responder

Documentation

Index

• func GetChallenge(pd []byte) []byte
• func IsNTLM(pd []byte) bool
• type MessageType
  • func GetMessageType(pd []byte) MessageType
• type NTLMMessage2
• type NTLMMessage3
• type NTLMMessageHeader
• type NTLMResult
  • func NewNTLMResult(pd []byte, challenge []byte) (*NTLMResult, error)
  • func (nr NTLMResult) String() string
• type NTLMSource
• type OffsetData
• type Producer
  • func (p *Producer) GatherSMBHashes(ctx context.Context) error

Functions

func GetChallenge

func GetChallenge(pd []byte) []byte

func IsNTLM

func IsNTLM(pd []byte) bool

Types

type MessageType

type MessageType uint32

const (
	NtLmNegotiate MessageType = iota + 1
	NtLmChallenge
	NtLmAuthenticate
	MessageUndefined
)

func GetMessageType

func GetMessageType(pd []byte) MessageType

type NTLMMessage2

type NTLMMessage2 struct {
	NTLMMessageHeader
	Target    OffsetData
	Flags     uint32
	Challenge []byte `bin:"len:8"`
}

type NTLMMessage3

type NTLMMessage3 struct {
	NTLMMessageHeader
	LMHash          OffsetData
	NTLMHash        OffsetData
	TargetName      OffsetData
	UserName        OffsetData
	WorkStationName OffsetData
	SessionKey      OffsetData
	Flags           uint32
	OSVersion       []byte `bin:"len:8"`
}

type NTLMMessageHeader

type NTLMMessageHeader struct {
	Header      []byte `bin:"len:8"`
	MessageType uint32
}

type NTLMResult

type NTLMResult struct {
	User, WorkStation, Target string
	Challenge                 []byte
	Hash                      []byte
	MoreHash                  []byte
	GatheredFrom              NTLMSource
}

func NewNTLMResult

func NewNTLMResult(pd []byte, challenge []byte) (*NTLMResult, error)

func (NTLMResult) String

func (nr NTLMResult) String() string

type NTLMSource

type NTLMSource string

const (
	SMB NTLMSource = "SMB"
)

type OffsetData

type OffsetData struct {
	Length uint16
	Space  uint16
	Offset uint32
	Data   []byte `bin:"len:Length,offsetStart:Offset,offsetRestore:true"`
}

type Producer

type Producer struct {
	Results chan *NTLMResult
}

func (*Producer) GatherSMBHashes

func (p *Producer) GatherSMBHashes(ctx context.Context) error