5is & d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZ d dlm Z d dl
m Z m Z m
Z
mZmZmZmZmZmZmZmZmZmZmZmZmZmZ d dl m Z m Z g dZ G d d ej Z! G d
d Z" G d d
Z# G d d Z$ G d d Z% G d d Z& G d d Z' G d d Z( G d d Z) G d d Z* G d d Z+ G d d Z,d Z-d! Z.e/d"k r e. dS dS )# N)datetime)DictList)logger)MSADSchemaEntryMSADInfo_ATTRSMSADInfo
MSADContainerMSADContainer_ATTRSMSADDomainTrust_ATTRSMSADDomainTrustMSADOU MSADOU_ATTRSMSADUserMSADUser_ATTRS MSADGroupMSADGroup_ATTRSMSADMachine_ATTRS MSADMachine
MSADGPO_ATTRSMSADGPO) MSLDAP_BUILTIN_ATTRIBUTE_TYPESLDAP_WELL_KNOWN_ATTRS) single_bool
single_str multi_strc e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ d Z d Z d S ) ADSTYPEr
N) __name__
__module__ __qualname__INVALID DN_STRINGCASE_EXACT_STRINGCASE_IGNORE_STRINGPRINTABLE_STRINGNUMERIC_STRINGBOOLEANINTEGER OCTET_STRINGUTC_TIME
LARGE_INTEGER
PROV_SPECIFIC OBJECT_CLASSCASEIGNORE_LIST
OCTET_LISTPATH
POSTALADDRESS TIMESTAMPBACKLINK TYPEDNAMEHOLD
NETADDRESSREPLICAPOINTER FAXNUMBEREMAILNT_SECURITY_DESCRIPTORUNKNOWNDN_WITH_BINARYDN_WITH_STRING O/home/kali/Ninja/venv/lib/python3.11/site-packages/msldap/commons/adexplorer.pyr r s GINGGLHMMLOJ
DMIHI
DJNI E GNNNNr\ r c Z e Zd Zd Zedefd Zed Zd
dZd Z d Z
d S )
SystemTimec v d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d S Nyearmonth dayOfWeekdayhourminutesecond millisecondsselfs r] __init__zSystemTime.__init__< sA
r\ datac Z t t j | S ra )r_ from_bufferioBytesIOrn s r]
from_byteszSystemTime.from_bytesF s %%bj&6&6777r\ c R t }t j d| d d |_ t j d| d d |_ t j d| d d |_ t j d| d d |_ t j d| d d |_ t j d| d d |_ t j d| d d |_
t j d| d d |_ |S )Nz
r\ Tc
| t | j | j | j | j | j | j | j dz d S )Ni )tzinfo)r rc rd rf rg rh ri rj )rl is_utcs r] to_datetimezSystemTime.to_datetimeW sJ 4:txDKQUQ\^b^opt^t ~B C C C Cr\ c r t j | S ra )calendartimegmr~ timetuplerk s r] to_unixtimezSystemTime.to_unixtimeZ s* t / / 1 1 ; ; = =>>>r\ c d}|d| j z z
}|d| j z z
}|d| j z z
}|d| j z z
}|d| j z z
}|d| j z z
}|d| j z z
}|d | j z z
}|S )
Nz== SystemTime ==
z
year: %s
z month: %s
zdayOfWeek: %s
z day: %s
z
hour: %s
z minute: %s
z second: %s
zmilliseconds: %s
rb rl ts r] __str__zSystemTime.__str__] s " ^di
'' _tz
))
4>
11 ]TX
%% ^di
''
++
++
#d&7
77r\ N)T) r; r< r= rm staticmethodbytesrt rp r~ r r r[ r\ r] r_ r_ ; s ! ! ! 8 8 8 8 \8
\
C C C C? ? ?
