o j@sddlZddlZddlmZmZmZmZmZmZddl m Z m Z ddl m Z ddlmZmZmZmZddl mZmZmZddlmZddl mZdd lmZmZdd l mZmZmZmZmZmZm Z m!Z!m"Z"dd l m#Z#m$Z$m%Z%Gd d d Z&Gddde'Z(dS)N)smbsmb3 smb3structsnmb nt_errorsLOG)compute_lmhashcompute_nthash) SMB_DIALECT)SMB2_DIALECT_002SMB2_DIALECT_21SMB2_DIALECT_30SMB2_DIALECT_311) FILE_OPENFILE_OVERWRITEFILE_OVERWRITE_IF)FILE_OPEN_REPARSE_POINT)FILE_NON_DIRECTORY_FILE)FILE_ATTRIBUTE_NORMALFILE_SYNCHRONOUS_IO_NONALERT) FILE_READ_DATAFILE_WRITE_DATA GENERIC_READ GENERIC_WRITE GENERIC_ALL READ_CONTROLFILE_READ_ATTRIBUTES FILE_READ_EA SYNCHRONIZE)FILE_SHARE_READFILE_SHARE_WRITEFILE_SHARE_DELETEc @seZdZdZdddejddddfddZdejj ejj Bejj ejj Bejj Bdfd d Z dd dZddZddZddZddZddZddZddZddZdd Zd!d"Zd#d$Zd%d&Zd'd(Zd)d*Zd+d,Zd-d.Zd/d0Z d1d2Z!d3d4Z"d5d6Z#dd7d8Z$  dd9d:Z%d;d<Z&d=d>Z'd?d@Z(dAdBZ)dCdDZ*ddEdFZ+e,e-e.Be/Be0e1e2e3j4d e3j5df dGdHZ6e7e8Be-e0e9e2e3j4d e3j5df dIdJZ:ddKdLZ;ddMdNZe-e9d dfdSdTZ?e-e1d dfdUdVZ@ddWdXZAdYdZZBd[d\ZCd]d^ZDdd`daZEddbdcZFdddeZGddfdgZHddhdiZIdjdkZJdldmZKdndoZLdpdqZMdrdsZNdtduZOdvdwZPdxdyZQdzd{ZRd|d}ZSe9d dfd~dZTdS) SMBConnectionab SMBConnection class :param str remoteName: The name of the remote host, can be its NETBIOS name, IP or *\*SMBSERVER*. If the later, and port is 139, the library will try to get the target's server name. :param str remoteHost: Target server's remote address (IPv4, IPv6) or FQDN :param optional str myName: The client's NETBIOS name :param optional int sess_port: A target port to connect :param optional int timeout: Timeout in seconds when receiving packets :param optional int/str preferredDialect: The dialect desired to talk with the target server. If not specified the highest one available will be used :param optional bool manualNegotiate: Lets the user manually perform SMB_COM_NEGOTIATE. :return: An SMBConnection instance. :raise SessionError: If encountered an error. N<Fc Csd|_d|_d|_||_||_||_||_||_||_||_ ||_ d|_ d|_ d|_ d|_|durPt|tjs?t|tjs?J||_|j|_|j|_ dS|dur[||dSdS)Nrr#FT)_SMBConnection_dialect _nmbSession _sess_port_myName _remoteHost _remoteName_timeout_preferredDialect_existingConnection_manualNegotiate _doKerberos_kdcHost _useCache _ntlmFallback isinstancerSMBrSMB3 getDialect getKerberosnegotiateSession) self remoteName remoteHostmyName sess_porttimeoutpreferredDialectexistingConnectionmanualNegotiaterC/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/impacket/smbconnection.py__init__?s0  zSMBConnection.__init__z"NT LM 0.12SMB 2.002SMB 2.???c Cs|jtjkr|jdkr|j|_n |jtjkr0|jdkr0t}z||j}WnYn||_|jtjkr8d}tj}|dur|j |j |j|j|j|j d|||d }|dddkrrt j |j|j|j ||j|j |jt|d |_nJtj|j|j|j ||j|j |j|d |_n5|tjkrt|j|j|j ||j|j |_n|ttttfvrt j |j|j|j ||j|j |d |_ntd t|jtjr|jdtjj@r|tjjO}|jj||d dS)a, Perform SMB protocol negotiation. :param optional int/str preferredDialect: The dialect desired to talk with the target server. If None is specified the highest one available will be used :param optional int flags1: The SMB FLAGS capabilities :param optional int flags2: The SMB FLAGS2 capabilities :param optional bytes negoData: Data to be sent as part of the nego handshake. :return: True :raise SessionError: If encountered an error. z *SMBSERVERzNT LM 0.12SMB 2.002NT)flags1flags2datar)sessionnegSessionResponse)rK negPacket)r@zUnknown dialect %s)rFrG)r(rSMB_SESSION_PORTr+r*NETBIOS_SESSION_PORTNetBIOSgetnetbiosname TYPE_SERVERnegotiateSessionWildcardr)r,rr6r'r SMB2Packetr%rr5r r r r r Exceptionr4 get_flagsFLAGS2_UNICODE set_flags) r:r@rFrGnegoDatanbreshostTypepacketrCrCrDr9_sN          zSMBConnection.negotiateSessionTrc Cs8|st}|d} | dkr|d| }d} t} || d<|tjjB| d<d} | dkrt|||tj |||_ t tjj }|durN| dtjj O<| |d<| ||j | z|j |} Wn(tjy| dtjjtjjBtjjBO<g| d<Ynw| d 7} | dks-| durtd | S) N.rFlags1Flags2TDatarIz No answer!)socket gethostnamefindr NewSMBPacketr5rWrNetBIOSTCPSessionrRr' SMBCommandSMB_COM_NEGOTIATEFLAGS2_EXTENDED_SECURITY addCommand send_packetgetData recv_packet NetBIOSErrorFLAGS2_NT_STATUSFLAGS2_LONG_NAMESrU get_trailer)r:r=r;r<r>r?extended_securityrFrGrHitriessmbpresp negSessionrCrCrDrSs@    $ z&SMBConnection.negotiateSessionWildcardcC|jSN)r'r:rCrCrD getNMBServerzSMBConnection.getNMBServercCrz)za Returns the SMB/SMB3 instance being used. Useful for calling low level methods. )r%r|rCrCrD getSMBServerszSMBConnection.getSMBServercC |jSr{)r%r7r|rCrCrDr7 zSMBConnection.getDialectcCrr{)r%get_server_namer|rCrCrD getServerNamerzSMBConnection.getServerNamecCrr{)r%get_client_namer|rCrCrD getClientNamerzSMBConnection.getClientNamecCrr{)r%get_remote_hostr|rCrCrD getRemoteHostrzSMBConnection.getRemoteHostcCrr{)r%get_remote_namer|rCrCrD getRemoteNamerzSMBConnection.getRemoteNamecCs |j|Sr{)r%set_remote_name)r:namerCrCrD setRemoteName zSMBConnection.setRemoteNamecCrr{)r%get_server_domainr|rCrCrDgetServerDomainrzSMBConnection.getServerDomaincCrr{)r%get_server_dns_domain_namer|rCrCrDgetServerDNSDomainNamerz$SMBConnection.getServerDNSDomainNamecCrr{)r%get_server_dns_host_namer|rCrCrDgetServerDNSHostNamerz"SMBConnection.getServerDNSHostNamecCrr{)r% get_server_osr|rCrCrD getServerOSrzSMBConnection.getServerOScCrr{)r%get_server_os_majorr|rCrCrDgetServerOSMajorrzSMBConnection.getServerOSMajorcCrr{)r%get_server_os_minorr|rCrCrDgetServerOSMinorrzSMBConnection.getServerOSMinorcCrr{)r%get_server_os_buildr|rCrCrDgetServerOSBuildrzSMBConnection.getServerOSBuildcCrr{)r%doesSupportNTLMv2r|rCrCrDrrzSMBConnection.doesSupportNTLMv2cCrr{)r%is_login_requiredr|rCrCrDisLoginRequiredrzSMBConnection.isLoginRequiredcCrr{)r%is_signing_requiredr|rCrCrDisSigningRequiredrzSMBConnection.isSigningRequiredcCrr{)r%getCredentialsr|rCrCrDr rzSMBConnection.getCredentialscCrr{)r%getIOCapabilitiesr|rCrCrDr rzSMBConnection.getIOCapabilitiesc Csv||_z|tjkr|j||||||WS|j|||||WStjtjfy:}z t|| d}~ww)a Authenticates against the target system using NTLM. :param str user: Username. :param str password: Password for the user. :param optional str domain: Domain where the account is valid for. :param optional str lmhash: LMHASH used to authenticate using hashes (password is not used). :param optional str nthash: NTHASH used to authenticate using hashes (password is not used). :param optional bool ntlmFallback: If True it will try NTLMv1 authentication if NTLMv2 fails. Only available for SMBv1. :return: None :raise SessionError: If encountered an error (e.g. authentication failure, or invalid/truncated server response). N) r3r7rr r%login SessionErrorrget_error_codeget_error_packet)r:userpassworddomainlmhashnthash ntlmFallbackerCrCrDrszSMBConnection.loginc  Csfddlm} ddlm} ddlm} ||_| |_|dus | dur"d} | r3| ||d| \}}}} z%| t j krK|j ||||||||| WS|j ||||||||| WSt jtjfyr}z t||d}~w| y}z4|| jjjkr|d kr|d kr|d ks|dur|dur| durt|}t|}n||WYd}~nd}~wwq4) a Authenticates against the target system using Kerberos. Hashes are used if RC4_HMAC is supported. :param str user: Username. :param str password: Password for the user. :param optional str domain: Domain where the account is valid for (required). :param optional str lmhash: LMHASH used to authenticate using hashes (password is not used). :param optional str nthash: NTHASH used to authenticate using hashes (password is not used). :param optional str aesKey: aes256-cts-hmac-sha1-96 or aes128-cts-hmac-sha1-96 used for Kerberos authentication. :param optional str kdcHost: Hostname or IP Address for the KDC. If None, the domain will be used (it needs to resolve tho). :param optional struct TGT: If there's a TGT available, send the structure here and it will be used. :param optional struct TGS: Same for TGS. See smb3.py for the format. :param optional bool useCache: Whether or not we should use the ccache for credentials lookup. If TGT or TGS are specified this is False :return: None :raise SessionError: If encountered an error. r)CCache) KerberosError) constantsNFzcifs/%sTr#)impacket.krb5.ccacherimpacket.krb5.kerberosv5r impacket.krb5rr1r2 parseFilerr7rr r%kerberos_login kerberosLoginrrrr getErrorCode ErrorCodesKDC_ERR_ETYPE_NOSUPPvaluerr )r:rrrrraesKeykdcHostTGTTGSuseCacherrrrrCrCrDr(s@   0  zSMBConnection.kerberosLoginc C@z|jWStjtjfy}z t||d}~wwr{)r%isGuestSessionrrrrrr:rrCrCrDra  zSMBConnection.isGuestSessionc Crr{)r%logoffrrrrrrrCrCrDrgrzSMBConnection.logoffc Cs||tjkrt|durt|}d|d|}z|j|WStj t j fy=}z t | | d}~ww)z Connect to a remote share / resource (tree). :return int: Tree ID (used later in other operations). F\\\N) r7rr ntpathismountbasenamerr% connect_treerrrr)r:sharerrCrCrD connectTreems zSMBConnection.connectTreec CBz|j|WStjtjfy }z t||d}~wwr{)r%disconnect_treerrrrr)r:treeIdrrCrCrDdisconnectTree~ zSMBConnection.disconnectTreecCsrddlm}m}|j||d|d}|}|||j |j |dd|d}|dd d d S) z Get a list of available shares at the connected target. :return: List containing dict entries for each share. :raise SessionError: If encountered an error. r) transportsrvsz\srvsvc)filenamesmb_connectionrIr) serverName InfoStruct ShareInfoLevel1Buffer) impacket.dcerpc.v5rr SMBTransportrr get_dce_rpcconnectbindMSRPC_UUID_SRVShNetrShareEnum)r:rr rpctransportdcerxrCrCrD listSharess zSMBConnection.listSharesc CFz |j|||WStjtjfy"}z t||d}~ww)a List the files/directories under shareName/path. :param str shareName: A valid name for the share where the files/directories are going to be searched. :param str path: A base path relative to shareName. :param optional str password: The password for the share. :return: List containing smb.SharedFile items. :raise SessionError: If encountered an error. N)r% list_pathrrrrr)r: shareNamepathrrrCrCrDlistPath  zSMBConnection.listPathc  C|tjkr|j\} } |dd}| tjj@r|dn|}t tjj }t |d<tj | d|d<t ||dd<||dd<||dd <||dd <||dd <||dd <||dd <| |dd<d|dd<||dd<| tjj@rd|dd<| durtdz |jj|||dWStjtjfy}z t||d}~wwz|j||||||||| | | WStjtjfy}z t||d}~ww)a Creates a remote file, returning a handle to it. :param HANDLE treeId: A valid handle for the share where the file is to be created. :param str pathName: The path name