rusthound-ce 2.5.14

Active Directory data collector for Bloodhound Community Edition written in rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

//! ADCS active modules, ESC8 web enrollment probe.
//!
//! Exposes `probe_enterpriseca_esc8`, called from `run_modules` after LDAP
//! collection, once per EnterpriseCA, on Tokio's blocking thread pool.

pub mod esc8;

use crate::modules::adcs::esc8::{check_esc8, Esc8Result};
use crate::objects::enterpriseca::WebEnrollmentEndpoint;

// Public result type

/// ESC8 probe data ready to inject into EnterpriseCA.
pub struct Esc8Data {
    pub http_enrollment_endpoints: Vec<WebEnrollmentEndpoint>,
}

impl Default for Esc8Data {
    fn default() -> Self {
        Self { http_enrollment_endpoints: vec![] }
    }
}

impl From<Esc8Result> for Esc8Data {
    fn from(r: Esc8Result) -> Self {
        Self { http_enrollment_endpoints: r.endpoints }
    }
}

// Public API

/// Probe web enrollment endpoints for a single Enterprise CA.
///
/// Always returns two endpoints, including when the host is unreachable: a
/// negative probe is reported, not dropped. Returns the empty default only when
/// `dns_host` is empty, since there is no URL to build in that case.
/// DCOnly guard is handled by the caller (`run_modules`).
pub fn probe_enterpriseca_esc8(dns_host: &str) -> Esc8Data {
    if dns_host.is_empty() {
        log::debug!("[adcs] ESC8 probe skipped: CA has no dnshostname");
        return Esc8Data::default();
    }
    Esc8Data::from(check_esc8(dns_host))
}