||
"encoding/binary"
|
||||
"fmt"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/dcerpc/dcom"
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/dcom"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
)
|
||||
|
||||
// IWbemLevel1Login wraps the WMI login interface
|
||||
|
||||
@@ -19,8 +19,8 @@ import (
|
||||
"encoding/binary"
|
||||
"fmt"
|
||||
|
||||
"gopacket/pkg/dcerpc/dcom"
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/dcom"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
)
|
||||
|
||||
// IWbemServices wraps the WMI services interface
|
||||
|
||||
@@ -16,7 +16,7 @@
|
||||
package wmi
|
||||
|
||||
import (
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// WMI UUIDs
|
||||
|
||||
@@ -21,9 +21,9 @@ import (
|
||||
"log"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
)
|
||||
|
||||
// CrackedName represents a single result from DsCrackNames
|
||||
|
||||
@@ -20,9 +20,9 @@ import (
|
||||
"fmt"
|
||||
"log"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
)
|
||||
|
||||
// DRSUAPI UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2
|
||||
|
||||
@@ -25,9 +25,9 @@ import (
|
||||
"log"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
)
|
||||
|
||||
// DSNAME represents an AD object name
|
||||
|
||||
@@ -21,9 +21,9 @@ import (
|
||||
"log"
|
||||
"sort"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/dcerpc/header"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/header"
|
||||
)
|
||||
|
||||
// Endpoint Mapper UUID: e1af8308-5d1f-11c9-91a4-08002b14a0fa
|
||||
|
||||
@@ -21,9 +21,9 @@ import (
|
||||
"encoding/binary"
|
||||
"fmt"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/dcerpc/epmapper"
|
||||
"gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/epmapper"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
)
|
||||
|
||||
// GKDI Interface UUID: B9785960-524F-11DF-8B6D-83DCDED72085
|
||||
|
||||
@@ -24,8 +24,8 @@ import (
|
||||
"fmt"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"log"
|
||||
)
|
||||
|
||||
|
||||
@@ -23,8 +23,8 @@ import (
|
||||
"strings"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// MS-LSAT (LSA Translation Methods)
|
||||
|
||||
@@ -21,7 +21,7 @@ import (
|
||||
"strings"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// MS-NRPC (Netlogon Remote Protocol)
|
||||
|
||||
@@ -27,8 +27,8 @@ import (
|
||||
|
||||
"golang.org/x/crypto/md4"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// SAMR UUID: 12345778-1234-ABCD-EF00-0123456789AC v1.0
|
||||
|
||||
@@ -20,7 +20,7 @@ import (
|
||||
"fmt"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
var UUID = [16]byte{
|
||||
|
||||
@@ -20,7 +20,7 @@ import (
|
||||
"fmt"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// MS-SCMR (Service Control Manager Remote Protocol)
|
||||
|
||||
@@ -21,9 +21,9 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/third_party/smb2"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
"log"
|
||||
)
|
||||
|
||||
|
||||
@@ -20,7 +20,7 @@ import (
|
||||
"fmt"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// MS-TSCH (Task Scheduler Service Remote Protocol)
|
||||
|
||||
@@ -20,8 +20,8 @@ import (
|
||||
"fmt"
|
||||
"log"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// EnumerationClient wraps the TermSrvEnumeration interface (LSM_API_service pipe).
|
||||
|
||||
@@ -20,8 +20,8 @@ import (
|
||||
"fmt"
|
||||
"log"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// LegacyClient wraps the LegacyAPI interface (Ctx_WinStation_API_service pipe).
|
||||
|
||||
@@ -19,8 +19,8 @@ import (
|
||||
"encoding/binary"
|
||||
"log"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// RCMPublicClient wraps the RCMPublic interface (TermSrv_API_service pipe).
|
||||
|
||||
@@ -20,8 +20,8 @@ import (
|
||||
"fmt"
|
||||
"log"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// SessionClient wraps the TermSrvSession interface (LSM_API_service pipe).
