scapy.layers.msrpce.mspac
[MS-PAC]
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-pac/166d8064-c863-41e1-9c23-edaaa5f36962 Up to date with version: 23.0
- class scapy.layers.msrpce.mspac.CLAIMS_ARRAY(_pkt, /, *, usClaimsSourceType=0, ulClaimsCount=None, ClaimEntries=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.CLAIMS_ARRAY'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.CLAIMS_COMPRESSION_FORMAT(*values)[source]
Bases:
IntEnum- COMPRESSION_FORMAT_LZNT1 = 2
- COMPRESSION_FORMAT_NONE = 0
- COMPRESSION_FORMAT_XPRESS = 3
- COMPRESSION_FORMAT_XPRESS_HUFF = 4
- class scapy.layers.msrpce.mspac.CLAIMS_SET(_pkt, /, *, ulClaimsArrayCount=None, ClaimsArrays=None, usReservedType=0, ulReservedFieldSize=None, ReservedField=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.CLAIMS_SET'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- fields_desc: ClassVar[List[Field[Any, Any] | _FieldContainer]] = [<NDRIntField (CLAIMS_SET).ulClaimsArrayCount>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>, <NDRShortField (CLAIMS_SET).usReservedType>, <NDRIntField (CLAIMS_SET).ulReservedFieldSize>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>]
- class scapy.layers.msrpce.mspac.CLAIMS_SET_METADATA(_pkt, /, *, ulClaimsSetSize=None, ClaimsSet=None, usCompressionFormat=0, ulUncompressedClaimsSetSize=None, usReservedType=0, ulReservedFieldSize=None, ReservedField=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.CLAIMS_SET_METADATA'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- fields_desc: ClassVar[List[Field[Any, Any] | _FieldContainer]] = [<NDRIntField (CLAIMS_SET_METADATA).ulClaimsSetSize>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>, <scapy.layers.dcerpc.NDRInt3264EnumField object>, <NDRIntField (CLAIMS_SET_METADATA).ulUncompressedClaimsSetSize>, <NDRShortField (CLAIMS_SET_METADATA).usReservedType>, <NDRIntField (CLAIMS_SET_METADATA).ulReservedFieldSize>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>]
- class scapy.layers.msrpce.mspac.CLAIMS_SOURCE_TYPE(*values)[source]
Bases:
IntEnum- CLAIMS_SOURCE_TYPE_AD = 1
- CLAIMS_SOURCE_TYPE_CERTIFICATE = 2
- class scapy.layers.msrpce.mspac.CLAIM_ENTRY(_pkt, /, *, Id=None, Type=0, Values=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.CLAIM_ENTRY'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.CLAIM_ENTRY_sub0(_pkt, /, *, ValueCount=None, Int64Values=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.CLAIM_ENTRY_sub0'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.CLAIM_ENTRY_sub1(_pkt, /, *, ValueCount=None, Uint64Values=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.CLAIM_ENTRY_sub1'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.CLAIM_ENTRY_sub2(_pkt, /, *, ValueCount=None, StringValues=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.CLAIM_ENTRY_sub2'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.CLAIM_ENTRY_sub3(_pkt, /, *, ValueCount=None, BooleanValues=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.CLAIM_ENTRY_sub3'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.CLAIM_TYPE(*values)[source]
Bases:
IntEnum- CLAIM_TYPE_BOOLEAN = 6
- CLAIM_TYPE_INT64 = 1
- CLAIM_TYPE_STRING = 3
- CLAIM_TYPE_UINT64 = 2
- class scapy.layers.msrpce.mspac.CYPHER_BLOCK(_pkt, /, *, data=b'')[source]
Bases:
