rusthound_ce/objects/
container.rs

1use serde_json::value::Value;
2use serde::{Deserialize, Serialize};
3use ldap3::SearchEntry;
4use log::{debug, trace};
5use std::collections::HashMap;
6use std::error::Error;
7
8use crate::objects::common::{LdapObject, AceTemplate, SPNTarget, Link, Member};
9use crate::enums::acl::parse_ntsecuritydescriptor;
10use crate::enums::sid::decode_guid_le;
11use crate::utils::date::string_to_epoch;
12
13
14/// Container structure
15#[derive(Debug, Clone, Deserialize, Serialize, Default)]
16pub struct Container {
17    #[serde(rename = "Properties")]
18    properties: ContainerProperties,
19    #[serde(rename = "ChildObjects")]
20    child_objects: Vec<Member>,
21    #[serde(rename = "Aces")]
22    aces: Vec<AceTemplate>,
23    #[serde(rename = "ObjectIdentifier")]
24    object_identifier: String,
25    #[serde(rename = "IsDeleted")]
26    is_deleted: bool,
27    #[serde(rename = "IsACLProtected")]
28    is_acl_protected: bool,
29    #[serde(rename = "ContainedBy")]
30    contained_by: Option<Member>,
31    }
32
33impl Container {
34    // New container.
35    pub fn new() -> Self { 
36        Self { ..Default::default() } 
37    }
38
39    /// Function to parse and replace value for Container object.
40    pub fn parse(
41        &mut self,
42        result: SearchEntry,
43        domain: &str,
44        dn_sid: &mut HashMap<String, String>,
45        sid_type: &mut HashMap<String, String>,
46        domain_sid: &str,
47        schema_guid_map: &HashMap<String, String>,
48    ) -> Result<(), Box<dyn Error>> {
49        let result_dn: String = result.dn.to_uppercase();
50        let result_attrs: HashMap<String, Vec<String>> = result.attrs;
51        let result_bin: HashMap<String, Vec<Vec<u8>>> = result.bin_attrs;
52
53        // Debug for current object
54        debug!("Parse Container: {result_dn}");
55
56        // Trace all result attributes
57        for (key, value) in &result_attrs {
58            trace!("  {key:?}:{value:?}");
59        }
60        // Trace all bin result attributes
61        for (key, value) in &result_bin {
62            trace!("  {key:?}:{value:?}");
63        }
64
65        // Change all values...
66        self.properties.domain = domain.to_uppercase();
67        self.properties.distinguishedname = result_dn;
68        self.properties.domainsid = domain_sid.to_string();
69
70        // With a check
71        for (key, value) in &result_attrs {
72            match key.as_str() {
73                "name" => {
74                    let name = &value[0];
75                    let email = format!("{}@{}",name.to_owned(),domain);
76                    self.properties.name = email.to_uppercase();
77                }
78                "description" => {
79                    self.properties.description = Some(value[0].to_owned());
80                }
81                "whenCreated" => {
82                    let epoch = string_to_epoch(&value[0])?;
83                    if epoch.is_positive() {
84                        self.properties.whencreated = epoch;
85                    }
86                }
87                _ => {}
88            }
89        }
90        // For all, bins attributs
91        for (key, value) in &result_bin {
92            match key.as_str() {
93                "objectGUID" => {
94                    let guid = decode_guid_le(&value[0]);
95                    self.object_identifier = guid.to_owned();
96                    self.properties.objectguid = guid;
97                }
98                "nTSecurityDescriptor" => {
99                    // nTSecurityDescriptor raw to string
100                    let relations_ace = parse_ntsecuritydescriptor(
101                        self,
102                        &value[0],
103                        "Container",
104                        &result_attrs,
105                        &result_bin,
106                        domain,
