mimikatz/modules/kull_m_file.h

/*	Benjamin DELPY `gentilkiwi`
	http://blog.gentilkiwi.com
	benjamin@gentilkiwi.com
	Licence : https://creativecommons.org/licenses/by/4.0/
*/
#pragma once
#include "globals.h"
#include <shlwapi.h>
#include "kull_m_string.h"

BOOL isBase64InterceptOutput, isBase64InterceptInput;

typedef BOOL (CALLBACK * PKULL_M_FILE_FIND_CALLBACK) (DWORD level, PCWCHAR fullpath, PCWCHAR path, PVOID pvArg);

BOOL kull_m_file_getCurrentDirectory(wchar_t ** ppDirName);
BOOL kull_m_file_getAbsolutePathOf(PCWCHAR thisData, wchar_t ** reponse);
BOOL kull_m_file_isFileExist(PCWCHAR fileName);
BOOL kull_m_file_writeData(PCWCHAR fileName, LPCVOID data, DWORD lenght);
BOOL kull_m_file_readData(PCWCHAR fileName, PBYTE * data, PDWORD lenght);	// for 'little' files !
void kull_m_file_cleanFilename(PWCHAR fileName);
PWCHAR kull_m_file_fullPath(PCWCHAR fileName);
BOOL kull_m_file_Find(PCWCHAR directory, PCWCHAR filter, BOOL isRecursive /*TODO*/, DWORD level, BOOL isPrintInfos, PKULL_M_FILE_FIND_CALLBACK callback, PVOID pvArg);
Initial upload 2014-04-06 18:31:53 +00:00			/* Benjamin DELPY `gentilkiwi`
			`http://blog.gentilkiwi.com`
			`benjamin@gentilkiwi.com`
Global licence update, credits to Vincent LE TOUX for DCSync, and lsadump::hash moved to crypto::hash 2015-08-25 09:19:01 +00:00			`Licence : https://creativecommons.org/licenses/by/4.0/`
Initial upload 2014-04-06 18:31:53 +00:00			`*/`
			`#pragma once`
Code cleaning & Base64 output 2014-04-23 20:00:29 +00:00			`#include "globals.h"`
Initial upload 2014-04-06 18:31:53 +00:00			`#include <shlwapi.h>`
[new] standard::base64 can handle input or output (for @OJ) [internal] kull_m_file now supports read/write to base64 [internal] kull_m_string function to modify BOOL value from arguments [internal] kerberos::pacinfo now supports more PAC types 2016-12-22 23:21:08 +00:00			`#include "kull_m_string.h"`
Initial upload 2014-04-06 18:31:53 +00:00
[new] standard::base64 can handle input or output (for @OJ) [internal] kull_m_file now supports read/write to base64 [internal] kull_m_string function to modify BOOL value from arguments [internal] kerberos::pacinfo now supports more PAC types 2016-12-22 23:21:08 +00:00			`BOOL isBase64InterceptOutput, isBase64InterceptInput;`
Code cleaning & Base64 output 2014-04-23 20:00:29 +00:00
Lots of internals and 2003 SP1 support - [new] sekurlsa module and its kerberos submodule now work with old 2003 SP1 (live or dump) - [remove] misc::wifi with WLanAPI will be replaced with dpapi::wifi raw access - [fix] crypto::certificate buffer free at the right place - [internal] new kull_m_file Find function with callback - [internal] removed kull_m_file functions (read/write/file exist) with environment-variables, now used for all command-lines - [internal] kull_m_crypto_hash better checks for CRC32 trick - [internal] mimilove for Windows 2000 banner update - [internal] crypto::system now works with buffers (for future registry access) - [internal] kerberos::ptt & crypto::system call kull_m_file_Find instead of their own implementation - [internal] remove CrtlHandler, from mimikatz main modules, when exiting to let PowerShell clean - [internal] expand command lines environment-variables from mimikatz main modules 2016-01-31 15:01:45 +00:00			`typedef BOOL (CALLBACK * PKULL_M_FILE_FIND_CALLBACK) (DWORD level, PCWCHAR fullpath, PCWCHAR path, PVOID pvArg);`

