Class: Rex::Proto::RFB::Client
- Inherits:
-
Object
- Object
- Rex::Proto::RFB::Client
- Defined in:
- lib/rex/proto/rfb/client.rb
Instance Attribute Summary collapse
-
#auth_types ⇒ Object
readonly
Returns the value of attribute auth_types.
-
#error ⇒ Object
readonly
Returns the value of attribute error.
-
#majver ⇒ Object
readonly
Returns the value of attribute majver.
-
#minver ⇒ Object
readonly
Returns the value of attribute minver.
-
#view_only ⇒ Object
readonly
Returns the value of attribute view_only.
Instance Method Summary collapse
- #authenticate(password = nil) ⇒ Object
- #connect(password = nil) ⇒ Object
- #handshake ⇒ Object
-
#initialize(sock, opts = {}) ⇒ Client
constructor
A new instance of Client.
- #negotiate_authentication ⇒ Object
- #negotiate_vnc_auth(password = nil) ⇒ Object
- #read_error_message ⇒ Object
- #send_client_init ⇒ Object
Constructor Details
#initialize(sock, opts = {}) ⇒ Client
Returns a new instance of Client.
22 23 24 25 26 27 28 29 30 |
# File 'lib/rex/proto/rfb/client.rb', line 22 def initialize(sock, opts = {}) @sock = sock @opts = opts @banner = nil @majver = MajorVersions @minver = -1 @auth_types = [] end |
Instance Attribute Details
#auth_types ⇒ Object (readonly)
Returns the value of attribute auth_types.
204 205 206 |
# File 'lib/rex/proto/rfb/client.rb', line 204 def auth_types @auth_types end |
#error ⇒ Object (readonly)
Returns the value of attribute error.
204 205 206 |
# File 'lib/rex/proto/rfb/client.rb', line 204 def error @error end |
#majver ⇒ Object (readonly)
Returns the value of attribute majver.
204 205 206 |
# File 'lib/rex/proto/rfb/client.rb', line 204 def majver @majver end |
#minver ⇒ Object (readonly)
Returns the value of attribute minver.
204 205 206 |
# File 'lib/rex/proto/rfb/client.rb', line 204 def minver @minver end |
#view_only ⇒ Object (readonly)
Returns the value of attribute view_only.
205 206 207 |
# File 'lib/rex/proto/rfb/client.rb', line 205 def view_only @view_only end |
Instance Method Details
#authenticate(password = nil) ⇒ Object
90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 |
# File 'lib/rex/proto/rfb/client.rb', line 90 def authenticate(password = nil) type = negotiate_authentication return false if not type # Authenticate. case type when AuthType::None # Nothing here. when AuthType::VNC return false if not negotiate_vnc_auth(password) end # Handle reading the security result message result = @sock.get_once(4) if not result @error = "Unable to read auth result" return false end result = result.unpack('N').first case result when 0 return true when 1 if @minver >= 8 msg = @error = "Authentication failed: #{msg}" else @error = "Authentication failed" end when 2 @error = "Too many authentication attempts" else @error = "Unknown authentication result: #{result}" end false end |
#connect(password = nil) ⇒ Object
75 76 77 78 79 80 |
# File 'lib/rex/proto/rfb/client.rb', line 75 def connect(password = nil) return false if not handshake return false if not authenticate(password) return false if not send_client_init true end |
#handshake ⇒ Object
40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 |
# File 'lib/rex/proto/rfb/client.rb', line 40 def handshake @banner = @sock.get_once(12) if not @banner @error = "Unable to obtain banner from server" return false end # RFB Protocol Version 3.3 (1998-01) # RFB Protocol Version 3.7 (2003-08) # RFB Protocol Version 3.8 (2007-06) if @banner =~ /RFB ([0-9]{3})\.([0-9]{3})/ maj = $1.to_i unless MajorVersions.include?(maj) @error = "Invalid major version number: #{maj}" return false end else @error = "Invalid RFB banner: #{@banner}" return false end @minver = $2.to_i # Forces version 3 to be used. This adds support for version 4 servers. # It may be necessary to hardcode minver as well. # TODO: Add support for Version 4. # Version 4 adds additional information to the packet regarding supported # authentication types. our_ver = "RFB %03d.%03d\n" % [3, @minver] @sock.put(our_ver) true end |
#negotiate_authentication ⇒ Object
132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 |
# File 'lib/rex/proto/rfb/client.rb', line 132 def negotiate_authentication # Authentication type negotiation is protocol version specific. if @minver < 7 buf = @sock.get_once(4) if not buf @error = "Unable to obtain requested authentication method" return nil end @auth_types = buf.unpack('N') if not @auth_types or @auth_types.first == 0 msg = @error = "No authentication types available: #{msg}" return nil end else buf = @sock.get_once(1) if not buf @error = "Unable to obtain supported authentication method count" return nil end # first byte is number of security types num_types = buf.unpack("C").first if (num_types == 0) msg = @error = "No authentication types available: #{msg}" return nil end buf = @sock.get_once(num_types) if not buf or buf.length != num_types @error = "Unable to read authentication types" return nil end @auth_types = buf.unpack("C*") end if not @auth_types or @auth_types.length < 1 @error = "No authentication types found" return nil end # Select the one we prefer selected = nil selected ||= AuthType::None if @opts[:allow_none] and @auth_types.include? AuthType::None selected ||= AuthType::VNC if @auth_types.include? AuthType::VNC if not selected @error = "No supported authentication method found." return nil end # For 3.7 and later, clients must state which security-type to use @sock.put([selected].pack('C')) if @minver >= 7 selected end |
#negotiate_vnc_auth(password = nil) ⇒ Object
191 192 193 194 195 196 197 198 199 200 201 202 |
# File 'lib/rex/proto/rfb/client.rb', line 191 def negotiate_vnc_auth(password = nil) challenge = @sock.get_once(16) if not challenge or challenge.length != 16 @error = "Unable to obtain VNC challenge" return false end response = Cipher.encrypt(challenge, password) @sock.put(response) true end |
#read_error_message ⇒ Object
32 33 34 35 36 37 38 |
# File 'lib/rex/proto/rfb/client.rb', line 32 def len = @sock.get_once(4) return 'Unknown error' if not len or len.length != 4 len = len.unpack("N").first @sock.get_once(len) end |
#send_client_init ⇒ Object
82 83 84 85 86 87 88 |
# File 'lib/rex/proto/rfb/client.rb', line 82 def send_client_init if @opts[:exclusive] @sock.put("\x00") # do share. else @sock.put("\x01") # do share. end end |