107                        schema_guid_map,
108                    );
109                    self.aces = relations_ace;
110                }
111                "isDeleted" => {
112                    self.is_deleted = true;
113                }
114                _ => {}
115            }
116        }
117
118        // Push DN and SID in HashMap
119        dn_sid.insert(
120            self.properties.distinguishedname.to_string(),
121            self.object_identifier.to_string()
122        );
123        // Push DN and Type
124        sid_type.insert(
125            self.object_identifier.to_string(),
126            "Container".to_string(),
127        );
128
129        // Trace and return Contaier struct
130        // trace!("JSON OUTPUT: {:?}",serde_json::to_string(&self).unwrap());
131        Ok(())
132    }
133}
134
135/// Default FSP properties structure
136#[derive(Debug, Clone, Deserialize, Serialize, Default)]
137pub struct ContainerProperties {
138    domain: String,
139    name: String,
140    distinguishedname: String,
141    domainsid: String,
142    objectguid: String,
143    doesanyacegrantownerrights: bool,
144    doesanyinheritedacegrantownerrights: bool,
145    isaclprotected: bool,
146    highvalue: bool,
147    description: Option<String>,
148    whencreated: i64,
149}
150
151impl LdapObject for Container {
152    // To JSON
153    fn to_json(&self) -> Value {
154        serde_json::to_value(self).unwrap()
155    }
156
157    // Get values
158    fn get_object_identifier(&self) -> &String {
159        &self.object_identifier
160    }
161    fn get_is_acl_protected(&self) -> &bool {
162        &self.is_acl_protected
163    }
164    fn get_aces(&self) -> &Vec<AceTemplate> {
165        &self.aces
166    }
167    fn get_spntargets(&self) -> &Vec<SPNTarget> {
168        panic!("Not used by current object.");
169    }
170    fn get_allowed_to_delegate(&self) -> &Vec<Member> {
171        panic!("Not used by current object.");
172    }
173    fn get_links(&self) -> &Vec<Link> {
174        panic!("Not used by current object.");
175    }
176    fn get_contained_by(&self) -> &Option<Member> {
177        &self.contained_by
178    }
179    fn get_child_objects(&self) -> &Vec<Member> {
180        &self.child_objects
181    }
182    fn get_haslaps(&self) -> &bool {
183        &false
184    }
185    
186    // Get mutable values
187    fn get_aces_mut(&mut self) -> &mut Vec<AceTemplate> {
188        &mut self.aces
189    }
190    fn get_spntargets_mut(&mut self) -> &mut Vec<SPNTarget> {
191        panic!("Not used by current object.");
192    }
193    fn get_allowed_to_delegate_mut(&mut self) -> &mut Vec<Member> {
194        panic!("Not used by current object.");
195    }
196    
197    // Edit values
198    fn set_is_acl_protected(&mut self, is_acl_protected: bool) {
199        self.is_acl_protected = is_acl_protected;
200        self.properties.isaclprotected = is_acl_protected;
201    }
202    fn set_aces(&mut self, aces: Vec<AceTemplate>) {
203        self.aces = aces;
204    }
205    fn set_spntargets(&mut self, _spn_targets: Vec<SPNTarget>) {
206        // Not used by current object.
207    }
208    fn set_allowed_to_delegate(&mut self, _allowed_to_delegate: Vec<Member>) {
209        // Not used by current object.
210    }
211    fn set_links(&mut self, _links: Vec<Link>) {
212        // Not used by current object.
213    }
214    fn set_contained_by(&mut self, contained_by: Option<Member>) {
215        self.contained_by = contained_by;
216    }
217    fn set_child_objects(&mut self, child_objects: Vec<Member>) {
218        self.child_objects = child_objects
219    }
220    fn set_owner_rights_flags(&mut self, any: bool, any_inherited: bool) {
221        self.properties.doesanyacegrantownerrights = any;
222        self.properties.doesanyinheritedacegrantownerrights = any_inherited;
223    }
224}
rusthound_ce/objects/container.rs

rusthound_ce/objects/
container.rs
