コード例 #1
0
 def isAdmin(self):
     rpctransport = SMBTransport(self.session.getRemoteHost(), 445, r'\svcctl', smb_connection=self.session)
     dce = rpctransport.get_dce_rpc()
     try:
         dce.connect()
     except:
         pass
     else:
         dce.bind(scmr.MSRPC_UUID_SCMR)
         try:
             # 0xF003F - SC_MANAGER_ALL_ACCESS
             # http://msdn.microsoft.com/en-us/library/windows/desktop/ms685981(v=vs.85).aspx
             ans = scmr.hROpenSCManagerW(dce,'{}\x00'.format(self.target.hostname),'ServicesActive\x00', 0xF003F)
             return "TRUE"
         except scmr.DCERPCException as e:
             pass
     return "FALSE"
コード例 #2
0
 def isAdmin(self):
     rpctransport = SMBTransport(self.session.getRemoteHost(), 445, r'\svcctl', smb_connection=self.session)
     dce = rpctransport.get_dce_rpc()
     try:
         dce.connect()
     except:
         pass
     else:
         dce.bind(scmr.MSRPC_UUID_SCMR)
         try:
             # 0xF003F - SC_MANAGER_ALL_ACCESS
             # http://msdn.microsoft.com/en-us/library/windows/desktop/ms685981(v=vs.85).aspx
             ans = scmr.hROpenSCManagerW(dce,'{}\x00'.format(self.target.hostname),'ServicesActive\x00', 0xF003F)
             return "TRUE"
         except scmr.DCERPCException as e:
             pass
     return "FALSE"
コード例 #3
0
ファイル: smb.py プロジェクト: topotam/ActiveReign
 def isAdmin(self):
     try:
         rpctransport = SMBTransport(self.host, self.port, r'\svcctl', smb_connection=self.con)
         dce = rpctransport.get_dce_rpc()
         try:
             dce.connect()
         except:
             pass
         else:
             dce.bind(scmr.MSRPC_UUID_SCMR)
             try:
                 # 0xF003F - SC_MANAGER_ALL_ACCESS
                 # http://msdn.microsoft.com/en-us/library/windows/desktop/ms685981(v=vs.85).aspx
                 ans = scmr.hROpenSCManagerW(dce, '{}\x00'.format(self.host), 'ServicesActive\x00', 0xF003F)
                 self.admin = True
                 return True
             except scmr.DCERPCException as e:
                 pass
     except Exception as e:
         print(e)
     return False