NDRPacket- aliastypes = [<class 'scapy.layers.msrpce.mspac.CYPHER_BLOCK'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.DOMAIN_GROUP_MEMBERSHIP(_pkt, /, *, DomainId=None, GroupCount=0, GroupIds=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.DOMAIN_GROUP_MEMBERSHIP'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.FILETIME(_pkt, /, *, dwLowDateTime=0, dwHighDateTime=0)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 4)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.FILETIME'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.GROUP_MEMBERSHIP(_pkt, /, *, RelativeId=0, Attributes=0)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 4)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.GROUP_MEMBERSHIP'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.KERB_SID_AND_ATTRIBUTES(_pkt, /, *, Sid=None, Attributes=0)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.KERB_SID_AND_ATTRIBUTES'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.KERB_VALIDATION_INFO(_pkt, /, *, LogonTime=<FILETIME |>, LogoffTime=<FILETIME |>, KickOffTime=<FILETIME |>, PasswordLastSet=<FILETIME |>, PasswordCanChange=<FILETIME |>, PasswordMustChange=<FILETIME |>, EffectiveName=<RPC_UNICODE_STRING |>, FullName=<RPC_UNICODE_STRING |>, LogonScript=<RPC_UNICODE_STRING |>, ProfilePath=<RPC_UNICODE_STRING |>, HomeDirectory=<RPC_UNICODE_STRING |>, HomeDirectoryDrive=<RPC_UNICODE_STRING |>, LogonCount=0, BadPasswordCount=0, UserId=0, PrimaryGroupId=0, GroupCount=None, GroupIds=None, UserFlags=0, UserSessionKey=<USER_SESSION_KEY |>, LogonServer=<RPC_UNICODE_STRING |>, LogonDomainName=<RPC_UNICODE_STRING |>, LogonDomainId=None, Reserved1=[], UserAccountControl=0, Reserved3=[], SidCount=None, ExtraSids=None, ResourceGroupDomainSid=None, ResourceGroupCount=None, ResourceGroupIds=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.KERB_VALIDATION_INFO'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- fields_desc: ClassVar[List[Field[Any, Any] | _FieldContainer]] = [<scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <NDRShortField (KERB_VALIDATION_INFO).LogonCount>, <NDRShortField (KERB_VALIDATION_INFO).BadPasswordCount>, <NDRIntField (KERB_VALIDATION_INFO).UserId>, <NDRIntField (KERB_VALIDATION_INFO).PrimaryGroupId>, <NDRIntField (KERB_VALIDATION_INFO).GroupCount>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>, <NDRIntField (KERB_VALIDATION_INFO).UserFlags>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRPacketField object>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>, <NDRFieldListField (KERB_VALIDATION_INFO).Reserved1>, <NDRIntField (KERB_VALIDATION_INFO).UserAccountControl>, <NDRFieldListField (KERB_VALIDATION_INFO).Reserved3>, <NDRIntField (KERB_VALIDATION_INFO).SidCount>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>, <NDRIntField (KERB_VALIDATION_INFO).ResourceGroupCount>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>]
- class scapy.layers.msrpce.mspac.PACTYPE(_pkt, /, *, cBuffers=None, Version=0, Buffers=[<PAC_INFO_BUFFER |>], Payloads=[])[source]
Bases:
Packet- aliastypes = [<class 'scapy.layers.msrpce.mspac.PACTYPE'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.PAC_ATTRIBUTES_INFO(_pkt, /, *, FlagsLength=2, Flags=[<Flag 1 (PAC_WAS_REQUESTED)>])[source]
Bases:
Packet- aliastypes = [<class 'scapy.layers.msrpce.mspac.PAC_ATTRIBUTES_INFO'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.PAC_CLIENT_CLAIMS_INFO(_pkt, /, *, Claims=<CLAIMS_SET_METADATA |>)[source]
Bases:
NDRPacket- aliastypes = [<class 'scapy.layers.msrpce.mspac.PAC_CLIENT_CLAIMS_INFO'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.PAC_CLIENT_INFO(_pkt, /, *, ClientId=None, NameLength=None, Name=b'')[source]
Bases:
Packet- aliastypes = [<class 'scapy.layers.msrpce.mspac.PAC_CLIENT_INFO'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.PAC_CREDENTIAL_INFO(_pkt, /, *, Version=0, EncryptionType=1, SerializedData=b'')[source]
Bases:
Packet- aliastypes = [<class 'scapy.layers.msrpce.mspac.PAC_CREDENTIAL_INFO'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.PAC_DEVICE_INFO(_pkt, /, *, UserId=0, PrimaryGroupId=0, AccountDomainId=None, AccountGroupCount=0, AccountGroupIds=None, SidCount=0, ExtraSids=None, DomainGroupCount=0, DomainGroup=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.PAC_DEVICE_INFO'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- fields_desc: ClassVar[List[Field[Any, Any] | _FieldContainer]] = [<NDRIntField (PAC_DEVICE_INFO).UserId>, <NDRIntField (PAC_DEVICE_INFO).PrimaryGroupId>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>, <NDRIntField (PAC_DEVICE_INFO).AccountGroupCount>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>, <NDRIntField (PAC_DEVICE_INFO).SidCount>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>, <NDRIntField (PAC_DEVICE_INFO).DomainGroupCount>, <scapy.layers.dcerpc.NDRFullEmbPointerField object>]
- class scapy.layers.msrpce.mspac.PAC_INFO_BUFFER(_pkt, /, *, ulType=1, cbBufferSize=None, Offset=None)[source]
Bases:
Packet- aliastypes = [<class 'scapy.layers.msrpce.mspac.PAC_INFO_BUFFER'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.PAC_REQUESTOR_GUID(_pkt, /, *, Guid=None)[source]
Bases:
Packet- aliastypes = [<class 'scapy.layers.msrpce.mspac.PAC_REQUESTOR_GUID'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.PAC_REQUESTOR_SID(_pkt, /, *, Sid=<WINNT_SID IdentifierAuthority=<WINNT_SID_IDENTIFIER_AUTHORITY |> SubAuthority=[0] |>)[source]
Bases:
Packet- aliastypes = [<class 'scapy.layers.msrpce.mspac.PAC_REQUESTOR_SID'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.PAC_SIGNATURE_DATA(_pkt, /, *, SignatureType=None, Signature=b'', RODCIdentifier=b'')[source]
Bases:
Packet- aliastypes = [<class 'scapy.layers.msrpce.mspac.PAC_SIGNATURE_DATA'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.RPC_SID_IDENTIFIER_AUTHORITY(_pkt, /, *, Value=b'')[source]
Bases:
NDRPacket- aliastypes = [<class 'scapy.layers.msrpce.mspac.RPC_SID_IDENTIFIER_AUTHORITY'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.RPC_UNICODE_STRING(_pkt, /, *, Length=None, MaximumLength=None, Buffer=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.RPC_UNICODE_STRING'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.S4U_DELEGATION_INFO(_pkt, /, *, S4U2proxyTarget=<RPC_UNICODE_STRING |>, TransitedListSize=None, S4UTransitedServices=None)[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- aliastypes = [<class 'scapy.layers.msrpce.mspac.S4U_DELEGATION_INFO'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.SID(_pkt, /, *, Revision=0, SubAuthorityCount=None, IdentifierAuthority=<RPC_SID_IDENTIFIER_AUTHORITY |>, SubAuthority=[])[source]
Bases:
NDRPacket- ALIGNMENT = (4, 8)
- DEPORTED_CONFORMANTS = ['SubAuthority']
- aliastypes = [<class 'scapy.layers.msrpce.mspac.SID'>, <class 'scapy.layers.dcerpc.NDRPacket'>, <class 'scapy.layers.dcerpc._NDRPacket'>, <class 'scapy.packet.Packet'>]
- class scapy.layers.msrpce.mspac.UPN_DNS_INFO(_pkt, /, *, UpnLen=None, UpnBufferOffset=None, DnsDomainNameLen=None, DnsDomainNameBufferOffset=None, Flags=<Flag 0 ()>, SamNameLen=None, SamNameBufferOffset=None, SidLen=None, SidBufferOffset=None, Payload=None)[source]
Bases:
_NTLMPayloadPacket- aliastypes = [<class 'scapy.layers.msrpce.mspac.UPN_DNS_INFO'>, <class 'scapy.layers.ntlm._NTLMPayloadPacket'>, <class 'scapy.packet.Packet'>]
- fields_desc: ClassVar[List[Field[Any, Any] | _FieldContainer]] = [<LEShortField (UPN_DNS_INFO).UpnLen>, <LEShortField (UPN_DNS_INFO).UpnBufferOffset>, <LEShortField (UPN_DNS_INFO).DnsDomainNameLen>, <LEShortField (UPN_DNS_INFO).DnsDomainNameBufferOffset>, <FlagsField (UPN_DNS_INFO).Flags>, <scapy.fields.ConditionalField object>, <scapy.fields.ConditionalField object>, <scapy.fields.ConditionalField object>, <scapy.fields.ConditionalField object>, <scapy.fields.MultipleTypeField object>]