r\ r_ c V e Zd Zd ZdedefdZedefd Zed Z dS ) Rightc h d | _ d | _ d | _ d | _ d | _ d | _ d | _ d S ra ) lenRightName rightNamelenDescription descriptionblob_pos_idxrk s r] rm zRight.__init__j s: " r\ idxposc t }||_ | j |_ | j |_ | j |_ ||_ |S ra )r r r r r r )rl r r rs r] get_metazRight.get_metas s: GGn (
r\ rn c Z t t j | S ra )r rp rq rr rs s r] rt zRight.from_bytes| D!1!1222r\ c 6 t }t j d| d d |_ | |j d d |_ t j d| d d |_ | |j d d |_ | d |_
|S )N >q A ))E$677>>{KKQQRXYY %}T499Q<< @ @ C IIe&: ; ; B B; O O U UV\ ] ]YYr]]
r\ N
r; r< r= rm intr r r rt rp r[ r\ r] r r i s 3 C 3 3 3 3 \3 \ r\ r c F e Zd Zd Zedefd Zed ZdS )AuxiliaryClassesc " d | _ d | _ d S ra )lenAuxiliaryClassauxiliaryClassrk s r] rm zAuxiliaryClasses.__init__ s !% "r\ rn c Z t t j | S ra )r rp rq rr rs s r] rt zAuxiliaryClasses.from_bytes s ++BJt,<,<===r\ c t }t j d| d d |_ | |j d d |_ |S Nr r" r r r )r rv rw rx r r r r )ry auxs r] rp z AuxiliaryClasses.from_buffer si &
dDIIaLL A A! D !YYs'< = = D D[ Q Q W WX^ _ _
r\ Nr; r< r= rm r r rt rp r[ r\ r] r r se # # # > > > > \> \ r\ r c F e Zd Zd Zedefd Zed ZdS )SystemPossSuperiorc " d | _ d | _ d S ra )lenSystemPossSuperiorsystemPossSuperiorrk s r] rm zSystemPossSuperior.__init__ s %)""& r\ rn c Z t t j | S ra )r rp rq rr rs s r] rt z SystemPossSuperior.from_bytes s !--bj.>.>???r\ c t }t j d| d d |_ | |j d d |_ |S r )r rv rw rx r r r r )ry spss r] rp z SystemPossSuperior.from_buffer si ""$*M$ ! $E$Ea$H!!%3+D!E!E!L!L[!Y!Y!_!_`f!g!g
r\ Nr r[ r\ r] r r sj ' ' ' @ @ @ @ \@ \ r\ r c F e Zd Zd Zedefd Zed ZdS )Blockc 0 d | _ d | _ d | _ d S ra )unk1unk2unk3rk s r] rm zBlock.__init__ s r\ rn c Z t t j | S ra )r rp rq rr rs s r] rt zBlock.from_bytes r r\ c x t }t j d| d d |_ t j d| d d |_ | |j d d |_ |S r ) r rv rw rx r r r r r )ry blocks r] rp zBlock.from_buffer s ]41 66q9
]41 66q9
YYuz**11+>>DDVLL
r\ Nr r[ r\ r] r r se
3 3 3 3 \3 \ r\ r c V e Zd Zd ZdedefdZedefd Zed Z dS ) Classc , d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _
d | _ d | _ d | _
d | _ d | _ d | _ d | _ d | _ d | _ d | _ d S ra ) lenClassName classNamelenDNDNlenCommonClassNamecommonClassName
lenSubClassOf
subClassOf schemaIDGUIDoffsetToNumBlocksr numBlocksblocks numExtraShiz extraShiznumSystemPossSuperiorssystemPossSuperiorsnumAuxiliaryClassesauxiliaryClassesr r rk s r] rm zClass.__init__ s
"& # ! !% &*##' #' $ r\ r r c . t }||_ ||_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j
|_
| j |_ | j |_ |S ra )
r r r r r r r r r r r r r )rl r r clss r] r zClass.get_meta s gg
" 2 ,9[
"&": # 4
r\ rn c Z t t j | S ra )r rp rq rr rs s r] rt zClass.from_bytes r r\ c v t }t j d| d d |_ | |j d d |_ t j d| d d |_ | |j d d |_ t j d| d d |_
