Method sr1_orpc_req

scapy/layers/msrpce/msdcom.py:1339–1422

Make an ORPC call. :param ipid: the reference to a specific interface on an object. :param pkt: the request to make. :param ssp: (optional) non default SSP to use to connect to the object exporter :param auth_level: (optional) non default authn level to use

(
        self,
        pkt: NDRPacket,
        ipid: uuid.UUID,
        ssp=None,
        auth_level=None,
        timeout=5,
        **kwargs,
    )

        )

    def sr1_orpc_req(
        self,
        pkt: NDRPacket,
        ipid: uuid.UUID,
        ssp=None,
        auth_level=None,
        timeout=5,
        **kwargs,
    ):
        """
        Make an ORPC call.

        :param ipid: the reference to a specific interface on an object.
        :param pkt: the request to make.

        :param ssp: (optional) non default SSP to use to connect to the object exporter
        :param auth_level: (optional) non default authn level to use
        :param timeout: (optional) timeout for the connection
        """
        # [MS-DCOM] sect 3.2.4.2

        # 1. look up the object exporter information in the client tables

        try:
            # "The client MUST use the IPID specified by the client application to
            # look up the IPID entry in the IPID table."
            ipid_entry = self.IPID_table[ipid]
        except KeyError:
            raise ValueError("The IPID that was passed is unknown.")

        # "The client MUST then look up the OXID entry"
        oxid_entry = self.OXID_table[ipid_entry.oxid]
        oid_entry = self.OID_table[ipid_entry.oid]
        resolver_entry = self.Resolver_table[oid_entry.hash]

        # Get opnum
        try:
            opnum = pkt.overload_fields[DceRpc5Request]["opnum"]
        except KeyError:
            raise ValueError("This packet is not part of a registered COM interface !")

        # Build ORPC request

        if resolver_entry.client is None:
            # We don't have a client ready, make one.
            resolver_entry.client = DCERPC_Client(
                DCERPC_Transport.NCACN_IP_TCP,
                ssp=ssp or self.ssp,
                auth_level=auth_level or oxid_entry.authnHint,
                verb=self.verb,
            )

            resolver_entry.client.connect(
                host=oxid_entry.bindingInfo[0],
                port=oxid_entry.bindingInfo[1],
                timeout=timeout,
            )