of the file to create. :param optional int desiredAccess: The level of access that is required, as specified in https://msdn.microsoft.com/en-us/library/cc246503.aspx :param optional int shareMode: Specifies the sharing mode for the open. :param optional int creationOption: Specifies the options to be applied when creating or opening the file. :param optional int creationDisposition: Defines the action the server MUST take if the file that is specified in the name field already exists. :param optional int fileAttributes: This field MUST be a combination of the values specified in [MS-FSCC] section 2.6, and MUST NOT include any values other than those specified in that section. :param optional int impersonationLevel: This field specifies the impersonation level requested by the application that is issuing the create request. :param optional int securityFlags: This field MUST NOT be used and MUST be reserved. The client MUST set this to 0, and the server MUST ignore it. :param optional int oplockLevel: The requested oplock level. :param optional createContexts: A variable-length attribute that is sent with an SMB2 CREATE Request or SMB2 CREATE Response that either gives extra information about how the create will be processed, or returns extra information about how the create was processed. :return: A valid file descriptor. :raise SessionError: If encountered an error. /rutf-16le ParametersflagsrcFileNameLength AccessMaskFileAttributes ShareAccess Disposition CreateOptions Impersonation SecurityFlags CreateFlagsFileNamerPadN$CreateContexts not supported in SMB1cmdr7rr r%rVreplacer5rWencoderiSMB_COM_NT_CREATE_ANDXSMBNtCreateAndX_ParametersSMBNtCreateAndX_Datalenrerrornt_create_andxrrrrcreater:rpathName desiredAccess shareModecreationOptioncreationDispositionfileAttributesimpersonationLevel securityFlags oplockLevelcreateContexts_rGpacketPathNamentCreaterrCrCrD createFileH              zSMBConnection.createFilec  Cr)a} Opens a handle to a remote file. :param HANDLE treeId: A valid handle for the share where the file is to be opened. :param str pathName: The path name to open. :param optional int desiredAccess: The level of access that is required, as specified in https://msdn.microsoft.com/en-us/library/cc246503.aspx :param optional int shareMode: Specifies the sharing mode for the open. :param optional int creationOption: Specifies the options to be applied when creating or opening the file. :param optional int creationDisposition: Defines the action the server MUST take if the file that is specified in the name field already exists. :param optional int fileAttributes: This field MUST be a combination of the values specified in [MS-FSCC] section 2.6, and MUST NOT include any values other than those specified in that section. :param optional int impersonationLevel: This field specifies the impersonation level requested by the application that is issuing the create request. :param optional int securityFlags: This field MUST NOT be used and MUST be reserved. The client MUST set this to 0, and the server MUST ignore it. :param optional int oplockLevel: The requested oplock level :param optional createContexts: A variable-length attribute that is sent with an SMB2 CREATE Request or SMB2 CREATE Response