WindowsXP-SP1/admin/admt/script/namecracker.cpp
2020-09-30 16:53:49 +02:00

989 lines
20 KiB
C++

#include "StdAfx.h"
#include "ADMTScript.h"
#include "NameCracker.h"
#include <LM.h>
#include <NtDsApi.h>
#pragma comment(lib, "NtDsApi.lib")
#include <DsGetDC.h>
#include "Error.h"
#include "AdsiHelpers.h"
namespace
{
const _TCHAR CANONICAL_DELIMITER = _T('/');
const _TCHAR SAM_DELIMITER = _T('\\');
const _TCHAR SAM_INVALID_CHARACTERS[] = _T("\"*+,./:;<=>?[\\]|");
}
//---------------------------------------------------------------------------
// Name Cracker Class
//---------------------------------------------------------------------------
CNameCracker::CNameCracker()
{
}
CNameCracker::~CNameCracker()
{
}
void CNameCracker::CrackNames(const StringVector& vecNames)
{
// separate the names into canonical names,
// SAM account names and relative distinguished names
StringVector vecCanonicalNames;
StringVector vecSamAccountNames;
StringVector vecRelativeDistinguishedNames;
Separate(vecNames, vecCanonicalNames, vecSamAccountNames, vecRelativeDistinguishedNames);
// then crack canonical names
CrackCanonicalNames(vecCanonicalNames, vecRelativeDistinguishedNames);
// then crack SAM account names
CrackSamAccountNames(vecSamAccountNames, vecRelativeDistinguishedNames);
// then crack relative distinguished names
CrackRelativeDistinguishedNames(vecRelativeDistinguishedNames, m_vecUnResolvedNames);
}
void CNameCracker::Separate(
const StringVector& vecNames,
StringVector& vecCanonicalNames,
StringVector& vecSamAccountNames,
StringVector& vecRelativeDistinguishedNames
)
{
// for each name in vector...
for (StringVector::const_iterator it = vecNames.begin(); it != vecNames.end(); it++)
{
const tstring& strName = *it;
// if non empty name...
if (strName.empty() == false)
{
LPCTSTR pszName = strName.c_str();
// then if name contains a solidus '/' character...
if (_tcschr(pszName, CANONICAL_DELIMITER))
{
// then assume canonical name
vecCanonicalNames.push_back(strName);
}
else
{
// otherwise if name contains a reverse solidus '\'
// character and no invalid SAM account name characters...
LPCTSTR pchDelimiter = _tcschr(pszName, SAM_DELIMITER);
if (pchDelimiter && (_tcspbrk(pchDelimiter + 1, SAM_INVALID_CHARACTERS) == NULL))
{
// then assume SAM account name
vecSamAccountNames.push_back(strName);
}
else
{
// otherwise assume relative distinguished name
vecRelativeDistinguishedNames.push_back(strName);
}
}
}
}
}
void CNameCracker::CrackCanonicalNames(const StringVector& vecCanonicalNames, StringVector& vecUnResolvedNames)
{
//
// for each name generate a complete canonical name
//
CNameVector vecNames;
tstring strCanonical;
for (StringVector::const_iterator it = vecCanonicalNames.begin(); it != vecCanonicalNames.end(); it++)
{
const tstring& strName = *it;
// if first character is the solidus '/' character...
if (strName[0] == CANONICAL_DELIMITER)
{
// then generate complete canonical name
strCanonical = m_strDnsName + strName;
}
else
{
// otherwise if already complete canonical name for this domain...
if (_tcsnicmp(m_strDnsName.c_str(), strName.c_str(), m_strDnsName.length()) == 0)
{
// then add complete canonical name
strCanonical = strName;
}
else
{
// otherwise prefix DNS domain name with solidus and add
strCanonical = m_strDnsName + CANONICAL_DELIMITER + strName;
}
}
vecNames.push_back(SName(strName.c_str(), strCanonical.c_str()));
}
//
// crack canonical names
//
CrackNames(CANONICAL_NAME, vecNames);
for (size_t i = 0; i < vecNames.size(); i++)
{
const SName& name = vecNames[i];
if (name.strResolved.empty() == false)
{
m_setResolvedNames.insert(name.strResolved);
}
else
{
vecUnResolvedNames.push_back(name.strPartial);
}
}
}
void CNameCracker::CrackSamAccountNames(const StringVector& vecSamAccountNames, StringVector& vecUnResolvedNames)
{
//
// for each name generate a NT4 account name
//
CNameVector vecNames;
tstring strNT4Account;
for (StringVector::const_iterator it = vecSamAccountNames.begin(); it != vecSamAccountNames.end(); it++)
{
const tstring& strName = *it;
// if first character is the reverse solidus '\' character...
