lgcosta/go-ntlm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add some basic ntlm challenge validation (#2)

Browse Source 
* add some basic ntlm challenge validation

* add some unit tests
This commit is contained in:
Vadim
2021-05-03 21:48:19 -04:00
committed by GitHub
parent ec337d51d2
commit ad847b4c56
2 changed files with 31 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
ntlm/message_challenge.go
View File

@@ -1,4 +1,4 @@
//Copyright 2013 Thomson Reuters Global Resources. BSD License please see License file for more information
// Copyright 2013 Thomson Reuters Global Resources. BSD License please see License file for more information
package ntlm
@@ -54,6 +54,10 @@ type ChallengeMessage struct {
}
func ParseChallengeMessage(body []byte) (*ChallengeMessage, error) {
if len(body) < 32 {
return nil, errors.New("invalid NTLM challenge")
}
challenge := new(ChallengeMessage)
challenge.Signature = body[0:8]
@@ -79,6 +83,10 @@ func ParseChallengeMessage(body []byte) (*ChallengeMessage, error) {
offset := 32
if NTLMSSP_NEGOTIATE_TARGET_INFO.IsSet(challenge.NegotiateFlags) {
if len(body) < 48 {
return nil, errors.New("invalid NTLMSSP_NEGOTIATE_TARGET_INFO")
}
challenge.Reserved = body[32:40]
challenge.TargetInfoPayloadStruct, err = ReadBytePayload(40, body)