that either gives extra information about how the create will be processed, or returns extra information about how the create was processed. :return: A valid file descriptor. :raise SessionError: If encountered an error. rrrrrrcrrrrrrrrrrrrrNrrrr rCrCrDopenFilerzSMBConnection.openFilec CsHz |j||||WStjtjfy#}z t||d}~ww)a Writes data to a remote file. :param HANDLE treeId: A valid handle for the share where the file is to be written. :param HANDLE fileId: A valid handle for the file. :param str data: A buffer with the data to write. :param optional int offset: An offset where to start writing the data. :return: The amount of bytes successfully written. :raise SessionError: If encountered an error. N)r% writeFilerrrrr)r:rfileIdrHoffsetrrCrCrDr,  zSMBConnection.writeFilec Csd}d}|jd}|dur|}|} |s~| |kr|} n| } z |j|||| } Wn)tjtjfyR} z| tjkrEd} WYd} ~ |St| | d} ~ ww|| 7}t ||kr`d}nt | dkrid}n|durpd}n |t | 7}| t | 8} |r|S)a Reads data from a file. :param HANDLE treeId: A valid handle for the share where the file is to be read. :param HANDLE fileId: A valid handle for the file to be read. :param optional int offset: An offset where to start reading the data. :param optional int bytesToRead: The amount of bytes to attempt reading. If None, it will attempt to read Dialect['MaxBufferSize'] bytes. :param optional bool singleCall: If True it won't attempt to read all bytesToRead. It will only make a single read call. :return: The data read. Length of data read is not always bytesToRead. :raise SessionError: If encountered an error. F MaxReadSizeNTr) r%r read_andxrrrrrSTATUS_END_OF_FILErr) r:rrr bytesToRead singleCallfinishedrH maxReadSizeremainingBytesToReadtoRead bytesReadrrCrCrDreadFile=s>     zSMBConnection.readFilec CDz|j||WStjtjfy!}z t||d}~ww)a" Closes a file handle. :param HANDLE treeId: A valid handle for the share where the file is to be opened. :param HANDLE fileId: A valid handle for the file/directory to be closed. :return: None :raise SessionError: If encountered an error. N)r%closerrrrr)r:rrrrCrCrD closeFilen  zSMBConnection.closeFilec Cr+)z Removes a file. :param str shareName: A valid name for the share where the file is to be deleted. :param str pathName: The path name to remove. :return: None :raise SessionError: If encountered an error. N)r%removerrrrrr:rr rrCrCrD deleteFile}r.zSMBConnection.deleteFilec CPz|jj|||||||dWStjtjfy'}z t||d}~ww)a Reads a remote file and sends the read data to a callback method. :param str shareName: The name for the share where the file is to be retrieved. :param str pathName: The path name to retrieve. :param callback callback: A function called to write the contents read - the method receives bytes as an argument. :param optional int shareAccessMode: Binary flags stating what file access permissions we would like to allow other processes to have when accessing our opened file. :param optional int mode: Binary flags indicating what file operation we expect to happen when we open our file. :param optional int offset: An offset for reading data from the file (used like `seek`). :param optional str password: A password for password protected files & shares (Not Implemented in SMBv3). :return: None :raise SessionError: If encountered an error. moderrshareAccessModeN)r% retr_filerrrrr