|
||||
|
||||
@@ -22,7 +22,7 @@ import (
|
||||
"time"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// MS-TSTS Terminal Services Terminal Server Runtime Interface Protocol
|
||||
|
||||
@@ -20,7 +20,7 @@ import (
|
||||
"fmt"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// KeyInfo contains information about a registry key
|
||||
|
||||
@@ -22,10 +22,10 @@ import (
|
||||
"log"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/session"
|
||||
"gopacket/pkg/smb"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/pkg/smb"
|
||||
)
|
||||
|
||||
// RemoteOps handles remote registry operations
|
||||
|
||||
@@ -20,7 +20,7 @@ import (
|
||||
"fmt"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
)
|
||||
|
||||
// WKSSVC UUID: 6BFFD098-A112-3610-9833-46C3F87E345A v1.0
|
||||
|
||||
@@ -28,7 +28,7 @@ import (
|
||||
"hash"
|
||||
"math/big"
|
||||
|
||||
"gopacket/pkg/dcerpc/gkdi"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/gkdi"
|
||||
)
|
||||
|
||||
var (
|
||||
|
||||
+3
-3
@@ -21,9 +21,9 @@ import (
|
||||
"sort"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/session"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// ExtraUsageLine is appended to the "Usage: tool [options] target" line (e.g. "[maxRid]")
|
||||
|
||||
@@ -18,7 +18,7 @@ import (
|
||||
"fmt"
|
||||
"strings"
|
||||
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
|
||||
"github.com/jcmturner/gokrb5/v8/config"
|
||||
"github.com/jcmturner/gokrb5/v8/iana/nametype"
|
||||
|
||||
@@ -31,8 +31,8 @@ import (
|
||||
"github.com/jcmturner/gokrb5/v8/keytab"
|
||||
"github.com/jcmturner/gokrb5/v8/messages"
|
||||
"github.com/jcmturner/gokrb5/v8/types"
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
)
|
||||
|
||||
// OID for Kerberos V5 (GSSAPI)
|
||||
|
||||
@@ -23,7 +23,7 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
"unicode/utf16"
|
||||
|
||||
"github.com/jcmturner/gokrb5/v8/config"
|
||||
|
||||
+1
-1
@@ -25,7 +25,7 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
|
||||
"golang.org/x/crypto/md4"
|
||||
)
|
||||
|
||||
+1
-1
@@ -18,7 +18,7 @@ import (
|
||||
"fmt"
|
||||
"strings"
|
||||
|
||||
"gopacket/pkg/kerberos"
|
||||
"github.com/mandiant/gopacket/pkg/kerberos"
|
||||
)
|
||||
|
||||
// Login attempts to bind to the LDAP server using the session credentials.
|
||||
|
||||
+2
-2
@@ -16,8 +16,8 @@ package ldap
|
||||
|
||||
import (
|
||||
goldap "github.com/go-ldap/ldap/v3"
|
||||
"gopacket/pkg/session"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// Client wraps the underlying LDAP connection to provide a unified interface.
