Merge pull request #69 from RemiEscourrou/dev-computerversion

Add scanner computer version

Author: vletoux

NativeMethods.cs

@@ -643,7 +643,45 @@ public static DateTime GetStartupTime(string server)
 			}
 		}
 
-		[DllImport("winspool.drv", CharSet = CharSet.Unicode, EntryPoint = "OpenPrinterW", SetLastError = true)]
+        [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
+        public struct WKSTA_INFO_100
+        {
+            public int platform_id;
+            public string computer_name;
+            public string lan_group;
+            public int ver_major;
+            public int ver_minor;
+        }
+
+        [DllImport("netapi32.dll", CharSet = CharSet.Unicode)]
+        internal static extern uint NetWkstaGetInfo(
+                string servername, 
+                int level, 
+                out IntPtr bufptr);
+
+        [SecurityPermission(SecurityAction.Demand, Flags = SecurityPermissionFlag.UnmanagedCode)]
+        public static string GetComputerVersion(string server)
+        {
+            IntPtr buffer = IntPtr.Zero;
+            uint ret = NetWkstaGetInfo(server,100, out buffer);
+            if (ret != 0)
+            {
+                Trace.WriteLine("GetComputerVersion " + server + " returned " + ret);
+                return "not found";
+            }
+            try
+            {
+                WKSTA_INFO_100 data = (WKSTA_INFO_100)Marshal.PtrToStructure(buffer, typeof(WKSTA_INFO_100));
+                string version = data.ver_major.ToString() + "." + data.ver_minor.ToString();
+                return version;
+            }
+            finally
+            {
+                NetApiBufferFree(buffer);
+            }
+        }
+
+        [DllImport("winspool.drv", CharSet = CharSet.Unicode, EntryPoint = "OpenPrinterW", SetLastError = true)]
 		internal static extern bool OpenPrinter(string pPrinterName, out IntPtr phPrinter, IntPtr pDefault);
 
 		[DllImport("winspool.drv", CharSet = CharSet.Unicode, EntryPoint = "ClosePrinter", SetLastError = true)]

PingCastle.csproj

@@ -283,6 +283,7 @@
     <Compile Include="Rules\RuleSet.cs" />
     <Compile Include="Scanners\AntivirusScanner.cs" />
     <Compile Include="Scanners\bluekeepscanner.cs" />
+    <Compile Include="Scanners\ComputerVersion.cs" />
     <Compile Include="Scanners\ZeroLogonScanner.cs" />
     <Compile Include="Scanners\ExportUsersScanner.cs" />
     <Compile Include="Scanners\RemoteScanner.cs" />

Scanners/ComputerVersion.cs

@@ -0,0 +1,42 @@
+//
+// Copyright (c) Ping Castle. All rights reserved.
+// https://www.pingcastle.com
+//
+// Licensed under the Non-Profit OSL. See LICENSE file in the project root for full license information.
+//
+using PingCastle.ADWS;
+using PingCastle.misc;
+using System;
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.IO;
+using System.Net;
+using System.Net.Sockets;
+using System.Security.Principal;
+using System.Text;
+using System.Threading;
+
+namespace PingCastle.Scanners
+{
+	public class ComputerVersion : ScannerBase
+    {
+		public override string Name { get { return "computerversion"; } }
+
+		public override string Description { get { return "Get the version of a computer. Can be used to determine if obsolete operating systems are still present."; } }
+
+		override protected string GetCsvHeader()
+		{
+			return "Computer\tVersion";
+		}
+
+		override protected string GetCsvData(string computer)
+		{
+		    string version = NativeMethods.GetComputerVersion(computer);
+			if (version != "not found")
+			{
+				return computer + "\t" + version;
+			}
+			return null;
+		}
+	}
+}