Module Expr Str Import alias ImportFrom alias ImportFrom alias ImportFrom alias FunctionDef arguments args NameParam defaults body If CompareNotEq Call NameLoad NameLoad Num body Print Str Return Num Assign TupleStore NameStore NameStore NameStore NameStore TupleLoad SubscriptLoad NameLoad Index Num Call NameLoad SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num Assign NameStore BinOpMod Str NameLoad Assign NameStore Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore ListLoad For NameStore Call NameLoad Num body Assign NameStore Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Assign NameStore Call AttributeLoad NameLoad attr TupleLoad NameLoad NameLoad Expr Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr NameLoad Str TryExcept body Expr Call AttributeLoad NameLoad attr handlers ExceptHandler type NameLoad name NameStore body Assign NameStore Call NameLoad NameLoad orelse Assign NameStore Str Expr Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore SubscriptLoad NameLoad Index Num While BoolOpAnd NameLoad CompareEq SubscriptLoad NameLoad Index Num NameLoad body Expr Call AttributeLoad NameLoad attr For TupleStore NameStore NameStore Call NameLoad NameLoad body Print BinOpMod Str TupleLoad NameLoad NameLoad NameLoad Print BinOpMod Str TupleLoad Call NameLoad NameLoad Num NameLoad decorator_list If CompareEq NameLoad Str body Expr Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Call NameLoad SubscriptLoad AttributeLoad NameLoad attr Slice Num
N/A N/A opdump - scan for operations on a given DCERPC interface

Usage: opdump.py hostname port interface version

This binds to the given hostname:port and DCERPC interface. Then, it tries to
call each of the first 256 operation numbers in turn and reports the outcome
of each call.

This will generate a burst of TCP connections to the given host:port!

Example:
$ ./opdump.py 10.0.0.30 135 99FCFEC4-5260-101B-BBCB-00AA0021347A 0.0
op 0 (0x00): rpc_x_bad_stub_data
op 1 (0x01): rpc_x_bad_stub_data
op 2 (0x02): rpc_x_bad_stub_data
op 3 (0x03): success
op 4 (0x04): rpc_x_bad_stub_data
ops 5-255: nca_s_op_rng_error

rpc_x_bad_stub_data, rpc_s_access_denied, and success generally means there's an
operation at that number.

Author: Catalin Patulea <cat@vv.carleton.ca>
 N/A sys impacket.examples logger impacket uuid impacket.dcerpc.v5 transport main N/A N/A args N/A N/A N/A N/A N/A len args 4 N/A N/A usage: opdump.py hostname port interface version N/A 1 N/A N/A host port interface version N/A N/A args N/A 0 N/A int N/A args N/A 1 N/A args N/A 2 N/A args N/A 3 N/A stringbinding N/A ncacn_ip_tcp:%s host N/A trans N/A N/A transport DCERPCTransportFactory stringbinding N/A N/A N/A trans set_dport port N/A results N/A N/A i N/A range 256 N/A N/A dce N/A N/A trans get_dce_rpc N/A N/A N/A dce connect N/A iid N/A N/A uuid uuidtup_to_bin N/A interface version N/A N/A N/A dce bind iid N/A N/A N/A dce call i N/A N/A N/A N/A N/A dce recv N/A N/A N/A Exception N/A e N/A N/A result N/A str e N/A N/A result success N/A N/A N/A dce disconnect N/A N/A N/A results append result N/A suffix N/A results N/A -1 N/A N/A results N/A N/A results N/A -1 suffix N/A N/A N/A N/A results pop N/A N/A i result N/A enumerate results N/A N/A N/A op %d (0x%02x): %s N/A i i result N/A N/A ops %d-%d: %s N/A N/A len results 255 suffix N/A N/A N/A __name__ __main__ N/A N/A N/A N/A logger init N/A N/A N/A sys exit N/A main N/A N/A sys argv N/A 1