| 458 | |
| 459 | |
| 460 | class SMBNegotiate_Response_Security(_SMBNegotiate_Response): |
| 461 | name = "SMB Negotiate Non-Extended Security Response (SMB)" |
| 462 | WordCount = 0x11 |
| 463 | fields_desc = SMBNegotiate_Response_NoSecurity.fields_desc[:12] + [ |
| 464 | LEFieldLenField( |
| 465 | "ByteCount", |
| 466 | None, |
| 467 | length_of="DomainName", |
| 468 | adjust=lambda pkt, x: x |
| 469 | + 2 |
| 470 | + _len(pkt, "Challenge") |
| 471 | + _len(pkt, "ServerName"), |
| 472 | ), |
| 473 | XStrLenField( |
| 474 | "Challenge", |
| 475 | b"", # aka EncryptionKey |
| 476 | length_from=lambda pkt: pkt.ChallengeLength, |
| 477 | ), |
| 478 | _SMBStrNullField("DomainName", "WORKGROUP"), |
| 479 | _SMBStrNullField("ServerName", "RMFF1"), |
| 480 | ] |
| 481 | |
| 482 | |
| 483 | bind_top_down(SMB_Header, SMBNegotiate_Response_Security, Command=0x72, Flags=0x80) |
nothing calls this directly
no test coverage detected
searching dependent graphs…