| |j
d d |_ t j d| d d |_ | |j d d |_
| d |_ t j d| d d |_ | |j |_ t j d| d d |_ g |_ t' |j D ]4}|j t* | 5t j d| d d |_ | |j dz |_ t j d| d d |_ g |_ t' |j D ]4}|j t6 | 5t j d| d d |_ g |_ t' |j D ]4}|j t< | 5|S Nr r" r r r r. ) r rv rw rx r r r r r r r r r r r r r r r rangeappendr rp r r r r r r r r )ry r is r] rp zClass.from_buffer s7 gg!=tyy||< ? ? F F{ S S Y YZ` a a "M$ ! = =a @ 3#455<<[IIOOPVWW 99R== &
dDIIaLL A A! D 99S 233
dDIIaLL99!<
s}%% 7 7A J e / / 5 5 6 6 6 6!=tyy||<%)YYu%5%5%<%<[%I%I%O%OPV%W%W" %((// <<BB6JJ
"M$ ! = =a @ %}T499Q<< @ @ C %}T499Q<< @ @ C &
dDIIaLL A A! D %}T499Q<< @ @ C -diill;;A> & 5 ;v?S S
r\ c ( d}|d| j z z
}|d| j z z
}|d| j z z
}|d| j z z
}|d| j z z
}|d| j z z
}|d| j z z
}|d | j z z
}|d
| j z z
}|d | j z z
}|d | j
z z
}|S )
Nz== Header ==
zwinAdSig: %s
z marker: %s
zfiletime: %s
zoptionalDescription: %s
z server: %s
znumObjects: %s
znumAttributes: %s
zfileoffsetLow: %s
zfileoffsetHigh: %s
zfileoffsetEnd: %s
zunk0x43a: %s
) r r r r r r r r r r r r s r] r zHeader.__str__i s
$-
//
++
$-
//
*T-E
EE
++
!DO
33
$t'9
99
$t'9
99
%(;
;;
$t'9
99
$-
//r\ N) r; r< r= rm r r rt rp r r[ r\ r] r r E st " " " 4 4 4 4 \4 \
r\ r c e Zd Zd ZdS )LDIFIdxc 6 || _ || _ ||z
| _ d S ra )startendlength)rl r r s r] rm zLDIFIdx.__init__y s
Ek r\ N)r; r< r= rm r[ r\ r] r r x s# " " " " "r\ r c f e Zd Zd Zedefd Zed Zd Zd Z d Z
d Z d d
Z d S ) DatEntryc h d | _ d | _ d | _ i | _ d | _ d | _ i | _ d S ra )_fhr _attridx_bhcacheobjSize tableSize mappingTablerk s r] rm zDatEntry.__init__ s:
r\ rn c \ t t j | | S ra )r rp rq rr )rn attridxs r] rt zDatEntry.from_bytes s" ##BJt$4$4g>>>r\ c 6 t }| |_ | |_ ||_ t j d| d d |_ t j d| d d |_ t |j D ]h}t j d| d d }t j d| d d }||j |< i|S )Nr r" r r ) r r tellr r rv rw rx r r r r
)ry r de_ attrIndex
attrOffsets r] rp zDatEntry.from_buffer s
ZZ))++ ]41 66q9
}T499Q<<88; r|$$ 4 4A
dDIIaLL99!}T*|!z: zr\ c
| | \ }}|d S | j | j | z }| j | t j d| j d d }g }|j t j
t j t j t j t j
t j fv rg }t | D ]H}| t j d| j d d I|D ]^} | j || z d}
| j d } | dk rn|
| z
}
'| |
_n#|j t j k rg } t | D ]H}| t j d| j d d I| D ]1}
| j |
}| | 2n~|j t j k rt | D ]}| t' t) t j d| j d d d n|j t j k rZt | D ]H}| t j d| j d d Ina|j t j k rWt | D ]F}| t2 | j Gn|j t j k rYt | D ]H}| t j d | j d
d In|j t j k rrt | D ]b}t j d| j d d }
| | j |
cd }|j t> v rt> |j }n |j t@ v rt@ |j }|F|j! d k r|d S |j! d k r|S |j! tD v r
||d
S || S tG j$ d|j z |S )Nr r" r r\ Tr s r r r& single_date
multi_date)encodingz.[ADEXPLORER] No parser found for property "%s")%r r r