r:rr callbackr5r4rrrrCrCrDgetFiles zSMBConnection.getFilec Cr2)a/ Uploads data read from a callback method to a remote file. :param str shareName: The name for the share where the file is to be uploaded. :param str pathName: The path name to upload. :param callback callback: A function called to read the contents to be written - method should receive length of data as a value and return bytes (in the requested amount) to write. :param optional int shareAccessMode: Binary flags stating what file access permissions we would like to allow other processes to have when accessing our opened file. :param optional int mode: Binary flags indicating what file operation we expect to happen when we open our file. :param optional int offset: An offset for writing data to the file (used like `seek`). :param optional str password: A password for password protected files & shares (Not Implemented in SMBv3). :return: None :raise SessionError: If encountered an error. r3N)r% stor_filerrrrrr7rCrCrDputFiles zSMBConnection.putFilec Csz=|tjkr#|s|j||}t|WS|jj|||d}|WS|s2|j||}t|WS|jj|||d}|WStjtjfyV}z t| | d}~ww)ad Queries the desired information class of an opened file/directory. :param HANDLE treeId: A valid handle for the share where the file is to be queried. :param HANDLE fileId: A valid handle for the file/directory to be queried. :param optional int fileInfoClass: The desired file information class to query. :return: An smb.SMBQueryFileStandardInfo structure if not given any file info class. Otherwise, returns raw bytes - which can be converted into any file information struct by the user. :raise SessionError: If encountered an error. ) fileInfoClassN) r7rr r%query_file_infoSMBQueryFileStandardInfo queryInforrrr)r:rrr<r[rrCrCrDr?s    zSMBConnection.queryInfoc Csnz|tjkr|jj||||dWS|jj||||dWStjtjfy6}z t|| d}~ww)aG Set the given information data of the desired file information class onto the file/directory. :param HANDLE treeId: A valid handle for the share where the file to be modified resides. :param HANDLE fileId: A valid handle for the file/directory to be modified. :param int fileInfoClass: The desired file information class to modify. :param struct infoData: The desired file information data to set onto the file/directory. :return: Underlying connection set info result. :raise SessionError: If encountered an error. )r<file_info_data) inputBlobr<N) r7rr r% set_file_infosetInforrrr)r:rrr<infoDatarrCrCrDrCs zSMBConnection.setInfoc Cr+)a Creates a directory. :param str shareName: A valid name for the share where the directory is to be created. :param str pathName: The path name or the directory to create. :return: None :raise SessionError: If encountered an error. N)r%mkdirrrrrrr0rCrCrDcreateDirectoryr.zSMBConnection.createDirectoryc Cr+)a Deletes a directory. :param str shareName: A valid name for the share where directory is to be deleted. :param str pathName: The path name or the directory to delete. :return: None :raise SessionError: If encountered an error. N)r%rmdirrrrrrr0rCrCrDdeleteDirectoryr.zSMBConnection.deleteDirectoryc CsHz |jj|||dWStjtjfy#}z t||d}~ww)a; Waits for a named pipe. :param HANDLE treeId: A valid handle for the share where the pipe is. :param str pipeName: The pipe name to check. :param