if (strName[0] == SAM_DELIMITER)
{
// then generate downlevel name
strNT4Account = m_strFlatName + strName;
}
else
{
// otherwise if already downlevel name for this domain...
if (_tcsnicmp(m_strFlatName.c_str(), strName.c_str(), m_strFlatName.length()) == 0)
{
// then add downlevel name
strNT4Account = strName;
}
else
{
// otherwise prefix flat domain name with reverse solidus and add
strNT4Account = m_strFlatName + SAM_DELIMITER + strName;
}
}
vecNames.push_back(SName(strName.c_str(), strNT4Account.c_str()));
}
//
// crack names
//
CrackNames(NT4_ACCOUNT_NAME, vecNames);
for (size_t i = 0; i < vecNames.size(); i++)
{
const SName& name = vecNames[i];
if (name.strResolved.empty() == false)
{
m_setResolvedNames.insert(name.strResolved);
}
else
{
vecUnResolvedNames.push_back(name.strPartial);
}
}
}
void CNameCracker::CrackRelativeDistinguishedNames(const StringVector& vecRelativeDistinguishedNames, StringVector& vecUnResolvedNames)
{
CDirectorySearch dsSearch = IDispatchPtr(m_spDefaultContainer);
dsSearch.AddAttribute(ATTRIBUTE_DISTINGUISHED_NAME);
dsSearch.SetPreferences(ADS_SCOPE_ONELEVEL);
for (StringVector::const_iterator it = vecRelativeDistinguishedNames.begin(); it != vecRelativeDistinguishedNames.end(); it++)
{
tstring strFilter = _T("(") + GetEscapedFilterName(it->c_str()) + _T(")");
dsSearch.SetFilter(strFilter.c_str());
dsSearch.Search();
bool bFound = false;
try
{
for (bool bGet = dsSearch.GetFirstRow(); bGet; bGet = dsSearch.GetNextRow())
{
m_setResolvedNames.insert(tstring(_bstr_t(dsSearch.GetAttributeValue(ATTRIBUTE_DISTINGUISHED_NAME))));
bFound = true;
}
}
catch (_com_error& ce)
{
#ifdef _DEBUG
_TCHAR sz[2048];
_stprintf(sz, _T("'%s' : %s : 0x%08lX\n"), it->c_str(), ce.ErrorMessage(), ce.Error());
OutputDebugString(sz);
#endif
bFound = false;
}
catch (...)
{
bFound = false;
}
if (!bFound)
{
vecUnResolvedNames.push_back(*it);
}
}
}
void CNameCracker::CrackNames(NAME_FORMAT eFormat, CNameVector& vecNames)
{
HANDLE hDs = NULL;
LPTSTR apszNames = NULL;
PDS_NAME_RESULT pdnrResult = NULL;
try
{
if (vecNames.size() > 0)
{
DWORD dwError = DsBind(m_strDomainController.c_str(), NULL, &hDs);
if (dwError == NO_ERROR)
{
DWORD dwCount = vecNames.size();
LPCTSTR* apszNames = new LPCTSTR[dwCount];
if (apszNames != NULL)
{
for (DWORD dwIndex = 0; dwIndex < dwCount; dwIndex++)
{
apszNames[dwIndex] = vecNames[dwIndex].strComplete.c_str();
}
dwError = DsCrackNames(
hDs,
DS_NAME_NO_FLAGS,
(eFormat == CANONICAL_NAME) ? DS_CANONICAL_NAME : (eFormat == NT4_ACCOUNT_NAME) ? DS_NT4_ACCOUNT_NAME : DS_UNKNOWN_NAME,
DS_FQDN_1779_NAME,
dwCount,
const_cast<LPTSTR*>(apszNames),
&pdnrResult
);
if (dwError == NO_ERROR)
{
DWORD c = pdnrResult->cItems;
for (DWORD i = 0; i < c; i++)
{
DS_NAME_RESULT_ITEM& dnriItem = pdnrResult->rItems[i];
if (dnriItem.status == DS_NAME_NO_ERROR)
{
vecNames[i].strResolved = dnriItem.pName;
}
}
DsFreeNameResult(pdnrResult);
}
else
{
_com_issue_error(HRESULT_FROM_WIN32(dwError));
}
delete [] apszNames;
}
else
{
_com_issue_error(E_OUTOFMEMORY);
}
DsUnBind(&hDs);
}
else
{
_com_issue_error(HRESULT_FROM_WIN32(dwError));
}
}
}
catch (...)
