| | | 1 | | using System; |
| | | 2 | | using System.Collections.Generic; |
| | | 3 | | using System.Linq; |
| | | 4 | | using System.Runtime.InteropServices; |
| | | 5 | | using SharpHoundRPC.Handles; |
| | | 6 | | |
| | | 7 | | namespace SharpHoundRPC.NetAPINative |
| | | 8 | | { |
| | | 9 | | public static class NetAPIMethods |
| | | 10 | | { |
| | | 11 | | private const int NetWkstaUserEnumQueryLevel = 1; |
| | | 12 | | private const int NetSessionEnumLevel = 10; |
| | | 13 | | private const int NetWkstaGetInfoQueryLevel = 100; |
| | | 14 | | |
| | | 15 | | [DllImport("netapi32.dll")] |
| | | 16 | | internal static extern NetAPIEnums.NetAPIStatus NetApiBufferFree( |
| | | 17 | | IntPtr buffer); |
| | | 18 | | |
| | | 19 | | public static NetAPIResult<IEnumerable<NetWkstaUserEnumResults>> NetWkstaUserEnum(string computerName) |
| | 0 | 20 | | { |
| | 0 | 21 | | var resumeHandle = 0; |
| | 0 | 22 | | var result = NetWkstaUserEnum(computerName, NetWkstaUserEnumQueryLevel, out var buffer, -1, |
| | 0 | 23 | | out var entriesRead, out _, ref resumeHandle); |
| | | 24 | | |
| | 0 | 25 | | if (result != NetAPIEnums.NetAPIStatus.Success && result != NetAPIEnums.NetAPIStatus.ErrorMoreData) |
| | 0 | 26 | | return result; |
| | | 27 | | |
| | 0 | 28 | | return NetAPIResult<IEnumerable<NetWkstaUserEnumResults>>.Ok(buffer |
| | 0 | 29 | | .GetEnumerable<NetAPIStructs.WkstaUserInfo1>(entriesRead) |
| | 0 | 30 | | .Select(x => new NetWkstaUserEnumResults(x.Username, x.LogonDomain))); |
| | 0 | 31 | | } |
| | | 32 | | |
| | | 33 | | [DllImport("netapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)] |
| | | 34 | | private static extern NetAPIEnums.NetAPIStatus NetWkstaUserEnum( |
| | | 35 | | string servername, |
| | | 36 | | int level, |
| | | 37 | | out NetAPIPointer buffer, |
| | | 38 | | int preferredMaxLength, |
| | | 39 | | out int entriesRead, |
| | | 40 | | out int totalEntries, |
| | | 41 | | ref int resumeHandle); |
| | | 42 | | |
| | | 43 | | public static NetAPIResult<IEnumerable<NetSessionEnumResults>> NetSessionEnum(string computerName) |
| | 0 | 44 | | { |
| | 0 | 45 | | var resumeHandle = 0; |
| | 0 | 46 | | var result = NetSessionEnum(computerName, null, null, NetSessionEnumLevel, out var buffer, -1, |
| | 0 | 47 | | out var entriesRead, out _, ref resumeHandle); |
| | | 48 | | |
| | 0 | 49 | | if (result != NetAPIEnums.NetAPIStatus.Success && result != NetAPIEnums.NetAPIStatus.ErrorMoreData) |
| | 0 | 50 | | return result; |
| | | 51 | | |
| | 0 | 52 | | return NetAPIResult<IEnumerable<NetSessionEnumResults>>.Ok(buffer |
| | 0 | 53 | | .GetEnumerable<NetAPIStructs.SessionInfo10>(entriesRead) |
| | 0 | 54 | | .Select(x => new NetSessionEnumResults(x.Username, x.CName))); |
| | 0 | 55 | | } |
| | | 56 | | |
| | | 57 | | [DllImport("NetAPI32.dll", SetLastError = true)] |
| | | 58 | | private static extern NetAPIEnums.NetAPIStatus NetSessionEnum( |
| | | 59 | | [MarshalAs(UnmanagedType.LPWStr)] string serverName, |
| | | 60 | | [MarshalAs(UnmanagedType.LPWStr)] string uncClientName, |
| | | 61 | | [MarshalAs(UnmanagedType.LPWStr)] string userName, |
| | | 62 | | int level, |
| | | 63 | | out NetAPIPointer buffer, |
| | | 64 | | int preferredMaxLength, |
| | | 65 | | out int entriesRead, |
| | | 66 | | out int totalEntries, |
| | | 67 | | ref int resumeHandle); |
| | | 68 | | |
| | | 69 | | public static NetAPIResult<NetAPIStructs.WorkstationInfo100> NetWkstaGetInfo(string computerName) |
| | 0 | 70 | | { |
| | 0 | 71 | | var result = NetWkstaGetInfo(computerName, NetWkstaGetInfoQueryLevel, out var buffer); |
| | | 72 | | |
| | 0 | 73 | | if (result != NetAPIEnums.NetAPIStatus.Success) return result; |
| | | 74 | | |
| | 0 | 75 | | return buffer.GetData<NetAPIStructs.WorkstationInfo100>(); |
| | 0 | 76 | | } |
| | | 77 | | |
| | | 78 | | [DllImport("netapi32.dll", SetLastError = true)] |
| | | 79 | | private static extern NetAPIEnums.NetAPIStatus NetWkstaGetInfo( |
| | | 80 | | [MarshalAs(UnmanagedType.LPWStr)] string serverName, |
| | | 81 | | uint level, |
| | | 82 | | out NetAPIPointer bufPtr); |
| | | 83 | | |
| | | 84 | | public static NetAPIResult<NetAPIStructs.DomainControllerInfo> DsGetDcName(string computerName, |
| | | 85 | | string domainName) |
| | 0 | 86 | | { |
| | 0 | 87 | | var result = DsGetDcName(computerName, domainName, null, null, |
| | 0 | 88 | | (uint) (NetAPIEnums.DSGETDCNAME_FLAGS.DS_IS_FLAT_NAME | |
| | 0 | 89 | | NetAPIEnums.DSGETDCNAME_FLAGS.DS_RETURN_DNS_NAME), out var buffer); |
| | 0 | 90 | | if (result != NetAPIEnums.NetAPIStatus.Success) return result; |
| | | 91 | | |
| | 0 | 92 | | return buffer.GetData<NetAPIStructs.DomainControllerInfo>(); |
| | 0 | 93 | | } |
| | | 94 | | |
| | | 95 | | [DllImport("Netapi32.dll", CharSet = CharSet.Auto, SetLastError = true)] |
| | | 96 | | private static extern NetAPIEnums.NetAPIStatus DsGetDcName |
| | | 97 | | ( |
| | | 98 | | [MarshalAs(UnmanagedType.LPTStr)] string computerName, |
| | | 99 | | [MarshalAs(UnmanagedType.LPTStr)] string domainName, |
| | | 100 | | [In] NetAPIStructs.GuidClass domainGuid, |
| | | 101 | | [MarshalAs(UnmanagedType.LPTStr)] string siteName, |
| | | 102 | | uint flags, |
| | | 103 | | out NetAPIPointer pDomainControllerInfo |
| | | 104 | | ); |
| | | 105 | | } |
| | | 106 | | } |