optional int timeout: Time to wait for an answer. :return: None :raise SessionError: If encountered an error. )r?N)r% waitNamedPiperrrrr)r:rpipeNamer?rrCrCrDrJ s  zSMBConnection.waitNamedPipec CsJz |jj||||dWStjtjfy$}z t||d}~ww)a Writes to a named pipe using a transaction command. :param HANDLE treeId: A valid handle for the share where the pipe is. :param HANDLE fileId: A valid handle for the pipe. :param bytes data: A buffer with the data to write. :param bool waitAnswer: Whether or not to wait for an answer. :return: None :raise SessionError: If encountered an error. ) waitAnswerN)r%TransactNamedPiperrrrrr:rrrHrLrrCrCrDtransactNamedPipes  zSMBConnection.transactNamedPipec Cs@z|jWStjtjfy}z t||d}~ww)z Reads from a named pipe using a transaction command. :return: The data read from the remote pipe. :raise SessionError: If encountered an error. N)r%TransactNamedPipeRecvrrrrrrrCrCrDtransactNamedPipeRecv.s  z#SMBConnection.transactNamedPipeRecvc Cslz|tjkr|jj||||ddWS||||dWStjtjfy5}z t|| d}~ww)a Writes to a named pipe. :param HANDLE treeId: A valid handle for the share where the pipe is. :param HANDLE fileId: A valid handle for the pipe. :param bytes data: A buffer with the data to write. :param optional bool waitAnswer: Whether or not to wait for an answer. :return: None :raise SessionError: If encountered an error. T) wait_answerwrite_pipe_moderN) r7rr r% write_andxrrrrrrNrCrCrDwriteNamedPipe:s zSMBConnection.writeNamedPipec CsHz |j|||ddWStjtjfy#}z t||d}~ww)aj Reads from a named pipe. :param HANDLE treeId: A valid handle for the share where the pipe resides. :param HANDLE fileId: A valid handle for the pipe. :param optional int bytesToRead: The amount of data to read. :return: The bytes read from the named pipe. :raise SessionError: If encountered an error. T)r#r$N)r*rrrrr)r:rrr#rrCrCrD readNamedPipeNrzSMBConnection.readNamedPipec CsP|ttttfvrttjd|j||t t Bt Bt Bt BdtttBd}zt|jj||tjtjdd}WntjtjfyV}z|||t||d}~ww|ddkrzt|jj||tjtj|ddd}Wntjtjfy}z|||t||d}~ww|||ttd|d d d S) a[ Lists the VSS snapshots for the given directory on the remote share. :param HANDLE tid: A vaild handle for the share where the path resides. :param str path: A path of a directory to list the snapshots of. :return list: List of snapshot identifiers. :raise SessionError: If encountered an error. rN)rrr )rmaxOutputResponseSnapShotArraySize4 SnapShotsutf16) r7r r r rrrSTATUS_NOT_SUPPORTEDrrrrrrrrr rSRV_SNAPSHOT_ARRAYr%ioctlFSCTL_SRV_ENUMERATE_SNAPSHOTSSMB2_0_IOCTL_IS_FSCTLrrr-rrlistfilterdecodesplit)r:tidrfid snapshotDatarrCrCrD listSnapshots_s6       zSMBConnection.listSnapshotscCs|tttfvrttjd|j||tt Bt d}| dr%| d}nd| d}| d}t }|d|d|d<t||d<t|d |d <t||d <|jj||t jt j|d |||d S)ah Creates a mount point at an existing directory :param HANDLE tid: A vaild handle for the share where the path resides. :param str path: A path to a directory at which to create mount point (must already exist). :param str target: A target address of mount point. :raise SessionError: If encountered an error. rWrrrz\??