|
||||
|
||||
+1
-1
@@ -24,7 +24,7 @@ import (
|
||||
"github.com/jcmturner/gokrb5/v8/gssapi"
|
||||
"github.com/jcmturner/gokrb5/v8/iana/keyusage"
|
||||
"github.com/jcmturner/gokrb5/v8/types"
|
||||
"gopacket/pkg/kerberos"
|
||||
"github.com/mandiant/gopacket/pkg/kerberos"
|
||||
)
|
||||
|
||||
var debugGSSAPI = os.Getenv("DEBUG_GSSAPI") != ""
|
||||
|
||||
+1
-1
@@ -20,7 +20,7 @@ import (
|
||||
"fmt"
|
||||
"net"
|
||||
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// Packet types
|
||||
|
||||
+4
-4
@@ -23,10 +23,10 @@ import (
|
||||
"strings"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/mapi"
|
||||
"gopacket/pkg/rpch"
|
||||
"gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/mapi"
|
||||
"github.com/mandiant/gopacket/pkg/rpch"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
|
||||
"github.com/google/uuid"
|
||||
)
|
||||
|
||||
+1
-1
@@ -25,7 +25,7 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
)
|
||||
|
||||
// NTLM v2 client
|
||||
|
||||
@@ -23,7 +23,7 @@ import (
|
||||
|
||||
"testing"
|
||||
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
)
|
||||
|
||||
func TestNtowfv2(t *testing.T) {
|
||||
|
||||
+1
-1
@@ -23,7 +23,7 @@ import (
|
||||
"errors"
|
||||
"strings"
|
||||
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
)
|
||||
|
||||
// NTLM v2 server
|
||||
|
||||
+2
-2
@@ -21,8 +21,8 @@ import (
|
||||
"errors"
|
||||
"log"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/utf16le"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/utf16le"
|
||||
)
|
||||
|
||||
type Session struct {
|
||||
|
||||
+2
-2
@@ -22,8 +22,8 @@ import (
|
||||
"math/rand"
|
||||
"unicode/utf16"
|
||||
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/dcerpc/svcctl"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/svcctl"
|
||||
)
|
||||
|
||||
// getAttackModule returns the attack module for the given name.
|
||||
|
||||
+2
-2
@@ -20,8 +20,8 @@ import (
|
||||
"log"
|
||||
"net"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// SMBRelayClient manages the SMB2 connection to the target server.
|
||||
|
||||
@@ -27,8 +27,8 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// HTTPRelayClient implements ProtocolClient for relaying NTLM auth to HTTP/HTTPS targets.
|
||||
|
||||
@@ -24,7 +24,7 @@ import (
|
||||
"strings"
|
||||
"sync"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// HTTPRelayServer listens for incoming HTTP connections and captures
|
||||
|
||||
@@ -28,7 +28,7 @@ import (
|
||||
"net/http"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// HTTPSRelayServer wraps HTTPRelayServer with TLS.
|
||||
|
||||
@@ -22,8 +22,8 @@ import (
|
||||
"strings"
|
||||
"sync/atomic"
|
||||
|
||||
gopacketldap "gopacket/pkg/ldap"
|
||||
"gopacket/pkg/tds"
|
||||
gopacketldap "github.com/mandiant/gopacket/pkg/ldap"
|
||||
"github.com/mandiant/gopacket/pkg/tds"
|
||||
)
|
||||
|
||||
// nextShellPort is the next TCP port for interactive shells (starts at 11000 like Impacket).
|
||||
|
||||
@@ -29,9 +29,9 @@ import (
|
||||
|
||||
goldap "github.com/go-ldap/ldap/v3"
|
||||
|
||||
"gopacket/internal/build"
|
||||
gopacketldap "gopacket/pkg/ldap"
|
||||
"gopacket/pkg/security"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
gopacketldap "github.com/mandiant/gopacket/pkg/ldap"
|
||||
"github.com/mandiant/gopacket/pkg/security"
|
||||
)
|
||||
|
||||
// Package-level tracking to match Impacket's global state
|
||||
|
||||
@@ -26,9 +26,9 @@ import (
|
||||
ber "github.com/go-asn1-ber/asn1-ber"
|
||||
goldap "github.com/go-ldap/ldap/v3"
|
||||
|
||||
"gopacket/internal/build"
|
||||
gopacketldap "gopacket/pkg/ldap"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
gopacketldap "github.com/mandiant/gopacket/pkg/ldap"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// SICILY NTLM bind context tags (Microsoft LDAP extension)
|
||||
|
||||
@@ -21,8 +21,8 @@ import (
|
||||
"strconv"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/tds"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/tds"
|
||||
)
|
||||
|
||||
// MSSQLRelayClient relays NTLM authentication to a MSSQL target via TDS protocol.
|
||||
|
||||
+1
-1
@@ -18,7 +18,7 @@ import (
|
||||
"fmt"
|
||||
"log"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// RelayPipeTransport implements dcerpc.Transport over a raw SMB2 relay pipe.
