Real-time collaboration for Jupyter Notebooks, Linux Terminals, LaTeX, VS Code, R IDE, and more,
all in one place.
Real-time collaboration for Jupyter Notebooks, Linux Terminals, LaTeX, VS Code, R IDE, and more,
all in one place.
Path: blob/master/lib/rex/post/meterpreter/extensions/stdapi/tlv.rb
Views: 11791
# -*- coding: binary -*-12module Rex3module Post4module Meterpreter5module Extensions6module Stdapi78##9#10# General11#12##1314TLV_TYPE_HANDLE = TLV_META_TYPE_QWORD | 60015TLV_TYPE_INHERIT = TLV_META_TYPE_BOOL | 60116TLV_TYPE_PROCESS_HANDLE = TLV_META_TYPE_QWORD | 63017TLV_TYPE_THREAD_HANDLE = TLV_META_TYPE_QWORD | 63118TLV_TYPE_PRIVILEGE = TLV_META_TYPE_STRING | 6321920##21#22# Fs23#24##2526TLV_TYPE_DIRECTORY_PATH = TLV_META_TYPE_STRING | 120027TLV_TYPE_FILE_NAME = TLV_META_TYPE_STRING | 120128TLV_TYPE_FILE_PATH = TLV_META_TYPE_STRING | 120229TLV_TYPE_FILE_MODE = TLV_META_TYPE_STRING | 120330TLV_TYPE_FILE_SIZE = TLV_META_TYPE_UINT | 120431TLV_TYPE_FILE_SHORT_NAME = TLV_META_TYPE_STRING | 120532TLV_TYPE_FILE_HASH = TLV_META_TYPE_RAW | 12063334TLV_TYPE_MOUNT = TLV_META_TYPE_GROUP | 120735TLV_TYPE_MOUNT_NAME = TLV_META_TYPE_STRING | 120836TLV_TYPE_MOUNT_TYPE = TLV_META_TYPE_UINT | 120937TLV_TYPE_MOUNT_SPACE_USER = TLV_META_TYPE_QWORD | 121038TLV_TYPE_MOUNT_SPACE_TOTAL = TLV_META_TYPE_QWORD | 121139TLV_TYPE_MOUNT_SPACE_FREE = TLV_META_TYPE_QWORD | 121240TLV_TYPE_MOUNT_UNCPATH = TLV_META_TYPE_STRING | 12134142TLV_TYPE_STAT_BUF32 = TLV_META_TYPE_COMPLEX | 122043TLV_TYPE_STAT_BUF = TLV_META_TYPE_COMPLEX | 12214445TLV_TYPE_SEARCH_RECURSE = TLV_META_TYPE_BOOL | 123046TLV_TYPE_SEARCH_GLOB = TLV_META_TYPE_STRING | 123147TLV_TYPE_SEARCH_ROOT = TLV_META_TYPE_STRING | 123248TLV_TYPE_SEARCH_RESULTS = TLV_META_TYPE_GROUP | 123349TLV_TYPE_SEARCH_MTIME = TLV_META_TYPE_UINT | 123550TLV_TYPE_SEARCH_M_START_DATE= TLV_META_TYPE_UINT | 123651TLV_TYPE_SEARCH_M_END_DATE = TLV_META_TYPE_UINT | 1237525354TLV_TYPE_FILE_MODE_T = TLV_META_TYPE_UINT | 12345556##57#58# Net59#60##6162TLV_TYPE_HOST_NAME = TLV_META_TYPE_STRING | 140063TLV_TYPE_PORT = TLV_META_TYPE_UINT | 140164TLV_TYPE_INTERFACE_MTU = TLV_META_TYPE_UINT | 140265TLV_TYPE_INTERFACE_FLAGS = TLV_META_TYPE_STRING | 140366TLV_TYPE_INTERFACE_INDEX = TLV_META_TYPE_UINT | 14046768TLV_TYPE_SUBNET = TLV_META_TYPE_RAW | 142069TLV_TYPE_NETMASK = TLV_META_TYPE_RAW | 142170TLV_TYPE_GATEWAY = TLV_META_TYPE_RAW | 142271TLV_TYPE_NETWORK_ROUTE = TLV_META_TYPE_GROUP | 142372TLV_TYPE_IP_PREFIX = TLV_META_TYPE_UINT | 142473TLV_TYPE_ARP_ENTRY = TLV_META_TYPE_GROUP | 14257475TLV_TYPE_IP = TLV_META_TYPE_RAW | 143076TLV_TYPE_MAC_ADDRESS = TLV_META_TYPE_RAW | 143177TLV_TYPE_MAC_NAME = TLV_META_TYPE_STRING | 143278TLV_TYPE_NETWORK_INTERFACE = TLV_META_TYPE_GROUP | 143379TLV_TYPE_IP6_SCOPE = TLV_META_TYPE_RAW | 14348081TLV_TYPE_SUBNET_STRING = TLV_META_TYPE_STRING | 144082TLV_TYPE_NETMASK_STRING = TLV_META_TYPE_STRING | 144183TLV_TYPE_GATEWAY_STRING = TLV_META_TYPE_STRING | 144284TLV_TYPE_ROUTE_METRIC = TLV_META_TYPE_UINT | 14438586# Resolve87TLV_TYPE_ADDR_TYPE = TLV_META_TYPE_UINT | 14448889# Proxy configuration90TLV_TYPE_PROXY_CFG_AUTODETECT = TLV_META_TYPE_BOOL | 144591TLV_TYPE_PROXY_CFG_AUTOCONFIGURL = TLV_META_TYPE_STRING | 144692TLV_TYPE_PROXY_CFG_PROXY = TLV_META_TYPE_STRING | 144793TLV_TYPE_PROXY_CFG_PROXYBYPASS = TLV_META_TYPE_STRING | 14489495# Socket96TLV_TYPE_PEER_HOST = TLV_META_TYPE_STRING | 150097TLV_TYPE_PEER_PORT = TLV_META_TYPE_UINT | 150198TLV_TYPE_LOCAL_HOST = TLV_META_TYPE_STRING | 150299TLV_TYPE_LOCAL_PORT = TLV_META_TYPE_UINT | 1503100TLV_TYPE_CONNECT_RETRIES = TLV_META_TYPE_UINT | 1504101TLV_TYPE_NETSTAT_ENTRY = TLV_META_TYPE_GROUP | 1505102TLV_TYPE_PEER_HOST_RAW = TLV_META_TYPE_RAW | 1506103TLV_TYPE_LOCAL_HOST_RAW = TLV_META_TYPE_RAW | 1507104105TLV_TYPE_SHUTDOWN_HOW = TLV_META_TYPE_UINT | 1530106107##108#109# Sys110#111##112113PROCESS_EXECUTE_FLAG_HIDDEN = (1 << 0)114PROCESS_EXECUTE_FLAG_CHANNELIZED = (1 << 1)115PROCESS_EXECUTE_FLAG_SUSPENDED = (1 << 2)116PROCESS_EXECUTE_FLAG_USE_THREAD_TOKEN = (1 << 3)117PROCESS_EXECUTE_FLAG_DESKTOP = (1 << 4)118PROCESS_EXECUTE_FLAG_SESSION = (1 << 5)119PROCESS_EXECUTE_FLAG_SUBSHELL = (1 << 6)120PROCESS_EXECUTE_FLAG_PTY = (1 << 7)121PROCESS_EXECUTE_FLAG_ARG_ARRAY = (1 << 8)122123# Registry124TLV_TYPE_HKEY = TLV_META_TYPE_QWORD | 1000125TLV_TYPE_ROOT_KEY = TLV_TYPE_HKEY126TLV_TYPE_BASE_KEY = TLV_META_TYPE_STRING | 1001127TLV_TYPE_PERMISSION = TLV_META_TYPE_UINT | 1002128TLV_TYPE_KEY_NAME = TLV_META_TYPE_STRING | 1003129TLV_TYPE_VALUE_NAME = TLV_META_TYPE_STRING | 1010130TLV_TYPE_VALUE_TYPE = TLV_META_TYPE_UINT | 1011131TLV_TYPE_VALUE_DATA = TLV_META_TYPE_RAW | 1012132TLV_TYPE_TARGET_HOST = TLV_META_TYPE_STRING | 1013133134# Config135TLV_TYPE_COMPUTER_NAME = TLV_META_TYPE_STRING | 1040136TLV_TYPE_OS_NAME = TLV_META_TYPE_STRING | 1041137TLV_TYPE_USER_NAME = TLV_META_TYPE_STRING | 1042138TLV_TYPE_ARCHITECTURE = TLV_META_TYPE_STRING | 1043139TLV_TYPE_LANG_SYSTEM = TLV_META_TYPE_STRING | 1044140TLV_TYPE_SID = TLV_META_TYPE_STRING | 1045141TLV_TYPE_DOMAIN = TLV_META_TYPE_STRING | 1046142TLV_TYPE_LOGGED_ON_USER_COUNT = TLV_META_TYPE_UINT | 1047143TLV_TYPE_LOCAL_DATETIME = TLV_META_TYPE_STRING | 1048144TLV_TYPE_BUILD_TUPLE = TLV_META_TYPE_STRING | 1049145146# Environment147TLV_TYPE_ENV_VARIABLE = TLV_META_TYPE_STRING | 1100148TLV_TYPE_ENV_VALUE = TLV_META_TYPE_STRING | 1101149TLV_TYPE_ENV_GROUP = TLV_META_TYPE_GROUP | 1102150151DELETE_KEY_FLAG_RECURSIVE = (1 << 0)152153# Process154TLV_TYPE_BASE_ADDRESS = TLV_META_TYPE_QWORD | 2000155TLV_TYPE_ALLOCATION_TYPE = TLV_META_TYPE_UINT | 2001156TLV_TYPE_PROTECTION = TLV_META_TYPE_UINT | 2002157TLV_TYPE_PROCESS_PERMS = TLV_META_TYPE_UINT | 2003158TLV_TYPE_PROCESS_MEMORY = TLV_META_TYPE_RAW | 2004159TLV_TYPE_ALLOC_BASE_ADDRESS = TLV_META_TYPE_QWORD | 2005160TLV_TYPE_MEMORY_STATE = TLV_META_TYPE_UINT | 2006161TLV_TYPE_MEMORY_TYPE = TLV_META_TYPE_UINT | 2007162TLV_TYPE_ALLOC_PROTECTION = TLV_META_TYPE_UINT | 2008163TLV_TYPE_PID = TLV_META_TYPE_UINT | 2300164TLV_TYPE_PROCESS_NAME = TLV_META_TYPE_STRING | 2301165TLV_TYPE_PROCESS_PATH = TLV_META_TYPE_STRING | 2302166TLV_TYPE_PROCESS_GROUP = TLV_META_TYPE_GROUP | 2303167TLV_TYPE_PROCESS_FLAGS = TLV_META_TYPE_UINT | 2304168TLV_TYPE_PROCESS_ARGUMENTS = TLV_META_TYPE_STRING | 2305169TLV_TYPE_PROCESS_ARCH = TLV_META_TYPE_UINT | 2306170TLV_TYPE_PARENT_PID = TLV_META_TYPE_UINT | 2307171TLV_TYPE_PROCESS_SESSION = TLV_META_TYPE_UINT | 2308172TLV_TYPE_PROCESS_ARCH_NAME = TLV_META_TYPE_STRING | 2309173TLV_TYPE_PROCESS_ARGUMENT = TLV_META_TYPE_STRING | 2310174TLV_TYPE_PROCESS_UNESCAPED_PATH = TLV_META_TYPE_STRING | 2311175176TLV_TYPE_DRIVER_ENTRY = TLV_META_TYPE_GROUP | 2320177TLV_TYPE_DRIVER_BASENAME = TLV_META_TYPE_STRING | 2321178TLV_TYPE_DRIVER_FILENAME = TLV_META_TYPE_STRING | 2322179180TLV_TYPE_IMAGE_FILE = TLV_META_TYPE_STRING | 2400181TLV_TYPE_IMAGE_FILE_PATH = TLV_META_TYPE_STRING | 2401182TLV_TYPE_PROCEDURE_NAME = TLV_META_TYPE_STRING | 2402183TLV_TYPE_PROCEDURE_ADDRESS = TLV_META_TYPE_QWORD | 2403184TLV_TYPE_IMAGE_BASE = TLV_META_TYPE_QWORD | 2404185TLV_TYPE_IMAGE_GROUP = TLV_META_TYPE_GROUP | 2405186TLV_TYPE_IMAGE_NAME = TLV_META_TYPE_STRING | 2406187188TLV_TYPE_THREAD_ID = TLV_META_TYPE_UINT | 2500189TLV_TYPE_THREAD_PERMS = TLV_META_TYPE_UINT | 2502190TLV_TYPE_EXIT_CODE = TLV_META_TYPE_UINT | 2510191TLV_TYPE_ENTRY_POINT = TLV_META_TYPE_QWORD | 2511192TLV_TYPE_ENTRY_PARAMETER = TLV_META_TYPE_QWORD | 2512193TLV_TYPE_CREATION_FLAGS = TLV_META_TYPE_UINT | 2513194195TLV_TYPE_REGISTER_NAME = TLV_META_TYPE_STRING | 2540196TLV_TYPE_REGISTER_SIZE = TLV_META_TYPE_UINT | 2541197TLV_TYPE_REGISTER_VALUE_32 = TLV_META_TYPE_UINT | 2542198TLV_TYPE_REGISTER = TLV_META_TYPE_GROUP | 2550199200TLV_TYPE_TERMINAL_ROWS = TLV_META_TYPE_UINT | 2600201TLV_TYPE_TERMINAL_COLUMNS = TLV_META_TYPE_UINT | 2601202203##204#205# Memory206#207##208209TLV_TYPE_MEMORY_SEARCH_NEEDLE = TLV_META_TYPE_STRING | 2650210TLV_TYPE_MEMORY_SEARCH_RESULTS = TLV_META_TYPE_GROUP | 2651211TLV_TYPE_MEMORY_SEARCH_MATCH_LEN = TLV_META_TYPE_UINT | 2652212TLV_TYPE_MEMORY_SEARCH_START_ADDR = TLV_META_TYPE_QWORD | 2653213TLV_TYPE_MEMORY_SEARCH_SECT_LEN = TLV_META_TYPE_QWORD | 2654214TLV_TYPE_MEMORY_SEARCH_MATCH_ADDR = TLV_META_TYPE_QWORD | 2655215TLV_TYPE_MEMORY_SEARCH_MATCH_STR = TLV_META_TYPE_STRING | 2656216217##218#219# Ui220#221##222223TLV_TYPE_IDLE_TIME = TLV_META_TYPE_UINT | 3000224TLV_TYPE_KEYS_DUMP = TLV_META_TYPE_STRING | 3001225TLV_TYPE_DESKTOP_SCREENSHOT = TLV_META_TYPE_RAW | 3002226TLV_TYPE_DESKTOP_SWITCH = TLV_META_TYPE_BOOL | 3003227TLV_TYPE_DESKTOP = TLV_META_TYPE_GROUP | 3004228TLV_TYPE_DESKTOP_SESSION = TLV_META_TYPE_UINT | 3005229TLV_TYPE_DESKTOP_STATION = TLV_META_TYPE_STRING | 3006230TLV_TYPE_DESKTOP_NAME = TLV_META_TYPE_STRING | 3007231TLV_TYPE_DESKTOP_SCREENSHOT_QUALITY = TLV_META_TYPE_UINT | 3008232TLV_TYPE_DESKTOP_SCREENSHOT_PE32DLL_BUFFER = TLV_META_TYPE_RAW | 3010233TLV_TYPE_DESKTOP_SCREENSHOT_PE64DLL_BUFFER = TLV_META_TYPE_RAW | 3012234TLV_TYPE_KEYSCAN_TRACK_ACTIVE_WINDOW = TLV_META_TYPE_BOOL | 3013235TLV_TYPE_KEYS_SEND = TLV_META_TYPE_STRING | 3014236TLV_TYPE_MOUSE_ACTION = TLV_META_TYPE_UINT | 3015237TLV_TYPE_MOUSE_X = TLV_META_TYPE_UINT | 3016238TLV_TYPE_MOUSE_Y = TLV_META_TYPE_UINT | 3017239TLV_TYPE_KEYEVENT_SEND = TLV_META_TYPE_RAW | 3018240241##242#243# Event Log244#245##246247TLV_TYPE_EVENT_SOURCENAME = TLV_META_TYPE_STRING | 4000248TLV_TYPE_EVENT_HANDLE = TLV_META_TYPE_QWORD | 4001249TLV_TYPE_EVENT_NUMRECORDS = TLV_META_TYPE_UINT | 4002250251TLV_TYPE_EVENT_READFLAGS = TLV_META_TYPE_UINT | 4003252TLV_TYPE_EVENT_RECORDOFFSET = TLV_META_TYPE_UINT | 4004253254TLV_TYPE_EVENT_RECORDNUMBER = TLV_META_TYPE_UINT | 4006255TLV_TYPE_EVENT_TIMEGENERATED= TLV_META_TYPE_UINT | 4007256TLV_TYPE_EVENT_TIMEWRITTEN = TLV_META_TYPE_UINT | 4008257TLV_TYPE_EVENT_ID = TLV_META_TYPE_UINT | 4009258TLV_TYPE_EVENT_TYPE = TLV_META_TYPE_UINT | 4010259TLV_TYPE_EVENT_CATEGORY = TLV_META_TYPE_UINT | 4011260TLV_TYPE_EVENT_STRING = TLV_META_TYPE_STRING | 4012261TLV_TYPE_EVENT_DATA = TLV_META_TYPE_RAW | 4013262263##264#265# Power266#267##268269TLV_TYPE_POWER_FLAGS = TLV_META_TYPE_UINT | 4100270TLV_TYPE_POWER_REASON = TLV_META_TYPE_UINT | 4101271272##273#274# Webcam275#276##277278TLV_TYPE_WEBCAM_IMAGE = TLV_META_TYPE_RAW | (TLV_EXTENSIONS + 1)279TLV_TYPE_WEBCAM_INTERFACE_ID= TLV_META_TYPE_UINT | (TLV_EXTENSIONS + 2)280TLV_TYPE_WEBCAM_QUALITY = TLV_META_TYPE_UINT | (TLV_EXTENSIONS + 3)281TLV_TYPE_WEBCAM_NAME = TLV_META_TYPE_STRING | (TLV_EXTENSIONS + 4)282283##284#285# Audio286#287##288289TLV_TYPE_AUDIO_DURATION = TLV_META_TYPE_UINT | (TLV_EXTENSIONS + 10)290TLV_TYPE_AUDIO_DATA = TLV_META_TYPE_RAW | (TLV_EXTENSIONS + 11)291TLV_TYPE_AUDIO_INTERFACE_ID = TLV_META_TYPE_UINT | (TLV_EXTENSIONS + 12)292TLV_TYPE_AUDIO_INTERFACE_NAME = TLV_META_TYPE_STRING | (TLV_EXTENSIONS + 13)293294end; end; end; end; end295296297298