Initial upload 2014-04-06 18:31:53 +00:00			`BOOL kull_m_file_getCurrentDirectory(wchar_t ** ppDirName);`
lsadump::lsa can play with AD supplementalCredentials, with mimilib.dll 2014-05-24 20:16:46 +00:00			`BOOL kull_m_file_getAbsolutePathOf(PCWCHAR thisData, wchar_t ** reponse);`
Crypto & Kerberos enhancements - [fix] dpapi::capi now deals with AT_SIGNATURE keys - [fix] sekurlsa::kerberos / kerberos:: encryption type are now signed - [new] kerberos::ask to ask / save TGS from current TGT - [new] crypto::system to describe/to export Windows System Certificate (cert, crl, ctl, keyid) - [internal] smaller banner for smaller displays - [internal] Copyrights for 2016 - [internal] kull_m_file can deal with environment-variable strings in paths - [internal] kull_m_crypto new types for CERT_PROP_*_ID 2016-01-12 02:13:12 +00:00			`BOOL kull_m_file_isFileExist(PCWCHAR fileName);`
minor file function change 2015-01-13 21:08:23 +00:00			`BOOL kull_m_file_writeData(PCWCHAR fileName, LPCVOID data, DWORD lenght);`
Lots of internals and 2003 SP1 support - [new] sekurlsa module and its kerberos submodule now work with old 2003 SP1 (live or dump) - [remove] misc::wifi with WLanAPI will be replaced with dpapi::wifi raw access - [fix] crypto::certificate buffer free at the right place - [internal] new kull_m_file Find function with callback - [internal] removed kull_m_file functions (read/write/file exist) with environment-variables, now used for all command-lines - [internal] kull_m_crypto_hash better checks for CRC32 trick - [internal] mimilove for Windows 2000 banner update - [internal] crypto::system now works with buffers (for future registry access) - [internal] kerberos::ptt & crypto::system call kull_m_file_Find instead of their own implementation - [internal] remove CrtlHandler, from mimikatz main modules, when exiting to let PowerShell clean - [internal] expand command lines environment-variables from mimikatz main modules 2016-01-31 15:01:45 +00:00			`BOOL kull_m_file_readData(PCWCHAR fileName, PBYTE * data, PDWORD lenght); // for 'little' files !`
Crypto & Kerberos enhancements - [fix] dpapi::capi now deals with AT_SIGNATURE keys - [fix] sekurlsa::kerberos / kerberos:: encryption type are now signed - [new] kerberos::ask to ask / save TGS from current TGT - [new] crypto::system to describe/to export Windows System Certificate (cert, crl, ctl, keyid) - [internal] smaller banner for smaller displays - [internal] Copyrights for 2016 - [internal] kull_m_file can deal with environment-variable strings in paths - [internal] kull_m_crypto new types for CERT_PROP_*_ID 2016-01-12 02:13:12 +00:00			`void kull_m_file_cleanFilename(PWCHAR fileName);`
Lots of internals and 2003 SP1 support - [new] sekurlsa module and its kerberos submodule now work with old 2003 SP1 (live or dump) - [remove] misc::wifi with WLanAPI will be replaced with dpapi::wifi raw access - [fix] crypto::certificate buffer free at the right place - [internal] new kull_m_file Find function with callback - [internal] removed kull_m_file functions (read/write/file exist) with environment-variables, now used for all command-lines - [internal] kull_m_crypto_hash better checks for CRC32 trick - [internal] mimilove for Windows 2000 banner update - [internal] crypto::system now works with buffers (for future registry access) - [internal] kerberos::ptt & crypto::system call kull_m_file_Find instead of their own implementation - [internal] remove CrtlHandler, from mimikatz main modules, when exiting to let PowerShell clean - [internal] expand command lines environment-variables from mimikatz main modules 2016-01-31 15:01:45 +00:00			`PWCHAR kull_m_file_fullPath(PCWCHAR fileName);`
			`BOOL kull_m_file_Find(PCWCHAR directory, PCWCHAR filter, BOOL isRecursive /TODO/, DWORD level, BOOL isPrintInfos, PKULL_M_FILE_FIND_CALLBACK callback, PVOID pvArg);`