|
||||
|
||||
@@ -21,7 +21,7 @@ import (
|
||||
"log"
|
||||
"net"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// RAWRelayServer listens for incoming raw TCP connections and captures
|
||||
|
||||
+1
-1
@@ -19,7 +19,7 @@ import (
|
||||
"log"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// socksServer is the global SOCKS server instance (set if -socks enabled).
|
||||
|
||||
@@ -29,9 +29,9 @@ import (
|
||||
"sync"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc/icpr"
|
||||
"gopacket/pkg/dcerpc/tsch"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/icpr"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/tsch"
|
||||
|
||||
"software.sslmate.com/src/go-pkcs12"
|
||||
)
|
||||
|
||||
@@ -21,12 +21,12 @@ import (
|
||||
"log"
|
||||
"net"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/dcerpc/epmapper"
|
||||
"gopacket/pkg/dcerpc/header"
|
||||
"gopacket/pkg/dcerpc/tsch"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/epmapper"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/header"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/tsch"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// ICPR interface UUID: 91ae6020-9e3c-11cf-8d7c-00aa00c091be v0.0
|
||||
|
||||
@@ -22,7 +22,7 @@ import (
|
||||
"log"
|
||||
"net"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// DCE/RPC packet type constants
|
||||
|
||||
@@ -19,10 +19,10 @@ import (
|
||||
"fmt"
|
||||
"log"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/dcerpc/winreg"
|
||||
"gopacket/pkg/registry"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/winreg"
|
||||
"github.com/mandiant/gopacket/pkg/registry"
|
||||
)
|
||||
|
||||
// SAMDumpAttack dumps local SAM hashes via remote registry (Impacket default SMB attack).
|
||||
|
||||
@@ -21,10 +21,10 @@ import (
|
||||
"log"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/dcerpc/winreg"
|
||||
"gopacket/pkg/registry"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/winreg"
|
||||
"github.com/mandiant/gopacket/pkg/registry"
|
||||
)
|
||||
|
||||
// SecretsdumpAttack dumps SAM hashes and LSA secrets via remote registry.
|
||||
|
||||
+1
-1
@@ -21,7 +21,7 @@ import (
|
||||
"log"
|
||||
"net"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// SMBRelayServer listens for incoming SMB2 connections from victims
|
||||
|
||||
@@ -21,10 +21,10 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/dcerpc"
|
||||
"gopacket/pkg/dcerpc/samr"
|
||||
"gopacket/pkg/dcerpc/tsch"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/samr"
|
||||
"github.com/mandiant/gopacket/pkg/dcerpc/tsch"
|
||||
)
|
||||
|
||||
// EnumLocalAdminsAttack enumerates local administrators via SAMR.
|
||||
|
||||
+1
-1
@@ -25,7 +25,7 @@ import (
|
||||
"sync"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// SOCKSServer implements a SOCKS5 proxy that routes connections through relayed sessions.
|
||||
|
||||
@@ -24,7 +24,7 @@ import (
|
||||
"net/http"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// HTTPSocksPlugin implements the SOCKS plugin for HTTP/HTTPS protocol.
|
||||
|
||||
@@ -24,7 +24,7 @@ import (
|
||||
|
||||
ber "github.com/go-asn1-ber/asn1-ber"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// LDAP message tags
|
||||
|
||||
@@ -23,7 +23,7 @@ import (
|
||||
"net"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// TDS packet type constants
|
||||
|
||||
@@ -24,7 +24,7 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// SMB2 flags used by the SOCKS plugin
|
||||
|
||||
@@ -21,7 +21,7 @@ import (
|
||||
"log"
|
||||
"net"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// WCFRelayServer listens for incoming WCF/ADWS (port 9389) connections and
|
||||
|
||||
@@ -21,7 +21,7 @@ import (
|
||||
"regexp"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
)
|
||||
|
||||
// WinRMExecAttack implements AttackModule for WinRM command execution.
