From b45d036f4c06c5704df0b3a26b12911d6a376df8 Mon Sep 17 00:00:00 2001 From: Edwin Groothuis Date: Thu, 4 Sep 2003 13:57:33 +0000 Subject: new port: dump MSRPC information One-file-port, from @stake. This dumps information from remote RPC. Much like "rpcinfo -p host" on unix hosts. Please check my patches: I removed an unused function so this wouldn't be marked as a security sensitive port, and I'm not sure my Makefile change respects CFLAGS. PR: ports/46991 Submitted by: Yonatan@xpert.com --- security/dcetest/Makefile | 28 ++++++++++++++++++++++++++++ security/dcetest/distinfo | 1 + security/dcetest/files/patch-Makefile | 10 ++++++++++ security/dcetest/files/patch-tcpstuff.c | 32 ++++++++++++++++++++++++++++++++ security/dcetest/files/patch-tcpstuff.h | 10 ++++++++++ security/dcetest/pkg-descr | 8 ++++++++ security/dcetest/pkg-plist | 2 ++ 7 files changed, 91 insertions(+) create mode 100644 security/dcetest/Makefile create mode 100644 security/dcetest/distinfo create mode 100644 security/dcetest/files/patch-Makefile create mode 100644 security/dcetest/files/patch-tcpstuff.c create mode 100644 security/dcetest/files/patch-tcpstuff.h create mode 100644 security/dcetest/pkg-descr create mode 100644 security/dcetest/pkg-plist (limited to 'security/dcetest') diff --git a/security/dcetest/Makefile b/security/dcetest/Makefile new file mode 100644 index 000000000000..a6b3ec4ef5e3 --- /dev/null +++ b/security/dcetest/Makefile @@ -0,0 +1,28 @@ +# Ports collection makefile for: dcetest +# Date created: Jan 11 2003 +# Whom: Yonatan +# +# $FreeBSD$ +# + +PORTNAME= dcetest +PORTVERSION= 1.2 +CATEGORIES= security +MASTER_SITES= http://www.atstake.com/research/tools/info_gathering/ +DISTNAME= dcetest +EXTRACT_SUFX= .tar + +MAINTAINER= Yonatan@xpert.com +COMMENT= Utility to dump MSRPC endpoint information from Windows systems + +ALL_TARGET= dcetest + +do-install: + ${INSTALL_PROGRAM} ${WRKSRC}/dcetest ${PREFIX}/bin + +.if !target(post-install) && (${PORTNAME} == "dcetest") +post-install: + @strip ${PREFIX}/bin/dcetest +.endif + +.include diff --git a/security/dcetest/distinfo b/security/dcetest/distinfo new file mode 100644 index 000000000000..603e96831624 --- /dev/null +++ b/security/dcetest/distinfo @@ -0,0 +1 @@ +MD5 (dcetest.tar) = 0099655f1343e7fea6a15de35bc9fc81 diff --git a/security/dcetest/files/patch-Makefile b/security/dcetest/files/patch-Makefile new file mode 100644 index 000000000000..9a12138dcf38 --- /dev/null +++ b/security/dcetest/files/patch-Makefile @@ -0,0 +1,10 @@ +--- Makefile.orig Sat Jan 11 06:22:46 2003 ++++ Makefile Sat Jan 11 06:23:10 2003 +@@ -1,6 +1,6 @@ + .SUFFIXES: .a .o .c + CC = gcc +-CFLAGS = -Wall -funsigned-char -c -fPIC -ggdb ++CFLAGS += -Wall -funsigned-char -c -fPIC -ggdb + + BINS = dcetest + ALL = $(BINS) diff --git a/security/dcetest/files/patch-tcpstuff.c b/security/dcetest/files/patch-tcpstuff.c new file mode 100644 index 000000000000..d05de6c8575b --- /dev/null +++ b/security/dcetest/files/patch-tcpstuff.c @@ -0,0 +1,32 @@ +--- tcpstuff.c.orig Sat Jan 11 06:46:08 2003 ++++ tcpstuff.c Sat Jan 11 06:50:59 2003 +@@ -229,6 +229,7 @@ + + + /* this function takes in a listenFd and returns an acceptedFd */ ++/* This is not used and gives a security warning in FreeBSD ports + int + tcp_accept(int listenFd) + { +@@ -242,12 +243,14 @@ + (struct sockaddr *)&clientAddr, + &addrLen)) < 0) + { ++*/ + /* This is always an error, looping or not */ ++/* + return -1; + } +- ++*/ + /* Set the "don't linger on close" option */ +- ++/* + lingerVal.l_onoff = 0; + lingerVal.l_linger = 0; + if (setsockopt(clientFd, SOL_SOCKET, SO_LINGER, +@@ -260,3 +263,4 @@ + return(clientFd); + + } ++*/ diff --git a/security/dcetest/files/patch-tcpstuff.h b/security/dcetest/files/patch-tcpstuff.h new file mode 100644 index 000000000000..165719123746 --- /dev/null +++ b/security/dcetest/files/patch-tcpstuff.h @@ -0,0 +1,10 @@ +--- tcpstuff.h.orig Sat Jan 11 06:48:15 2003 ++++ tcpstuff.h Sat Jan 11 06:48:54 2003 +@@ -42,5 +42,7 @@ + int + write_uint32(int fd,uint32 data); + ++/* This is not used and gives a warning in FreeBSD's ports system + int + tcp_accept(int listenFd); ++*/ diff --git a/security/dcetest/pkg-descr b/security/dcetest/pkg-descr new file mode 100644 index 000000000000..29099b8bb2c9 --- /dev/null +++ b/security/dcetest/pkg-descr @@ -0,0 +1,8 @@ +This little utility dumps MSRPC endpoint information from Windows +systems. Similar to the rpcdump program from Microsoft, but does not +need a DCE stack and so runs on Unixes. dcetest can be very useful +once inside a DMZ to fingerprint Windows machines on the network. +dcetest operates over TCP port 135. (Think of it as rpcinfo -p against +Windows) + +WWW: http://www.atstake.com/research/tools/info_gathering/ diff --git a/security/dcetest/pkg-plist b/security/dcetest/pkg-plist new file mode 100644 index 000000000000..51e34954c841 --- /dev/null +++ b/security/dcetest/pkg-plist @@ -0,0 +1,2 @@ +@comment $FreeBSD$ +bin/dcetest -- cgit v1.2.3