Module msg 

SMB2 request bodies and response parsers (MS-SMB2 §2.2). Offsets in the on-wire *Offset fields are measured from the start of the SMB2 header (i.e. 64 + body_off).

Constants

FSCTL_PIPE_TRANSCEIVE

Functions

close_req

SMB2 CLOSE (§2.2.15).

create_file

Generic disk-file CREATE (§2.2.13). path is relative to the connected share root (no leading backslash). Callers pass the access mask, share mode, disposition, and options.

create_file_id

FileId (16 bytes) from a CREATE response.

create_pipe

Open a named pipe (e.g. “samr”) on the IPC$ tree.

ioctl_output

Extract the pipe output (RPC response bytes) from an IOCTL response.

ioctl_transceive

Send input through the pipe and read the response in one round trip.

negotiate

Offer dialect 2.1.0 with a random client GUID.

read_output

Extract the data returned by a READ response (§2.2.20).

read_req

SMB2 READ (§2.2.19): read length bytes at offset from the open file.

session_setup

The security buffer holds a raw NTLMSSP token.

session_setup_token

Extract the security buffer (server NTLM token) from a SESSION_SETUP response.

tree_connect

write_req

SMB2 WRITE (§2.2.21): write data to the open handle at offset.