{
if (pdnrResult)
{
DsFreeNameResult(pdnrResult);
}
delete [] apszNames;
if (hDs)
{
DsUnBind(&hDs);
}
throw;
}
}
tstring CNameCracker::GetEscapedFilterName(LPCTSTR pszName)
{
tstring strNameEscaped;
if (pszName)
{
// generate escaped name
for (LPCTSTR pch = pszName; *pch; pch++)
{
switch (*pch)
{
case _T('('):
{
strNameEscaped += _T("\\28");
break;
}
case _T(')'):
{
strNameEscaped += _T("\\29");
break;
}
case _T('*'):
{
strNameEscaped += _T("\\2A");
break;
}
case _T('\\'):
{
if (*(pch + 1) == _T('\\'))
{
strNameEscaped += _T("\\5C");
}
break;
}
default:
{
strNameEscaped += *pch;
break;
}
}
}
}
return strNameEscaped;
}
namespace
{
// SplitCanonicalName Method
//
// Given 'a.company.com/Sales/West/Name' this method splits the complete
// canonical name into its component parts Domain='a.company.com',
// Path='/Sales/West/', Name='Name'.
//
// Given 'Sales/West/Name' this method splits the partial canonical name
// into its component parts Domain='', Path='/Sales/West/', Name='Name'.
//
// Given 'Name' this method splits the partial canonical name into its
// component parts Domain='', Path='/', Name='Name'.
void SplitCanonicalName(LPCTSTR pszName, _bstr_t& strDomain, _bstr_t& strPath, _bstr_t& strName)
{
strDomain = (LPCTSTR)NULL;
strPath = (LPCTSTR)NULL;
strName = (LPCTSTR)NULL;
if (pszName)
{
tstring str = pszName;
UINT posA = 0;
UINT posB = tstring::npos;
do
{
posA = str.find_first_of(_T('/'), posA ? posA + 1 : posA);
}
while ((posA != 0) && (posA != tstring::npos) && (str[posA - 1] == _T('\\')));
do
{
posB = str.find_last_of(_T('/'), (posB != tstring::npos) ? posB - 1 : posB);
}
while ((posB != 0) && (posB != tstring::npos) && (str[posB - 1] == _T('\\')));
strDomain = str.substr(0, posA).c_str();
strPath = str.substr(posA, posB - posA).c_str();
strName = str.substr(posB).c_str();
}
}
void SplitPath(LPCTSTR pszPath, _bstr_t& strPath, _bstr_t& strName)
{
strPath = (LPCTSTR)NULL;
strName = (LPCTSTR)NULL;
if (pszPath)
{
tstring str = pszPath;
UINT pos = str.find_first_of(_T('\\'));
if (pos != tstring::npos)
{
strName = pszPath;
}
else
{
UINT posA = str.find_first_of(_T('/'));
if (posA == tstring::npos)
{
strName = (_T("/") + str).c_str();
}
else
{
UINT posB = str.find_last_of(_T('/'));
strPath = str.substr(posA, posB - posA).c_str();
strName = str.substr(posB).c_str();
}
}
}
}
}
//---------------------------------------------------------------------------
// Ignore Case String Less
//---------------------------------------------------------------------------
struct SIgnoreCaseStringLess :
public std::binary_function<tstring, tstring, bool>
{
bool operator()(const tstring& x, const tstring& y) const
{
bool bLess;
LPCTSTR pszX = x.c_str();
LPCTSTR pszY = y.c_str();
if (pszX == pszY)
{
bLess = false;
}
else if (pszX == NULL)
{
bLess = true;
}
else if (pszY == NULL)
{
bLess = false;
}
else
{
bLess = _tcsicmp(pszX, pszY) < 0;
}
return bLess;
}
};
//---------------------------------------------------------------------------
// CDomainMap Implementation
//---------------------------------------------------------------------------
class CDomainMap :
public std::map<_bstr_t, StringSet, IgnoreCaseStringLess>
{
public:
CDomainMap()
{
}
void Initialize(const StringSet& setNames)
{
_bstr_t strDefaultDns(_T("/"));
_bstr_t strDefaultFlat(_T("\\"));
for (StringSet::const_iterator it = setNames.begin(); it != setNames.end(); it++)
{
tstring strName = *it;
// if not an empty name...
if (strName.empty() == false)
{
// if name contains a canonical name delimiter...
