NAME

SMB::DCERPC - Minimal support for DCE/RPC protocol (over SMB)

SYNOPSIS

            

              
              
use SMB::DCERPC;
# in server
# on Create request (file srvsvc)
$openfile->{dcerpc} = SMB::DCERPC->new(name => 'srvsvc');
# on Write request (when $openfile->{dcerpc} set)
$status = $openfile->dcerpc->process_bind_request($request->buffer);
# on Read request (when $openfile->{dcerpc} set)
($payload, $status) = $openfile->dcerpc->generate_bind_ack_response;
# on Ioctl request (when $openfile->{dcerpc} set)
$openfile->dcerpc->process_rpc_request($request->buffer);
($payload, $status) = $openfile->dcerpc->generate_rpc_response;
# in client
# when sending Create request (file srvsvc)
$dcerpc = SMB::DCERPC->new(name => 'srvsvc');
# before sending Write request
($payload, $status) = $dcerpc->generate_bind_request;
# after sending Read request
$dcerpc->process_bind_ack_response($response->buffer)
        if $response->status == SMB::STATUS_SUCCESS;
# when sending Ioctl request
($payload, $status) = $dcerpc->generate_rpc_request('NetShareGetInfo', share_name => 'users');
$dcerpc->process_rpc_response($response->buffer, $rethash);
            
          

ABSTRACT

DCE/RPC is Distributed Computing Environment / Remote Procedure Call. Used in particular in Windows environment to obtain server or workstation service information.

SMB may be used as transport for DCE/RPC.

In SMB2, special files srvsvc (for server service) and wkssvc (for workstation service) are used in special IPC trees to make the calls. The flow is usually like this:

            

              
              
Create request (srvsvc)
Create response
Write request
        Bind
Write response
Read request
Read response
        Bind_ack
Ioctl request
        Operation NetShareGetInfo: input
Ioctl response
        Operation NetShareGetInfo: output
Close request
Close response
            
          

DESCRIPTION

This class implement basic DCE/RPC protocol for SMB client and server.

This is implemented as a state machine. A client must call:

            

              
              
generate_bind_request
process_bind_ack_response
generate_rpc_request
process_rpc_response
...
            
          

or just:

            

              
              
generate_packet
process_packet
...
            
          

A server must call:

            

              
              
process_bind_request
generate_bind_ack_response
process_rpc_request
generate_rpc_response
...
            
          

or just:

            

              
              
process_packet
generate_packet
...
            
          

The state is at any moment one of:

            

              
              
INITIAL
BIND
BIND_ACK
REQUEST
RESPONSE
            
          

This class inherits from SMB, so msg, err, mem, dump, auto-created field accessor and other methods are available as well.

METHODS

new

Class constructor. Creates an instance of SMB::DCERPC.

generate_bind_request

For client side. Returns DCERPC buffer for payload.

process_bind_request dcerpc_buffer

For server side.

generate_bind_ack_response

For server side. Returns DCERPC buffer for payload.

process_bind_ack_response dcerpc_buffer

For client side.

generate_rpc_request opnum params

For client side. Returns DCERPC buffer for payload.

process_rpc_request dcerpc_buffer

For server side.

generate_rpc_response [opnum params]

For server side. Returns DCERPC buffer for payload.

process_rpc_response dcerpc_buffer rethash

For client side.

generate_packet dcerpc_buffer [params]

This is a dispatcher (depending on the current state) to one of:

            

              
              
generate_bind_request
generate_bind_ack_response
generate_rpc_request
generate_rpc_response
            
          

process_packet [params]

This is a dispatcher (depending on the current state) to one of:

            

              
              
process_bind_request
process_bind_ack_request
process_rpc_request
process_rpc_response
            
          

INTERNAL METHODS

none

None

FUNCTIONS

No functions are exported, they may be called as SMB::DCERPC::FUNC_NAME.

none

None

SEE ALSO

SMB, SMB::Server, SMB::Client.

AUTHOR

Mikhael Goikhman <migo@cpan.org>

cpanm SMB

perl -MCPAN -e shell
install SMB