[jcifs] Re: Remote command Execution?

[Oleg Alexeyev]

Hello,

> -----Original Message-----
> From: jcifs-bounces+oleg.alexeyev=arcadia.spb.ru at lists.samba.org
> [mailto:jcifs-bounces+oleg.alexeyev=arcadia.spb.ru at lists.samba.org
> ]On Behalf Of Jean-Baptiste Marchand
> Sent: Friday, September 10, 2004 8:37 PM
> To: jcifs at lists.samba.org
> Subject: Re: [jcifs] Re: Remote command Execution?
...
> > I think its possible using RPC to remotely install and start an
> arbitrary
> > service on a remote windows machine (from a windows machine).
> Is it possible to
> > do something similar from Linux, using jarapac perhaps? This
> could be another
> > way to implement remote command execution by installing the appropriate
> > service.
>
> Samba4 has the IDL for the svcctl interface, which is the MSRPC
> interface that can used to remotely administer the Windows SCM:
>
> http://www.hsc.fr/ressources/articles/win_net_srv/#htoc33

This article doesn't contain IDLs, only function names and their numbers,
there are no parameters and structure definitions. Is there IDL source
somewhere?

Some time ago I was trying to obtain SCM interface and made some draft of
the IDL (attached) using Muddle tool
(http://www.cse.unsw.edu.au/~matthewc/muddle/) (to extract function numbers
and their parameters from exe), MS Network Monitor (to map function numbers
to function names by calling Win32 functions and watching the packets) and
Win32 API docs (to make parameters and structures meaningful). It wasn't
tested at all (and wasn't actually finished) :(, so perhaps it might be
useful as starting point only.

If anybody has better ideas on how to obtain interfaces ;), or already has
SCM IDL / made some progress working with it from Java, I'd be really glad
to hear.


Regards,
--
Oleg Alexeyev
Software Architect
Arcadia Inc. http://www.arcadia.spb.ru
-------------- next part --------------
A non-text attachment was scrubbed...
Name: svcctl.idl
Type: application/octet-stream
Size: 16971 bytes
Desc: not available
Url : http://lists.samba.org/archive/jcifs/attachments/20040910/ee3411a0/svcctl-0001.obj