Example #1
0
        public static object GetKerberosPacket(byte[] kerberosBuffer)
        {
            object result = null;

            byte[] asn_buffer = AsnIO.FindBER(kerberosBuffer);

            if (asn_buffer != null)
            {
                AsnElt asn_object = AsnElt.Decode(asn_buffer);

                // Get the application number
                switch (asn_object.TagValue)
                {
                case (int)MessageType.krb_tgs_rep:
                    result = new KerberosTgsRepPacket(kdc_rep: asn_object.Sub[0].Sub);
                    break;

                case (int)MessageType.krb_as_rep:
                    result = new KerberosAsRepPacket(kdc_rep: asn_object.Sub[0].Sub);
                    break;
                }
            }

            return(result);
        }
Example #2
0
        public static object GetKerberosPacket(byte[] kerberosBuffer, string protocol)
        {
            object result = null;

            // Consider the TCP Record Mark when parsing Kerberos over TCP packets.
            if (protocol == "TCP")
            {
                var recordMarkLengthBuffer = kerberosBuffer.SubArray(0, 4);

                // The return value of ToInt32 method depends on system architecture.
                // Therfore we explicitly enforce BigEndian.
                if (BitConverter.IsLittleEndian)
                {
                    Array.Reverse(recordMarkLengthBuffer);
                }

                var recordMarkLength = BitConverter.ToInt32(recordMarkLengthBuffer, 0);

                if (recordMarkLength + 4 <= kerberosBuffer.Length)
                {
                    kerberosBuffer = kerberosBuffer.SubArray(4, recordMarkLength);
                }
                else
                {
                    throw new Exception("Kerberos record mark length is out of range");
                }
            }

            byte[] asn_buffer = AsnIO.FindBER(kerberosBuffer);

            if (asn_buffer != null)
            {
                AsnElt asn_object = AsnElt.Decode(asn_buffer);

                // Get the application number.
                switch (asn_object.TagValue)
                {
                case (int)MessageType.krb_tgs_rep:
                    result = new KerberosTgsRepPacket(kdc_rep: asn_object.Sub[0].Sub);
                    break;

                case (int)MessageType.krb_as_rep:
                    result = new KerberosAsRepPacket(kdc_rep: asn_object.Sub[0].Sub);
                    break;
                }
            }

            return(result);
        }