Class: PacketGen::Plugin::NTLM::Challenge

Inherits:

PacketGen::Plugin::NTLM

• Object
• Types::Fields
• PacketGen::Plugin::NTLM
• PacketGen::Plugin::NTLM::Challenge

Defined in:

lib/packetgen/plugin/ntlm/challenge.rb

Overview

NTLM Challenge message

Author:

• Sylvain Daubert

Constant Summary

Constants inherited from PacketGen::Plugin::NTLM

AVPAIR_TYPES, EOLAvPair, Int32leAvPair, SIGNATURE, StringAvPair, TYPES, TimestampAvPair, VOID_CHALLENGE, VOID_VERSION

Negotiate flags

• #always_sign? ⇒ Boolean

  Also known as flags_m?.

• #anonymous? ⇒ Boolean

  Also known as flags_j?.

• #datagram? ⇒ Boolean

  Also known as flags_f?.

• #ext_session_security? ⇒ Boolean

  Also known as flags_p?.

• #identify? ⇒ Boolean

  Also known as flags_q.

• #key_exch? ⇒ Boolean

  Also known as flags_v?.

• #lm_key? ⇒ Boolean

  Also known as flags_g?.

• #nego128? ⇒ Boolean

  Also known as flags_u?.

• #nego56? ⇒ Boolean

  Also known as flags_w?.

• #non_nt_session_key? ⇒ Boolean

  Also known as flags_r?.

• #ntlm? ⇒ Boolean

  Also known as flags_h?.

• #oem? ⇒ Boolean

  Also known as flags_b?.

• #oem_domain_supplied? ⇒ Boolean

  Also known as flags_k?.

• #oem_target_info_supplied? ⇒ Boolean

  Also known as flags_l?.

• #request_target? ⇒ Boolean

  Also known as flags_c?.

• #seal? ⇒ Boolean

  Also known as flags_e?.

• #sign? ⇒ Boolean

  Also known as flags_d?.

• #target_info? ⇒ Boolean

  Also known as flags_s?.

• #target_type_domain? ⇒ Boolean

  Also known as flags_n?.

• #target_type_server? ⇒ Boolean

  Also known as flags_o?.

• #unicode? ⇒ Boolean

  Also known as flags_a?.

• #version? ⇒ Integer

  Also known as flags_t.

Instance Attribute Summary

• #challenge ⇒ String

  64-bit value containing the NTLM challenge.

• #flags ⇒ Integer

  Negotiate flags.

• #reserved ⇒ Integer

  64-bit reserved field.

• #target_info ⇒ ArrayOfAvPair
• #target_info_len ⇒ Integer

  16-bit unsigned integer that defines the size in bytes of #target_info in #payload.

• #target_info_maxlen ⇒ Integer

  16-bit unsigned integer that should be equal to #target_info_len.

• #target_info_offset ⇒ Integer

  A 32-bit unsigned integer that defines the offset, in bytes, from the beginning of the CHALLENGE MESSAGE to #target_info in #payload.

• #target_name ⇒ SMB::String

  Name of the server authentication realm.

• #target_name_len ⇒ Integer

  16-bit unsigned integer that defines the size in bytes of #target_name in #payload.

• #target_name_maxlen ⇒ Integer

  16-bit unsigned integer that should be equal to #target_name_len.

• #target_name_offset ⇒ Integer

  A 32-bit unsigned integer that defines the offset, in bytes, from the beginning of the CHALLENGE MESSAGE to #target_name in #payload.

• #version ⇒ String

  8-byte version information.

Attributes inherited from PacketGen::Plugin::NTLM

#payload, #signature, #type

Method Summary

Methods inherited from PacketGen::Plugin::NTLM

#calc_length, define_in_payload, define_negotiate_flags, #initialize, read, #read, #to_s

Constructor Details

This class inherits a constructor from PacketGen::Plugin::NTLM

Instance Attribute Details

#always_sign? ⇒ Boolean

Also known as flags_m?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#anonymous? ⇒ Boolean

Also known as flags_j?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#challenge ⇒ String

64-bit value containing the NTLM challenge.