r seekrv rw rx r r r? rA rB rC rJ r r rF rD strboolupperencoderE rG r_ rp r~ rH rW r r r r; ENCODER_SPEFIFIC_FULCTIONSr debug)rl r r r fileAttrOffset numValuesvaluesoffsetsr offsetresclengthsr raw_valfconverts r]
get_attributezDatEntry.get_attribute s 00;;
d <4 T%6t%<<
n%%%M$
a(8(899!< > J J L LMMMM
N \W 2
2
29%%
H
H
fmD$(--2B2B C CA FGGGG
H \W ;
;
;9%%
5
5 tTX]]1-=-=>>qA
dhmmF 3 34444 = : : :5dmDHH
] 3
3
3,T];H M11 ay L00
$>>> x====8F## # E
UVVV
r\ c g }| j D ]C}| j | }| |j | |j f D|S ra )r
r r r r/ )rl r* r r s r] get_all_attributeszDatEntry.get_all_attributes sX % K KD=&D JJ
t'9'9$-'H'HI J J J J
r\ c ` |dk r| S | | S )N*)r1 r/ )rl items r] __getitem__zDatEntry.__getitem__ s1 3;;**,, ,!!$'''r\ Nc |dk r+| }t | dk r|S |S | | }||S |S )Nr3 r )r1 lenr/ )rl r4 defaultr* s r] getz DatEntry.get sW 3;;))++C3xx1}} J && ;N
r\ ra )
r; r< r= rm r r rt rp r r/ r1 r5 r9 r[ r\ r] r r ~ s ? ? ? ? \? \ G G GR ( ( (
r\ r c e Zd ZddefdZedefd Zd Zd Z d Z
d Z d
e e fd Z
efd
e e fd Zefd
e e fd
Zefd
e e fdZefd
e e fdZefd
e e fdZefd
e e fdZefd
e e fdZe fd
e e fdZ d
e e fdZ defdZ d
e e fdZ dS )Snapshot順 max_cache_sizec h d | _ d | _ d | _ || _ i | _ i | _ d | _ d S ra )filename
filehandler r= dn_index
attr_index
rootdomain)rl r= s r] rm zSnapshot.__init__
s>
! , -/
r\ r? c K t }| |_ t | d |_ | d {V |S )Nrb)r; r? openr@ parse)r? sns r] from_filezSnapshot.from_file sL
ZZ Xt,,
hhjj r\ c K | j d t | j | _ | d {V d S Nr )r@ r r rp r build_indexrk s r] rG zSnapshot.parse# s] Q (( 99 r\ c K t j d | j | j j t j t j d t j d| j
d d }d}t | D ]w}| j }t | j }| || | j |< || j | j | j < |dz
}xt j d t j d| j
d d }t | D ]w}| j }t$ | j }| || | j |< || j | j | j < |dz
}xt j d t j d| j
d d }t | D ]]}| j }t( | j } | || | j |< |dz
}^t j d t j d
| j d t | j j D ]}| j }t, | j | j }
|
d } |
d
d |
j d
< |
dg |
j d< |
dg |
j d< | j d|
j d v r| | _ |
| j | < | j ||
j z d S )Nz [ADEXPLORER] Building index...z"[ADEXPLORER] Parsing Properties...r r" r r z [ADEXPLORER] Parsing Classes...z [ADEXPLORER] Parsing Rights...z [ADEXPLORER] Meta index built!z![ADEXPLORER] Building DN index...i> distinguishedNameobjectCategory sAMAccountType objectClassdomain) r r$ r@ r r r rq SEEK_SETrv rw rx r r r rp r rB r r r r r r r! r9 r
rC rA r ) rl numattrsr r r r
numclassesr numrightsr r dns r] rL zSnapshot.build_index( sv 5666 T[ 6 DDD 9:::=t';';A'>'>??Bx A/&&((C''88D'+}}Wc'B'BDOG $AHDODOG 4 = > qLGG 6777]4 )=)=a)@)@AA!D
z"" A/&&((C##DO44C'*||GS'A'ADOG $BIDODOG 4 > ? qLGG 5666M$(<(r s
; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; a ` ` ` ` ` ` ` di >, , , , , , , ,\ B $H H H H H H H HT= = = = = = = =~1 1 1 1 1 1 1 1f" " " " " " " " I I I I I I I IVh( h( h( h( h( h( h( h(TG G G R zDFFFFF r\