Andy Dixon
ae2b07db4b
RDP profiles can go through a Remote Desktop Gateway (MS-TSGU over an
HTTPS WebSocket) with its own username and password, stored like other
credentials (rdp-gateway-password). The gateway stream is bridged to a
loopback socket so the blocking RDP client uses it like any transport.
IronRDP's gateway crate (0.0.1) is vendored with fixes: it used
ironrdp-tls, which accepts any certificate, before sending Basic
credentials — the gateway is now verified against the web PKI; its
asserts on gateway-supplied lengths are errors instead of panics; and
the server port is passed through. Checked against a self-signed
openssl s_server: the connection is refused ('invalid peer certificate')
before any request or credential is sent. Not tested against a real
gateway; Basic-auth gateways only (no NTLM).
62 lines
1.1 KiB
TOML
62 lines
1.1 KiB
TOML
[package]
|
|
name = "nexus-fuzz"
|
|
version = "0.0.0"
|
|
publish = false
|
|
edition = "2024"
|
|
|
|
[package.metadata]
|
|
cargo-fuzz = true
|
|
|
|
[dependencies]
|
|
libfuzzer-sys = "0.4"
|
|
nexus-core = { path = "../core", features = ["fuzzing"] }
|
|
|
|
# Its own workspace (cargo-fuzz needs nightly and its own profile), so the root's IronRDP
|
|
# patches are repeated here; see ../vendor/README.md.
|
|
[workspace]
|
|
members = ["."]
|
|
|
|
[patch.crates-io]
|
|
picky = { path = "../vendor/picky" }
|
|
sspi = { path = "../vendor/sspi" }
|
|
ironrdp-session = { path = "../vendor/ironrdp-session" }
|
|
ironrdp-mstsgu = { path = "../vendor/ironrdp-mstsgu" }
|
|
|
|
[profile.release]
|
|
debug = 1
|
|
|
|
[[bin]]
|
|
name = "telnet"
|
|
path = "fuzz_targets/telnet.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "irc"
|
|
path = "fuzz_targets/irc.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "vnc"
|
|
path = "fuzz_targets/vnc.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "sshconfig"
|
|
path = "fuzz_targets/sshconfig.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "updater"
|
|
path = "fuzz_targets/updater.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|