Returns:

• (String)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 111

define_field_before :payload, :challenge, PacketGen::Types::String, static_length: 8, default: VOID_CHALLENGE

#datagram? ⇒ Boolean

Also known as flags_f?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#ext_session_security? ⇒ Boolean

Also known as flags_p?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#flags ⇒ Integer

Negotiate flags

Returns:

• (Integer)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 34

#identify? ⇒ Boolean

Also known as flags_q

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#key_exch? ⇒ Boolean

Also known as flags_v?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#lm_key? ⇒ Boolean

Also known as flags_g?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#nego128? ⇒ Boolean

Also known as flags_u?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#nego56? ⇒ Boolean

Also known as flags_w?.

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#non_nt_session_key? ⇒ Boolean

Also known as flags_r?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#ntlm? ⇒ Boolean

Also known as flags_h?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#oem? ⇒ Boolean

Also known as flags_b?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#oem_domain_supplied? ⇒ Boolean

Also known as flags_k?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#oem_target_info_supplied? ⇒ Boolean

Also known as flags_l?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#request_target? ⇒ Boolean

Also known as flags_c?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#reserved ⇒ Integer

64-bit reserved field

Returns:

• (Integer)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 115

define_field_before :payload, :reserved, PacketGen::Types::Int64le

#seal? ⇒ Boolean

Also known as flags_e?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#sign? ⇒ Boolean

Also known as flags_d?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#target_info ⇒ ArrayOfAvPair

Returns:

• (ArrayOfAvPair)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 132

define_in_payload :target_info, ArrayOfAvPair

#target_info? ⇒ Boolean

Also known as flags_s?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#target_info_len ⇒ Integer

16-bit unsigned integer that defines the size in bytes of #target_info in PacketGen::Plugin::NTLM#payload. This field is set only if #target_info? is set.

Returns:

• (Integer)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 132

define_in_payload :target_info, ArrayOfAvPair

#target_info_maxlen ⇒ Integer

16-bit unsigned integer that should be equal to #target_info_len.

Returns:

• (Integer)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 132

define_in_payload :target_info, ArrayOfAvPair

#target_info_offset ⇒ Integer

A 32-bit unsigned integer that defines the offset, in bytes, from the beginning of the CHALLENGE MESSAGE to #target_info in PacketGen::Plugin::NTLM#payload. This field is set only if #target_info? is set.

Returns:

• (Integer)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 132

define_in_payload :target_info, ArrayOfAvPair

#target_name ⇒ SMB::String

Name of the server authentication realm. Must be expressed in the negotiated character set.

Returns:

• (SMB::String)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 32

define_in_payload :target_name, SMB::String, null_terminated: false

#target_name_len ⇒ Integer

16-bit unsigned integer that defines the size in bytes of #target_name in PacketGen::Plugin::NTLM#payload. This field is set only if #request_target? is set.

Returns:

• (Integer)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 32

define_in_payload :target_name, SMB::String, null_terminated: false

#target_name_maxlen ⇒ Integer

16-bit unsigned integer that should be equal to #target_name_len.

Returns:

• (Integer)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 32

define_in_payload :target_name, SMB::String, null_terminated: false

#target_name_offset ⇒ Integer

A 32-bit unsigned integer that defines the offset, in bytes, from the beginning of the CHALLENGE MESSAGE to #target_name in PacketGen::Plugin::NTLM#payload. This field is set only if #request_target? is set.

Returns:

• (Integer)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 32

define_in_payload :target_name, SMB::String, null_terminated: false

#target_type_domain? ⇒ Boolean

Also known as flags_n?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#target_type_server? ⇒ Boolean

Also known as flags_o?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#unicode? ⇒ Boolean

Also known as flags_a?

Returns:

• (Boolean)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags

#version ⇒ String

8-byte version information

Returns:

• (String)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 137

define_field_before :payload, :version, PacketGen::Types::String, static_length: 8, default: VOID_VERSION

#version? ⇒ Integer

Also known as flags_t

Returns:

• (Integer)

# File 'lib/packetgen/plugin/ntlm/challenge.rb', line 105

define_negotiate_flags