\s PathBufferSubstituteNameLengthrbPrintNameOffsetPrintNameLengthrrAN)r7r r r rrr`rrrr startswithrr"MOUNT_POINT_REPARSE_DATA_STRUCTURErr%rbFSCTL_SET_REPARSE_POINTrdr-)r:rirtargetrj fixed_namer reparseDatarCrCrDcreateMountPoints$      zSMBConnection.createMountPointc Cs|tttfvrttjd|j||tt Bt d}t }d|d<z|j j||t jt j|dWntjtjfyP}z|||t||d}~ww|||dS)a' Removes a mount point without deleting the underlying directory. :param HANDLE tid: A vaild handle for the share where the path resides. :param str path: A path to a directory to remote a mount point from. :raise SessionError: If encountered an error. rWrmr DataBufferrrN)r7r r r rrr`rrrrr'MOUNT_POINT_REPARSE_GUID_DATA_STRUCTUREr%rbFSCTL_DELETE_REPARSE_POINTrdrrr-rr)r:rirrjrxrrCrCrDremoveMountPoints"   zSMBConnection.removeMountPointc Cr)am Renames a file/directory. :param str shareName: The name for the share where the files/directories are. :param str oldPath: The old path name of the directory/file to rename. :param str newPath: The new path name of the directory/file to rename. :return: True :raise SessionError: If encountered an error. N)r%renamerrrrr)r:roldPathnewPathrrCrCrDr~rzSMBConnection.renamec Csl|\}}}}}}}}||j|jdur)||||||||j|||j dS|||||||jdS)ay Reconnects the SMB object based on the original options and credentials used. Only exception is that manualNegotiate will not be honored. Not only the connection will be created but also a login attempt using the original credentials and method (Kerberos, PtH, etc) :return: True :raise SessionError: If encountered an error. T) rr9r-r0rr1r2rr3) r:userNamerrrrrrrrCrCrD reconnects   zSMBConnection.reconnectc Crr{)r% set_timeoutrrrrr)r:r?rrCrCrD setTimeoutrzSMBConnection.setTimeoutcCs"|tjkr |jS|jSr{)r7rr r%get_session_key getSessionKeyr|rCrCrDrs  zSMBConnection.getSessionKeycCs&|tjkr |j|S|j|Sr{)r7rr r%set_session_key setSessionKey)r:keyrCrCrDrs  zSMBConnection.setSessionKeycCs|j|||Sr{)r%set_hostname_validation)r:validate accept_emptyhostnamerCrCrDsetHostnameValidationsz#SMBConnection.setHostnameValidationcCs$z|WnY|jdS)z] Logs off and closes the underlying _NetBIOSSession() :return: None N)rr% close_sessionr|rCrCrDr,s  zSMBConnection.closec Cs |j|||ttBtB|||dS)zs retrieve regular files and also those locked with open (weak) handles by remote process ( #1894 ) )r5r4rr)r9rr r!)r:rr r8r4rrrCrCrD getFileEx szSMBConnection.getFileEx)TrrN)r#r#r#T)r#r#r#r#NNNTr{)r)rNT)rI)T)U__name__ __module__ __qualname____doc__rrNrErr5FLAGS1_PATHCASELESSFLAGS1_CANONICALIZED_PATHSrkrqrrr9rSr}rr7rrrrrrrrrrrrrrrrrrrrrrrrrrrr r!rrrrSMB2_IL_IMPERSONATIONSMB2_OPLOCK_LEVEL_NONErrrrrrr*r-r1r9r;r?rCrFrHrJrOrQrUrVrlryr}r~rrrrrr,rrCrCrCrDr".s   F ,  9   C C 1     '% r"c@s:eZdZdZdddZddZddZd d Zd d Zd S)rz This is the exception every client should catch regardless of the underlying SMB version used. We'll take care of that. NETBIOS exceptions are NOT included, since all SMB versions share the same NETBIOS instances. rcCst|||_||_dSr{)rUrErr])r:rr]rCrCrDrEs  zSessionError.__init__cCrzr{rWr|rCrCrDr r~zSessionError.getErrorCodecCrzr{)r]r|rCrCrDgetErrorPacket#r~zSessionError.getErrorPacketcCs tj|jSr{)rERROR_MESSAGESrr|rCrCrDgetErrorString&rzSessionError.getErrorStringcCsF|j}|tjvrtj|d}tj|d}d|j||fSd|jS)NrrIz&SMB SessionError: code: 0x%x - %s - %sz*SMB SessionError: unknown error code: 0x%x)rrr)r:rerror_msg_shorterror_msg_verboserCrCrD__str__)s   zSessionError.__str__N)rr) rrrrrErrrrrCrCrCrDrs  r))rrdimpacketrrrrrr impacket.ntlmrr impacket.smbr impacket.smb3structsr r r rrrrrrrrrrrrrrrrrrr r!r"rUrrCrCrCrDs*    ,n