Module: Rex::Proto::Gss::Asn1

Included in:
Msf::Exploit::Remote::Kerberos::ServiceAuthenticator::Base, Kerberos::Crypto::Rc4Hmac
Defined in:
lib/rex/proto/gss/asn1.rb

Instance Method Summary collapse

Instance Method Details

#unwrap_pseudo_asn1(token) ⇒ Object

GSS has some “pseudo-asn1” to wrap up tokens. This function parses that wrapping, extracts the mechanism specified, and returns it and the token following it



5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
 
# File 'lib/rex/proto/gss/asn1.rb', line 5

def unwrap_pseudo_asn1(token)
  start_of_token = nil
  mech_id = nil
  # This bit is pseudo-ASN1 - we parse up until the OID, then take note of where we got up 
  # to, and continue parsing from there.
  OpenSSL::ASN1.traverse(token) do | depth, offset, header_len, length, constructed, tag_class, tag|
    component = token[offset, header_len+length]
    if depth == 1 && tag_class == :UNIVERSAL && tag == 6
      mech_id = OpenSSL::ASN1.decode(component)
      start_of_token = offset+header_len+length
      break
    end
  end

  [mech_id, token[start_of_token, token.length - start_of_token]]
end

#wrap_pseudo_asn1(mech_id, token) ⇒ Object 



22
23
24
25
26
27
28
29
30
31
 
# File 'lib/rex/proto/gss/asn1.rb', line 22

def wrap_pseudo_asn1(mech_id, token)
  OpenSSL::ASN1::ASN1Data.new(
    [
      mech_id,
      token
    ],
    0,
    :APPLICATION
  ).to_der
end