o j@sddlZddlZddlZddlZddlmZddlmZddlm Z ddl m Z ddl m Z ddlmZddlmZdd lmZdd lmZmZdd lmZdd lmZmZmZmZmZdd lm Z ddl!m"Z"m#Z#ddl$m%Z%e &dZ'dddZ(ddZ)e*dkre)dSdS)N)logger) __banner__)SMBConnectionFactory)ICPRRPC)DCERPC5Connection) DCERPCAuth)EPM) EKUS_NAMES)paddingrsa)hashes)Encodingpkcs7pkcs12BestAvailableEncryptionload_pem_private_key)x509) ExtensionOIDNameOID)core1.3.6.1.4.1.311.20.2.3c sz|durdtd}|durd}tdt|} | } |dur3d| jj | jj f}td|tdt dd } td d |i} t }|t t tj|g}|rut|}|jt t t|gd d }|| t}|durd}d}t|d}t |!| \}}}Wdn1swYt"#$|%||t&}|jt'j(t"j)j*gd}n|+t'j(}tdt,j-| t.j/| j0| j dIdH\}}|dur|tdt12| 3}t4||}t.j5|ddIdH\}}|dur|t67dtd|8||| IdH\}}|dur(td||ddvr5t9d|tdt :|d}td;|j<=td;|j>=td;|j?z|j@AtBjC}|jDD]}td;tEF|jG|jGqgWntd Yz/|j@AtBjH}|jDIt jD]}|jJt Kd!krtd"tjL|jDjMnqtd#Wntd#Ytd$||ft|d%}tjNd&| |dtO|Pd'}|Q|Wdn 1swYtd(Wd)St9y }ztRSd |fWYd}~Sd}~ww)*Nz cert_%s.pfxadminz$[+] Parsing connection parameters...z%s@%sz[*] Using CN: %sz [+] Generating RSA privat key...iiz#[+] Building certificate request...CertificateTemplateF)criticalrb)optionsz[+] Connecting to EPM...)dc_ipdomainz"[+] Connecting to ICRPR service...T) perform_dummyzDCE Connected!z.[+] Requesting certificate from the service...z[-] Request failed! encodedcert)Nz:No certificate was returned from server!. Full message: %sz[+] Got certificate!z[*] Cert subject: {}z[*] Cert issuer: {}z[*] Cert Serial: {:X}z![*] Cert Extended Key Usage: {}z)[-] Could not verify extended key usagerz[*] Certificate ALT NAME: %sz&[-] Certificate doesnt have ALT NAMEz9[+] Writing certificate to disk (file:"%s" pass: "%s")...wbr!)namekeycertcasencryption_algorithmz [+] Finished!)TN)Tosurandomhexprintrfrom_url get_targetget_hostname_or_ip credentialusernamerr generate_private_keyr CertificateSigningRequestBuilder subject_nameName NameAttributer COMMON_NAMEr UTF8Stringdump add_extensionSubjectAlternativeName OtherNamePRINCIPAL_NAMEsignr SHA256openrload_key_and_certificatesreadrPKCS7SignatureBuilderset_data add_signerSHA1r DER PKCS7OptionsBinary public_bytesr create_targetr service_uuidrrfrom_smb_gssapiget_credentialrfrom_rpcconnectionrdebugrequest_certificate Exceptionload_der_x509_certificateformatsubjectrfc4514_stringissuer serial_number extensionsget_extension_for_oidrEXTENDED_KEY_USAGEvaluer get dotted_stringSUBJECT_ALTERNATIVE_NAMEget_values_for_typetype_idObjectIdentifierloadnativeserialize_key_and_certificatesrencodewrite traceback print_exc) urlservicetemplatealtnameonbehalfcnpfx_file pfx_password enroll_certenroll_passwordsuipr$ attributescsr agent_key agent_certf_ pkcs7buildertargeterrauth connectionrpcresr%extoidr#dataer/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/aiosmb/examples/smbcertreq.pyamains         ,            rc Csddl}|jdd}|jddddd|jdd d |jd d d d|jddd |jddd |d}|jddd |jddd |jddd |jddd |jddd |jddd |}tt|jd krrt t j t t|j|j|j|j|j|j|j|j|j|j dS)!Nrz(Request certificate via ICPR-RPC service) descriptionz-vz --verbosecount)actiondefaultz --pfx-filez0Output PFX file name. Default is cert_.pfx)helpz --pfx-passrzOuput PFX file password)rrz --alt-namez3Alternate username. Preferable username@FQDN formatz--cnzaCN (common name). In case you want to set it to something custom. Preferable username@FQDN formatzAgent enrollment parametersz --on-behalfzOn behalf usernamez --enroll-certzAgent enrollment PFX filez --enroll-passz"Agent enrollment PFX file passwordsmb_urlzConnection string that describes the authentication and target. Example: smb+ntlm-password://TEST\Administrator:password@10.10.10.2rjzEnrollment service endpointrkz Certificate template name to use)argparseArgumentParser add_argumentadd_argument_group parse_argsr+rverbosersetLevelloggingDEBUGasynciorunrrrjrkalt_name on_behalfrnropfx_passrq enroll_pass)rparser agentenrollargsrrrmains@    r__main__)NNNNN)+rrgrr(aiosmbraiosmb._versionr!aiosmb.commons.connection.factoryr#aiosmb.dcerpc.v5.interfaces.icprmgrraiosmb.dcerpc.v5.connectionr1aiosmb.dcerpc.v5.common.connection.authenticationr'aiosmb.dcerpc.v5.interfaces.endpointmgrr)msldap.ldap_objects.adcertificatetemplater )cryptography.hazmat.primitives.asymmetricr r cryptography.hazmat.primitivesr ,cryptography.hazmat.primitives.serializationr rrrr cryptographyrcryptography.x509.oidrr asn1cryptorrar<rr__name__rrrrs0             |'