|
||||
|
||||
@@ -27,8 +27,8 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// WinRMRelayClient implements ProtocolClient for relaying NTLM auth to WinRM targets.
|
||||
|
||||
+5
-5
@@ -27,11 +27,11 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/kerberos"
|
||||
"gopacket/pkg/ntlm"
|
||||
"gopacket/pkg/session"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/kerberos"
|
||||
"github.com/mandiant/gopacket/pkg/ntlm"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// AUTH types
|
||||
|
||||
@@ -29,8 +29,8 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// Transport implements RPC over HTTP v2 transport
|
||||
|
||||
+5
-5
@@ -26,11 +26,11 @@ import (
|
||||
"sort"
|
||||
"strings"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/kerberos"
|
||||
"gopacket/pkg/session"
|
||||
"gopacket/pkg/third_party/smb2"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/kerberos"
|
||||
"github.com/mandiant/gopacket/pkg/session"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
type Client struct {
|
||||
|
||||
+2
-2
@@ -19,8 +19,8 @@ import (
|
||||
|
||||
"github.com/jcmturner/gokrb5/v8/gssapi"
|
||||
"github.com/jcmturner/gokrb5/v8/types"
|
||||
"gopacket/pkg/kerberos"
|
||||
"gopacket/pkg/third_party/smb2"
|
||||
"github.com/mandiant/gopacket/pkg/kerberos"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2"
|
||||
)
|
||||
|
||||
// OID for Kerberos V5
|
||||
|
||||
+1
-1
@@ -18,7 +18,7 @@ import (
|
||||
"fmt"
|
||||
"os"
|
||||
|
||||
"gopacket/pkg/third_party/smb2"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2"
|
||||
)
|
||||
|
||||
// PipeAccess specifies the access mode for named pipes
|
||||
|
||||
+4
-4
@@ -25,10 +25,10 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/internal/build"
|
||||
"gopacket/pkg/kerberos"
|
||||
"gopacket/pkg/ntlm"
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/internal/build"
|
||||
"github.com/mandiant/gopacket/pkg/kerberos"
|
||||
"github.com/mandiant/gopacket/pkg/ntlm"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// Client represents a TDS/MSSQL client
|
||||
|
||||
+1
-1
@@ -19,7 +19,7 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/pkg/transport"
|
||||
"github.com/mandiant/gopacket/pkg/transport"
|
||||
)
|
||||
|
||||
// SQLRInstance represents a discovered SQL Server instance
|
||||
|
||||
Vendored
+3
-3
@@ -13,10 +13,10 @@ import (
|
||||
"sync"
|
||||
"time"
|
||||
|
||||
. "gopacket/pkg/third_party/smb2/internal/erref"
|
||||
. "gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/erref"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/msrpc"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/msrpc"
|
||||
)
|
||||
|
||||
// Dialer contains options for func (*Dialer) Dial.
|
||||
|
||||
Vendored
+2
-2
@@ -10,8 +10,8 @@ import (
|
||||
"sync/atomic"
|
||||
"time"
|
||||
|
||||
. "gopacket/pkg/third_party/smb2/internal/erref"
|
||||
. "gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/erref"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
)
|
||||
|
||||
// Negotiator contains options for func (*Dialer) Dial.
|
||||
|
||||
Vendored
+1
-1
@@ -4,7 +4,7 @@ import (
|
||||
"context"
|
||||
"fmt"
|
||||
|
||||
. "gopacket/pkg/third_party/smb2/internal/erref"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/erref"
|
||||
)
|
||||
|
||||
// TransportError represents a error come from net.Conn layer.
