nasl_wmi.c File Reference

NASL WMI functions. More...

#include <string.h>
#include <stdio.h>
#include <netinet/in.h>
#include <sys/socket.h>
#include <arpa/inet.h>
#include "system.h"
#include "plugutils.h"
#include "nasl_wmi.h"
#include "openvas_wmi_interface.h"

Macros
#define	IMPORT(var)   char *var = get_str_local_var_by_name(lexic, #var)
#define	max   5

Functions
tree_cell *	nasl_wmi_versioninfo (lex_ctxt *lexic)
	Get a version string of the WMI implementation.
tree_cell *	nasl_wmi_connect (lex_ctxt *lexic)
	Connect to a WMI service and return a handle for it.
tree_cell *	nasl_wmi_close (lex_ctxt *lexic)
	Close WMI service handle.
tree_cell *	nasl_wmi_query (lex_ctxt *lexic)
	Perform WQL query.
tree_cell *	nasl_wmi_connect_rsop (lex_ctxt *lexic)
	Connect to a WMI RSOP service and return a handle for it.
tree_cell *	nasl_wmi_query_rsop (lex_ctxt *lexic)
	WMI RSOP query.
tree_cell *	nasl_wmi_connect_reg (lex_ctxt *lexic)
	Connect to a WMI Registry service and return a handle for it.
tree_cell *	nasl_wmi_reg_get_sz (lex_ctxt *lexic)
	Get string value from Registry.
tree_cell *	nasl_wmi_reg_enum_value (lex_ctxt *lexic)
	Enumerate registry values.
tree_cell *	nasl_wmi_reg_enum_key (lex_ctxt *lexic)
	Enumerate registry keys.
tree_cell *	nasl_wmi_reg_get_bin_val (lex_ctxt *lexic)
	Get registry binary value.
tree_cell *	nasl_wmi_reg_get_dword_val (lex_ctxt *lexic)
	Get registry DWORD value.
tree_cell *	nasl_wmi_reg_get_ex_string_val (lex_ctxt *lexic)
	Get registry expanded string value.
tree_cell *	nasl_wmi_reg_get_mul_string_val (lex_ctxt *lexic)
	Get registry multi valued strings.
tree_cell *	nasl_wmi_reg_get_qword_val (lex_ctxt *lexic)
	Get registry QWORD value.

---

Detailed Description

NASL WMI functions.

Provides WMI (Windows Management Instrumentation) functionalities via calling functions of a appropriate library. The API offers three groups of functions:

1. WMI_FUNCTIONS
2. WMI_RSOP_FUNCTIONS (RSOP = Resultant Set of Policy)
3. WMI_REGISTRY_FUNCTIONS

---

Macro Definition Documentation

#define IMPORT

(

var

)

char *var = get_str_local_var_by_name(lexic, #var)

Todo:

Check for memleak and document reference counting in tree cells. In some cases, after a tree_cell (typically retc) has been allocated with alloc_tree_cell, it is not later freed or deref_tree_cell'ed. It has to evaluated if that is okay or leads to memory leaks.

---

Function Documentation

tree_cell* nasl_wmi_close

(

lex_ctxt *

lexic

)

Close WMI service handle.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL in case of a serious problem. Else returns a treecell with integer == 1.

Retrieves local variable "wmi_handle" from the lexical context and closes the respective handle.

tree_cell* nasl_wmi_connect

(

lex_ctxt *

lexic

)

Connect to a WMI service and return a handle for it.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL in case the connection could not be established. Else a tree_cell with the handle.

Retrieves local variables "host", "username", "password" and "ns" from the lexical context, performs and connects to this given WMI service returning a handle for the service as integer.

tree_cell* nasl_wmi_connect_reg

(

lex_ctxt *

lexic

)

Connect to a WMI Registry service and return a handle for it.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL in case the connection could not be established. Else a tree_cell with the handle.

Retrieves local variables "host", "username", "password" from the lexical context, performs and connects to this given WMI service returning a handle for the service as integer.

tree_cell* nasl_wmi_connect_rsop

(

lex_ctxt *

lexic

)

Connect to a WMI RSOP service and return a handle for it.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL in case the connection could not be established. Else a tree_cell with the handle.

Retrieves local variables "host", "username", "password" from the lexical context, performs and connects to this given WMI service returning a handle for the service as integer.

tree_cell* nasl_wmi_query

(

lex_ctxt *

lexic

)

Perform WQL query.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL in case the query can not be executed properly. Else a tree_cell with the result of the query as string.

Retrieves local variables "wmi_handle" and "query" from the lexical context, performs a WMI query on the given handle and returns the result as a string.

tree_cell* nasl_wmi_query_rsop

(

lex_ctxt *

lexic

)

WMI RSOP query.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL on failure, 1 on success

Retrieves local variables "wmi_handle", "query" from the lexical context, performs the RSOP query returning results in string format.

tree_cell* nasl_wmi_reg_enum_key

(

lex_ctxt *

lexic

)

Enumerate registry keys.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL if the query fails. Else a tree_cell with the Registry keys.

Retrieves local variables "wmi_handle", "hive", "key" from the lexical context, performs the registry query returning a string value.

tree_cell* nasl_wmi_reg_enum_value

(

lex_ctxt *

lexic

)

Enumerate registry values.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL if the query fails. Else a tree_cell with the Registry values.

Retrieves local variables "wmi_handle", "hive", "key" from the lexical context, performs the registry query returning a string value.

tree_cell* nasl_wmi_reg_get_bin_val

(

lex_ctxt *

lexic

)

Get registry binary value.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL on failure, else tree_cell containing string representation of binary value

Retrieves local variables "wmi_handle", "hive", "key", "val_name" from the lexical context, performs the registry operation querying binary value.

tree_cell* nasl_wmi_reg_get_dword_val

(

lex_ctxt *

lexic

)

Get registry DWORD value.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL on failure, else tree_cell containing string representation of DWORD value

Retrieves local variables "wmi_handle", "hive", "key", "val_name" from the lexical context, performs the registry operation querying DWORD value.

tree_cell* nasl_wmi_reg_get_ex_string_val

(

lex_ctxt *

lexic

)

Get registry expanded string value.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL on failure, else tree_cell containing string representation of Expanded String value

Retrieves local variables "wmi_handle", "hive", "key", "val_name" from the lexical context, performs the registry operation querying Expanded string value.

tree_cell* nasl_wmi_reg_get_mul_string_val

(

lex_ctxt *

lexic

)

Get registry multi valued strings.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL on failure, else tree_cell containing string representation of multi valued strings

Retrieves local variables "wmi_handle", "hive", "key", "val_name" from the lexical context, performs the registry operation querying Expanded string value.

tree_cell* nasl_wmi_reg_get_qword_val

(

lex_ctxt *

lexic

)

Get registry QWORD value.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL on failure, else tree_cell containing string representation of QWORD value

Retrieves local variables "wmi_handle", "hive", "key", "val_name" from the lexical context, performs the registry operation querying Expanded string value.

tree_cell* nasl_wmi_reg_get_sz

(

lex_ctxt *

lexic

)

Get string value from Registry.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL if the query fails. Else a tree_cell with the Registry value.

Retrieves local variables "wmi_handle", "hive", "key", "key_name" from the lexical context, performs the registry query returning a string value.

tree_cell* nasl_wmi_versioninfo

(

lex_ctxt *

lexic

)

Get a version string of the WMI implementation.

Parameters:

[in]

lexic

Lexical context of NASL interpreter.

Returns:

NULL in case no implementation is present. Else a tree_cell with the version as string.