93 lines
4.2 KiB
Python
93 lines
4.2 KiB
Python
|
# This library is free software: you can redistribute it and/or
|
||
|
|
# modify it under the terms of the GNU Lesser General Public
|
||
|
|
# License as published by the Free Software Foundation, either
|
||
|
|
# version 3 of the License, or (at your option) any later version.
|
||
|
|
|
||
|
|
# This library is distributed in the hope that it will be useful,
|
||
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||
|
|
# Lesser General Public License for more details.
|
||
|
|
|
||
|
|
# You should have received a copy of the GNU Lesser General Public
|
||
|
|
# License along with this library. If not, see <http://www.gnu.org/licenses/> or <http://www.gnu.org/licenses/lgpl.txt>.
|
||
|
|
|
||
|
|
"""
|
||
|
|
[MS-NLMP] v28.0 2016-07-14
|
||
|
|
|
||
|
|
2.2 Message Syntax
|
||
|
|
The signature field used in NTLM messages
|
||
|
|
"""
|
||
|
|
NTLM_SIGNATURE = b'NTLMSSP\0'
|
||
|
|
|
||
|
|
"""
|
||
|
|
[MS-NLMP] v28.0 2016-07-14
|
||
|
|
|
||
|
|
2.2 Message Syntax
|
||
|
|
The 3 message type options you can have in a message.
|
||
|
|
"""
|
||
|
|
class MessageTypes(object):
|
||
|
|
NTLM_NEGOTIATE = 0x1
|
||
|
|
NTLM_CHALLENGE = 0x2
|
||
|
|
NTLM_AUTHENTICATE = 0x3
|
||
|
|
|
||
|
|
"""
|
||
|
|
[MS-NLMP] v28.0 2016-07-14
|
||
|
|
|
||
|
|
2.2.2.1 AV_PAIR (MsvAvFlags)
|
||
|
|
A 32-bit value indicated server or client configuration
|
||
|
|
"""
|
||
|
|
class AvFlags(object):
|
||
|
|
AUTHENTICATION_CONSTRAINED = 0x1
|
||
|
|
MIC_PROVIDED = 0x2
|
||
|
|
UNTRUSTED_SPN_SOURCE = 0x4
|
||
|
|
|
||
|
|
"""
|
||
|
|
[MS-NLMP] v28.0 2016-07-14
|
||
|
|
|
||
|
|
2.2.2.5 NEGOTIATE
|
||
|
|
During NTLM authentication, each of the following flags is a possible value of the
|
||
|
|
NegotiateFlags field of the NEGOTIATE_MESSAGE, CHALLENGE_MESSAGE and AUTHENTICATE_MESSAGE,
|
||
|
|
unless otherwise noted. These flags define client or server NTLM capabilities
|
||
|
|
supported by the sender.
|
||
|
|
"""
|
||
|
|
class NegotiateFlags(object):
|
||
|
|
NTLMSSP_NEGOTIATE_56 = 0x80000000
|
||
|
|
NTLMSSP_NEGOTIATE_KEY_EXCH = 0x40000000
|
||
|
|
NTLMSSP_NEGOTIATE_128 = 0x20000000
|
||
|
|
NTLMSSP_RESERVED_R1 = 0x10000000
|
||
|
|
NTLMSSP_RESERVED_R2 = 0x08000000
|
||
|
|
NTLMSSP_RESERVED_R3 = 0x04000000
|
||
|
|
NTLMSSP_NEGOTIATE_VERSION = 0x02000000
|
||
|
|
NTLMSSP_RESERVED_R4 = 0x01000000
|
||
|
|
NTLMSSP_NEGOTIATE_TARGET_INFO = 0x00800000
|
||
|
|
NTLMSSP_REQUEST_NON_NT_SESSION_KEY = 0x00400000
|
||
|
|
NTLMSSP_RESERVED_R5 = 0x00200000
|
||
|
|
NTLMSSP_NEGOTIATE_IDENTITY = 0x00100000
|
||
|
|
NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY = 0x00080000
|
||
|
|
NTLMSSP_RESERVED_R6 = 0x00040000
|
||
|
|
NTLMSSP_TARGET_TYPE_SERVER = 0x00020000
|
||
|
|
NTLMSSP_TARGET_TYPE_DOMAIN = 0x00010000
|
||
|
|
NTLMSSP_NEGOTIATE_ALWAYS_SIGN = 0x00008000
|
||
|
|
NTLMSSP_RESERVED_R7 = 0x00004000
|
||
|
|
NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED = 0x00002000
|
||
|
|
NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED = 0x00001000
|
||
|
|
NTLMSSP_ANOYNMOUS = 0x00000800
|
||
|
|
NTLMSSP_RESERVED_R8 = 0x00000400
|
||
|
|
NTLMSSP_NEGOTIATE_NTLM = 0x00000200
|
||
|
|
NTLMSSP_RESERVED_R9 = 0x00000100
|
||
|
|
NTLMSSP_NEGOTIATE_LM_KEY = 0x00000080
|
||
|
|
NTLMSSP_NEGOTIATE_DATAGRAM = 0x00000040
|
||
|
|
NTLMSSP_NEGOTIATE_SEAL = 0x00000020
|
||
|
|
NTLMSSP_NEGOTIATE_SIGN = 0x00000010
|
||
|
|
NTLMSSP_RESERVED_R10 = 0x00000008
|
||
|
|
NTLMSSP_REQUEST_TARGET = 0x00000004
|
||
|
|
NTLMSSP_NEGOTIATE_OEM = 0x00000002
|
||
|
|
NTLMSSP_NEGOTIATE_UNICODE = 0x00000001
|
||
|
|
|
||
|
|
class SignSealConstants(object):
|
||
|
|
# Magic Contants used to get the signing and sealing key for Extended Session Security
|
||
|
|
CLIENT_SIGNING = b"session key to client-to-server signing key magic constant\0"
|
||
|
|
SERVER_SIGNING = b"session key to server-to-client signing key magic constant\0"
|
||
|
|
CLIENT_SEALING = b"session key to client-to-server sealing key magic constant\0"
|
||
|
|
SERVER_SEALING = b"session key to server-to-client sealing key magic constant\0"
|