o j @sJddlZddlZddlZddlmZddlmZddlmZddl m Z ddl m Z m Z GdddZed kr#eejejd d d Zejd dddejddddejddddedZejdddddejdddddejdddgd dd!d"d#ed$Zejd%dd&d'dejd(dd)dejd*dd+dejd,dd-d.deejd/kreed/eZeejejeej \Z!Z"Z#Z$e!durd0Z!ej%dure$e_%ej&durd e_'e#d0kre"d0krej(durej)d1urej&durdd2l*m*Z*e*d3Z#ee"e#e!ej(ej&ej'ej+e,ej-Z.e./e$ej%dSdS)4N)logger) parse_target)version) bin_to_string) transportdsspc @sveZdZejjdejjdejjdejjdejj dejj diZ  dd d Z d dZ ddZddZddZddZdS) MachineRolezStandalone WorkstationzDomain-joined WorkstationzStandalone ServerzDomain-joined ServerzBackup Domain ControllerzPrimary Domain ControllerNFc CsX||_||_||_d|_d|_||_||_||_||_|dur*| d\|_|_dSdS)Nr :) _MachineRole__username_MachineRole__password_MachineRole__domain_MachineRole__lmhash_MachineRole__nthash_MachineRole__aesKey_MachineRole__doKerberos_MachineRole__kdcHost_MachineRole__portsplit) selfusernamepassworddomainhashesaesKey doKerberoskdcHostportr/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/../../../bin/machine_role.py__init__3szMachineRole.__init__c Csz|||}Wnty!}z |t|WYd}~nd}~wwz||}WntyB}z |t|WYd}~nd}~ww|D] \}}td||fqG|dS)Nz%s: %s)_MachineRole__authenticate Exception_MachineRole__log_and_exitstr_MachineRole__fetchitemsprint disconnect)r remoteName remoteHostdceeoutputkeyvaluerrr print_infoBs zMachineRole.print_infocCs$|||}||tj|S)N)_MachineRole__get_transportconnectbindrMSRPC_UUID_DSSP)rr*r+r,rrr __authenticateRs  zMachineRole.__authenticatecCsxd|}td|t|}||j||t|dr0||j |j |j |j |j |j||j|j|S)Nzncacn_np:%s[\pipe\lsarpc]zStringBinding %sset_credentials)loggingdebugrDCERPCTransportFactory set_dportr setRemoteHosthasattrr7r r rrrr set_kerberosrr get_dce_rpc)rr*r+ stringbinding rpctransportrrr __get_transportZs    zMachineRole.__get_transportcCsi}t|d}|j|ddd|d<|ddd|d<|ddd|d <|ddd |d <t|ddd |d <|S)N DomainInfoDomainInfoBasicrz Machine RoleDomainNameFlatzNetBIOS Domain Name DomainNameDnsz Domain NameDomainForestNamez Forest Name DomainGuidz Domain GUID)r#hDsRolerGetPrimaryDomainInformation MACHINE_ROLESr)rr,r. domain_inforrr __fetchis zMachineRole.__fetchcCstd|tddS)Nz Error while enumerating host: %srC)r8criticalsysexit)rerrorrrr __log_and_exituszMachineRole.__log_and_exit)r r r NNFNr )__name__ __module__ __qualname__rDSROLE_MACHINE_ROLE DsRole_RoleStandaloneWorkstationDsRole_RoleMemberWorkstationDsRole_RoleStandaloneServerDsRole_RoleMemberServer!DsRole_RoleBackupDomainController"DsRole_RolePrimaryDomainControllerrKr!r1r"r2r&r$rrrr r"s,  r__main__Tz=Retrieve a host's role along with its primary domain details.)add_help descriptiontargetstorez6[[domain/]username[:password]@])actionhelpz-ts store_truez&Adds timestamp to every logging outputz-debugzTurn DEBUG output ON connectionz-dc-ipz ip addresszoIP Address of the domain controller. If ommited it use the domain part (FQDN) specified in the target parameter)rbmetavarrcz -target-ipzIP Address of the target machine. If ommited it will use whatever was specified as target. This is useful when target is the NetBIOS name and you cannot resolve itz-port139445?zdestination portz)Destination port to connect to SMB Server)choicesnargsdefaultrfrcauthenticationz-hashesz LMHASH:NTHASHz$NTLM hashes, format is LMHASH:NTHASHz-no-passz&don't ask for password (useful for -k)z-kzUse Kerberos authentication. Grabs credentials from ccache file (KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the ones specified in the command linez-aesKeyzhex keyzsX     W      8 $