UINT posDelimiter = strName.find(CANONICAL_DELIMITER);
if (posDelimiter != tstring::npos)
{
// then assume canonical name
if (posDelimiter == 0)
{
// then generate complete canonical name
Insert(strDefaultDns, *it);
}
else
{
// otherwise if path component before delimiter contains
// a period
UINT posDot = strName.find(_T('.'));
if (posDot < posDelimiter)
{
// then assume a complete canonical name with DNS domain name prefix
Insert(strName.substr(0, posDelimiter).c_str(), *it);
}
else
{
// otherwise assume domain name has not been specified
Insert(strDefaultDns, *it);
}
}
}
else
{
// otherwise if name contains a NT account name delimiter
// character and no invalid SAM account name characters...
UINT posDelimiter = strName.find(SAM_DELIMITER);
if (posDelimiter != tstring::npos)
{
if (strName.find_first_of(SAM_INVALID_CHARACTERS, posDelimiter + 1) == tstring::npos)
{
if (posDelimiter == 0)
{
Insert(strDefaultFlat, *it);
}
else
{
// then assume SAM account name
Insert(strName.substr(0, posDelimiter).c_str(), *it);
}
}
else
{
// otherwise assume relative distinguished name
Insert(strDefaultDns, *it);
}
}
else
{
Insert(strDefaultDns, *it);
}
}
}
}
}
protected:
void Insert(_bstr_t strDomain, _bstr_t strName)
{
iterator it = find(strDomain);
if (it == end())
{
std::pair<iterator, bool> pair = insert(value_type(strDomain, StringSet()));
it = pair.first;
}
it->second.insert(strName);
}
};
//---------------------------------------------------------------------------
// CDomainToPathMap Implementation
//---------------------------------------------------------------------------
// Initialize Method
void CDomainToPathMap::Initialize(LPCTSTR pszDefaultDomainDns, LPCTSTR pszDefaultDomainFlat, const StringSet& setNames)
{
CDomainMap map;
map.Initialize(setNames);
for (CDomainMap::const_iterator itDomain = map.begin(); itDomain != map.end(); itDomain++)
{
_bstr_t strDomainName = itDomain->first;
LPCTSTR pszDomainName = strDomainName;
if (pszDomainName && ((*pszDomainName == _T('/')) || (*pszDomainName == _T('\\'))))
{
strDomainName = (pszDefaultDomainDns && (_tcslen(pszDefaultDomainDns) > 0)) ? pszDefaultDomainDns : pszDefaultDomainFlat;
}
else
{
if (GetValidDomainName(strDomainName) == false)
{
strDomainName = (pszDefaultDomainDns && (_tcslen(pszDefaultDomainDns) > 0)) ? pszDefaultDomainDns : pszDefaultDomainFlat;
}
}
iterator it = find(strDomainName);
if (it == end())
{
std::pair<iterator, bool> pair = insert(value_type(strDomainName, StringSet()));
it = pair.first;
}
StringSet& setNames = it->second;
const StringSet& set = itDomain->second;
for (StringSet::const_iterator itSet = set.begin(); itSet != set.end(); itSet++)
{
setNames.insert(*itSet);
}
}
}
// GetValidDomainName Method
bool CDomainToPathMap::GetValidDomainName(_bstr_t& strDomainName)
{
bool bValid = false;
PDOMAIN_CONTROLLER_INFO pdci;
// attempt to retrieve DNS name of domain controller supporting active directory service
DWORD dwError = DsGetDcName(NULL, strDomainName, NULL, NULL, DS_RETURN_DNS_NAME, &pdci);
// if domain controller not found, attempt to retrieve flat name of domain controller
if (dwError == ERROR_NO_SUCH_DOMAIN)
{
dwError = DsGetDcName(NULL, strDomainName, NULL, NULL, DS_RETURN_FLAT_NAME, &pdci);
}
// if domain controller found then save name otherwise generate error
if (dwError == NO_ERROR)
{
strDomainName = pdci->DomainName;
NetApiBufferFree(pdci);
bValid = true;
}
return bValid;
}
//
// CNameToPathMap Implementation
//
CNameToPathMap::CNameToPathMap()
{
}
CNameToPathMap::CNameToPathMap(StringSet& setNames)
{
Initialize(setNames);
}
void CNameToPathMap::Initialize(StringSet& setNames)
{
_bstr_t strDomain;
_bstr_t strPath;
_bstr_t strName;