|
||||
|
||||
Vendored
+1
-1
@@ -6,7 +6,7 @@ import (
|
||||
"io/ioutil"
|
||||
"net"
|
||||
|
||||
"gopacket/pkg/third_party/smb2"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2"
|
||||
)
|
||||
|
||||
func Example() {
|
||||
|
||||
Vendored
+1
-1
@@ -1,7 +1,7 @@
|
||||
package smb2
|
||||
|
||||
import (
|
||||
. "gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
)
|
||||
|
||||
// client
|
||||
|
||||
Vendored
+1
-1
@@ -39,7 +39,7 @@ import (
|
||||
"strings"
|
||||
"unicode/utf8"
|
||||
|
||||
. "gopacket/pkg/third_party/smb2/internal/erref"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/erref"
|
||||
)
|
||||
|
||||
// ErrBadPattern indicates a pattern was malformed.
|
||||
|
||||
Vendored
+2
-2
@@ -3,8 +3,8 @@ package smb2
|
||||
import (
|
||||
"encoding/asn1"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/ntlm"
|
||||
"gopacket/pkg/third_party/smb2/internal/spnego"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/ntlm"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/spnego"
|
||||
)
|
||||
|
||||
type Initiator interface {
|
||||
|
||||
+1
-1
@@ -4,7 +4,7 @@ import (
|
||||
"encoding/binary"
|
||||
"encoding/hex"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
)
|
||||
|
||||
var le = binary.LittleEndian
|
||||
|
||||
+1
-1
@@ -11,7 +11,7 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
)
|
||||
|
||||
// NTLM v2 client
|
||||
|
||||
+1
-1
@@ -9,7 +9,7 @@ import (
|
||||
|
||||
"testing"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
)
|
||||
|
||||
func TestNtowfv2(t *testing.T) {
|
||||
|
||||
+1
-1
@@ -9,7 +9,7 @@ import (
|
||||
"errors"
|
||||
"strings"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
)
|
||||
|
||||
// NTLM v2 server
|
||||
|
||||
+1
-1
@@ -5,7 +5,7 @@ import (
|
||||
"crypto/rc4"
|
||||
"errors"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
)
|
||||
|
||||
type Session struct {
|
||||
|
||||
+1
-1
@@ -3,7 +3,7 @@
|
||||
package smb2
|
||||
|
||||
import (
|
||||
"gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
)
|
||||
|
||||
const (
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
package smb2
|
||||
|
||||
import "gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
import "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
|
||||
// ----------------------------------------------------------------------------
|
||||
// SMB2 NEGOTIATE Request Packet
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
package smb2
|
||||
|
||||
import "gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
import "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/utf16le"
|
||||
|
||||
// ----------------------------------------------------------------------------
|
||||
// SMB2 Error Response
|
||||
|
||||
Vendored
+4
-4
@@ -12,11 +12,11 @@ import (
|
||||
"fmt"
|
||||
"hash"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/crypto/ccm"
|
||||
"gopacket/pkg/third_party/smb2/internal/crypto/cmac"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/crypto/ccm"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/crypto/cmac"
|
||||
|
||||
. "gopacket/pkg/third_party/smb2/internal/erref"
|
||||
. "gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/erref"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
)
|
||||
|
||||
func sessionSetup(conn *conn, i Initiator, ctx context.Context) (*session, error) {
|
||||
|
||||
Vendored
+2
-2
@@ -5,9 +5,9 @@ import (
|
||||
"crypto/aes"
|
||||
"encoding/hex"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/crypto/cmac"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/crypto/cmac"
|
||||
|
||||
. "gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
. "github.com/mandiant/gopacket/pkg/third_party/smb2/internal/smb2"
|
||||
|
||||
"testing"
|
||||
)
|
||||
|
||||
Vendored
+1
-1
@@ -16,7 +16,7 @@ import (
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"gopacket/pkg/third_party/smb2"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2"
|
||||
|
||||
"testing"
|
||||
)
|
||||
|
||||
Vendored
+1
-1
@@ -3,7 +3,7 @@ package smb2
|
||||
import (
|
||||
"encoding/asn1"
|
||||
|
||||
"gopacket/pkg/third_party/smb2/internal/spnego"
|
||||
"github.com/mandiant/gopacket/pkg/third_party/smb2/internal/spnego"
|
||||
)
|
||||
|
||||
type spnegoClient struct {
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user