new port: dump MSRPC information

One-file-port, from @stake. This dumps information from
	remote RPC.  Much like "rpcinfo -p host" on unix hosts.
	Please check my patches: I removed an unused function so
	this wouldn't be marked as a security sensitive port, and
	I'm not sure my Makefile change respects CFLAGS.

PR:		ports/46991
Submitted by:	Yonatan@xpert.com <Yonatan@xpert.com>
This commit is contained in:
Edwin Groothuis 2003-09-04 13:57:33 +00:00
parent 81ff94180c
commit b45d036f4c
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=88535
8 changed files with 92 additions and 0 deletions

View file

@ -50,6 +50,7 @@
SUBDIR += cyrus-sasl SUBDIR += cyrus-sasl
SUBDIR += cyrus-sasl2 SUBDIR += cyrus-sasl2
SUBDIR += cyrus-sasl2-saslauthd SUBDIR += cyrus-sasl2-saslauthd
SUBDIR += dcetest
SUBDIR += ddos_scan SUBDIR += ddos_scan
SUBDIR += didentd SUBDIR += didentd
SUBDIR += digest SUBDIR += digest

28
security/dcetest/Makefile Normal file
View file

@ -0,0 +1,28 @@
# Ports collection makefile for: dcetest
# Date created: Jan 11 2003
# Whom: Yonatan <Yonatan@xpert.com>
#
# $FreeBSD$
#
PORTNAME= dcetest
PORTVERSION= 1.2
CATEGORIES= security
MASTER_SITES= http://www.atstake.com/research/tools/info_gathering/
DISTNAME= dcetest
EXTRACT_SUFX= .tar
MAINTAINER= Yonatan@xpert.com
COMMENT= Utility to dump MSRPC endpoint information from Windows systems
ALL_TARGET= dcetest
do-install:
${INSTALL_PROGRAM} ${WRKSRC}/dcetest ${PREFIX}/bin
.if !target(post-install) && (${PORTNAME} == "dcetest")
post-install:
@strip ${PREFIX}/bin/dcetest
.endif
.include <bsd.port.mk>

View file

@ -0,0 +1 @@
MD5 (dcetest.tar) = 0099655f1343e7fea6a15de35bc9fc81

View file

@ -0,0 +1,10 @@
--- Makefile.orig Sat Jan 11 06:22:46 2003
+++ Makefile Sat Jan 11 06:23:10 2003
@@ -1,6 +1,6 @@
.SUFFIXES: .a .o .c
CC = gcc
-CFLAGS = -Wall -funsigned-char -c -fPIC -ggdb
+CFLAGS += -Wall -funsigned-char -c -fPIC -ggdb
BINS = dcetest
ALL = $(BINS)

View file

@ -0,0 +1,32 @@
--- tcpstuff.c.orig Sat Jan 11 06:46:08 2003
+++ tcpstuff.c Sat Jan 11 06:50:59 2003
@@ -229,6 +229,7 @@
/* this function takes in a listenFd and returns an acceptedFd */
+/* This is not used and gives a security warning in FreeBSD ports
int
tcp_accept(int listenFd)
{
@@ -242,12 +243,14 @@
(struct sockaddr *)&clientAddr,
&addrLen)) < 0)
{
+*/
/* This is always an error, looping or not */
+/*
return -1;
}
-
+*/
/* Set the "don't linger on close" option */
-
+/*
lingerVal.l_onoff = 0;
lingerVal.l_linger = 0;
if (setsockopt(clientFd, SOL_SOCKET, SO_LINGER,
@@ -260,3 +263,4 @@
return(clientFd);
}
+*/

View file

@ -0,0 +1,10 @@
--- tcpstuff.h.orig Sat Jan 11 06:48:15 2003
+++ tcpstuff.h Sat Jan 11 06:48:54 2003
@@ -42,5 +42,7 @@
int
write_uint32(int fd,uint32 data);
+/* This is not used and gives a warning in FreeBSD's ports system
int
tcp_accept(int listenFd);
+*/

View file

@ -0,0 +1,8 @@
This little utility dumps MSRPC endpoint information from Windows
systems. Similar to the rpcdump program from Microsoft, but does not
need a DCE stack and so runs on Unixes. dcetest can be very useful
once inside a DMZ to fingerprint Windows machines on the network.
dcetest operates over TCP port 135. (Think of it as rpcinfo -p against
Windows)
WWW: http://www.atstake.com/research/tools/info_gathering/

View file

@ -0,0 +1,2 @@
@comment $FreeBSD$
bin/dcetest