for (StringSet::iterator it = setNames.begin(); it != setNames.end(); it++)
{
// SplitPath(*it, strPath, strName);
SplitCanonicalName(*it, strDomain, strPath, strName);
Add(strName, strPath);
}
}
void CNameToPathMap::Add(_bstr_t& strName, _bstr_t& strPath)
{
iterator it = find(strName);
if (it == end())
{
std::pair<iterator, bool> pair = insert(value_type(strName, StringSet()));
it = pair.first;
}
it->second.insert(strPath);
}
//
// IgnoreCaseStringLess Implementation
//
bool IgnoreCaseStringLess::operator()(const _bstr_t& x, const _bstr_t& y) const
{
bool bLess;
LPCTSTR pszThis = x;
LPCTSTR pszThat = y;
if (pszThis == pszThat)
{
bLess = false;
}
else if (pszThis == NULL)
{
bLess = true;
}
else if (pszThat == NULL)
{
bLess = false;
}
else
{
bLess = _tcsicmp(pszThis, pszThat) < 0;
}
return bLess;
}
//
// CCompareStrings Implementation
//
CCompareStrings::CCompareStrings()
{
}
CCompareStrings::CCompareStrings(StringSet& setNames)
{
Initialize(setNames);
}
void CCompareStrings::Initialize(StringSet& setNames)
{
for (StringSet::iterator it = setNames.begin(); it != setNames.end(); it++)
{
m_vecCompareStrings.push_back(CCompareString(*it));
}
}
bool CCompareStrings::IsMatch(LPCTSTR pszName)
{
bool bIs = false;
CompareStringVector::iterator itBeg = m_vecCompareStrings.begin();
CompareStringVector::iterator itEnd = m_vecCompareStrings.end();
for (CompareStringVector::iterator it = itBeg; it != itEnd; it++)
{
if (it->IsMatch(pszName))
{
bIs = true;
break;
}
}
return bIs;
}
//
// CCompareString Implementation
//
CCompareStrings::CCompareString::CCompareString(LPCTSTR pszCompare)
{
if (pszCompare)
{
Initialize(pszCompare);
}
}
CCompareStrings::CCompareString::CCompareString(const CCompareString& r) :
m_nType(r.m_nType),
m_strCompare(r.m_strCompare)
{
}
void CCompareStrings::CCompareString::Initialize(LPCTSTR pszCompare)
{
if (pszCompare)
{
tstring str = pszCompare;
UINT uLength = str.length();
bool bBeg = (str[0] == _T('*'));
bool bEnd = false;
if ((uLength > 1) && (str[uLength - 1] == _T('*')) && (str[uLength - 2] != _T('\\')))
{
bEnd = true;
}
if (bBeg && bEnd)
{
// contains
m_nType = 3;
str = str.substr(1, uLength - 2);
}
else if (bBeg)
{
// ends with
m_nType = 2;
str = str.substr(1, uLength - 1);
}
else if (bEnd)
{
// begins with
m_nType = 1;
str = str.substr(0, uLength - 1);
}
else
{
// equals
m_nType = 0;
}
if (str.length() > 0)
{
// replace escaped asterisks with asterisk
for (UINT pos = str.find(_T('*')); pos != tstring::npos; pos = str.find(_T('*'), pos))
{
if ((pos > 0) && (str[pos - 1] == _T('\\')))
{
str = str.substr(0, pos - 1) + str.substr(pos);
}
else
{
AdmtThrowError(GUID_NULL, GUID_NULL, E_INVALIDARG, IDS_E_INVALID_FILTER_STRING, pszCompare);
}
}
m_strCompare = str.c_str();
}
else
{
AdmtThrowError(GUID_NULL, GUID_NULL, E_INVALIDARG, IDS_E_INVALID_FILTER_STRING, pszCompare);
}
}
else
{
AdmtThrowError(GUID_NULL, GUID_NULL, E_INVALIDARG, IDS_E_INVALID_FILTER_STRING, _T(""));
}
}
bool CCompareStrings::CCompareString::IsMatch(LPCTSTR psz)
{
bool bIs = false;
if (psz)
{
switch (m_nType)
{
case 0: // equals
{
bIs = (_tcsicmp(psz, m_strCompare) == 0);
break;
}
case 1: // begins with
{
bIs = (_tcsnicmp(psz, m_strCompare, m_strCompare.length()) == 0);
break;
}
case 2: // ends with
{
UINT cchT = _tcslen(psz);
UINT cchC = m_strCompare.length();
if (cchT >= cchC)
{
bIs = (_tcsnicmp(psz + cchT - cchC, m_strCompare, cchC) == 0);
}
break;
}
case 3: // contains
{
LPTSTR pszT = (LPTSTR)_alloca((_tcslen(psz) + 1) * sizeof(_TCHAR));
LPTSTR pszC = (LPTSTR)_alloca((m_strCompare.length() + 1) * sizeof(_TCHAR));
_tcscpy(pszT, psz);
_tcscpy(pszC, m_strCompare);
_tcslwr(pszT);
_tcslwr(pszC);
bIs = (_tcsstr(pszT, pszC) != NULL);
break;
}
}
}
return bIs;
}