infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
metasploit-framework/external/source/exploits/make.bat

99 lines
2.1 KiB
Batchfile
Raw Normal View History

Add RDI submodule, port Kitrap0d This commit is the first in a series that will move all the exploits that use RDI over to the R7 fork. The RDI source will be in a single known location and each exploit will have to work from that location. The kitrap0d exploit has been migrated over to use this submodule so that there's one example of how it's done for future contributions to follow.
2013-11-27 06:04:41 +00:00
@ECHO OFF
IF "%VCINSTALLDIR%" == "" GOTO NEED_VS
IF "%1"=="x86" GOTO BUILD_X86
IF "%1"=="X86" GOTO BUILD_X86
IF "%1"=="x64" GOTO BUILD_X64
IF "%1"=="X64" GOTO BUILD_X64
ECHO "Building Exploits x64 and x86 (Release)"
SET PLAT=all
GOTO RUN
:BUILD_X86
ECHO "Building Exploits x86 (Release)"
SET PLAT=x86
GOTO RUN
:BUILD_X64
ECHO "Building Exploits x64 (Release)"
SET PLAT=x64
GOTO RUN
:RUN
ECHO "Building CVE-2010-0232 (KiTrap0D)"
PUSHD CVE-2010-0232
msbuild.exe make.msbuild /target:%PLAT%
POPD
Add make script for nvidia nvsvc
2013-12-08 11:20:36 +00:00
IF "%ERRORLEVEL%"=="0" (
ECHO "Building CVE-2013-0109 (nvidia_nvsvc)"
PUSHD CVE-2013-0109
msbuild.exe make.msbuild /target:%PLAT%
POPD
)
ppr_flatten_rec update, RDI submodule, and refactor This commit contains a few changes for the ppr_flatten_rec local windows exploit. First, the exploit binary itself: * Updated to use the RDI submodule. * Updated to build with VS2013. * Updated to generate a binary called `ppr_flatten_rc.x86.dll`. * Invocation of the exploit requires address of the payload to run. Second, the module in MSF behaved a little strange. I expected it to create a new session with system privs and leave the existing session alone. This wasn't the case. It used to create an instance of notepad, migrate the _existing_ session to it, and run the exploit from there. This behaviour didn't seem to be consistent with other local exploits. The changes include: * Existing session is now left alone, only used as a proxy. * New notepad instance has exploit reflectively loaded. * New notepad instance has payload directly injected. * Exploit invocation takes the payload address as a parameter. * A wait is added as the exploit is slow to run (nature of the exploit). * Payloads are executed on successful exploit.
2013-11-27 10:00:50 +00:00
IF "%ERRORLEVEL%"=="0" (
ECHO "Building CVE-2013-3660 (ppr_flatten_rec)"
PUSHD CVE-2013-3660
msbuild.exe make.msbuild /target:%PLAT%
POPD
)
Remove the DLL and add make.msbuild for easier compiling.
2014-02-07 15:05:05 +00:00
IF "%ERRORLEVEL%"=="0" (
ECHO "Building CVE-2013-3881 (win32k_null_page)"
PUSHD CVE-2013-3881
msbuild.exe make.msbuild /target:%PLAT%
POPD
)
Add exploit source code
2014-10-23 23:59:58 +00:00
IF "%ERRORLEVEL%"=="0" (
Fix project settings, make files, start tidying of code
2014-10-27 21:58:19 +00:00
ECHO "Building CVE-2014-4113 (track_popup_menu)"
Add exploit source code
2014-10-23 23:59:58 +00:00
PUSHD CVE-2014-4113
msbuild.exe make.msbuild /target:%PLAT%
POPD
)
Refactoring exploit and adding build files for dll.
2014-03-12 10:25:52 +00:00
IF "%ERRORLEVEL%"=="0" (
ECHO "Building CVE-2013-1300 (schlamperei)"
PUSHD CVE-2013-1300
msbuild.exe make.msbuild /target:%PLAT%
POPD
)
Remove ARM config, add build to make for all exploits
2014-02-26 00:57:15 +00:00
IF "%ERRORLEVEL%"=="0" (
Add make support for command line builds
2014-02-26 06:40:54 +00:00
ECHO "Building bypassuac (on-disk)"
PUSHD bypassuac
msbuild.exe make.msbuild /target:%PLAT%
POPD
Include meterpreter bins, add Sandbox builds This commit contains the binaries that are needed for Juan's sandbox escape functionality (ie. the updated old libloader code). It also contains rebuilt binaries for all meterpreter plugins. I've also added command line build scripts for the sandbox escapes and added that to the "exploits" build.
2014-05-30 22:12:34 +00:00
Add exploit source code
2014-10-23 23:59:58 +00:00
)
Merge remote-tracking branch 'upstream/master' into bypassuac_redo Conflicts: external/source/exploits/make.bat
2014-02-28 20:26:24 +00:00
IF "%ERRORLEVEL%"=="0" (
ECHO "Building bypassuac (in-memory)"
Remove ARM config, add build to make for all exploits
2014-02-26 00:57:15 +00:00
PUSHD bypassuac_injection
msbuild.exe make.msbuild /target:%PLAT%
POPD
)
Add exploit source code
2014-10-23 23:59:58 +00:00
)
Include meterpreter bins, add Sandbox builds This commit contains the binaries that are needed for Juan's sandbox escape functionality (ie. the updated old libloader code). It also contains rebuilt binaries for all meterpreter plugins. I've also added command line build scripts for the sandbox escapes and added that to the "exploits" build.
2014-05-30 22:12:34 +00:00
IF "%ERRORLEVEL%"=="0" (
ECHO "Building IE11 Sandbox bypasses"
PUSHD IE11SandboxEscapes
msbuild.exe make.msbuild /target:%PLAT%
POPD
)
Add RDI submodule, port Kitrap0d This commit is the first in a series that will move all the exploits that use RDI over to the R7 fork. The RDI source will be in a single known location and each exploit will have to work from that location. The kitrap0d exploit has been migrated over to use this submodule so that there's one example of how it's done for future contributions to follow.
2013-11-27 06:04:41 +00:00
FOR /F "usebackq tokens=1,2 delims==" %%i IN (`wmic os get LocalDateTime /VALUE 2^>NUL`) DO IF '.%%i.'=='.LocalDateTime.' SET LDT=%%j
SET LDT=%LDT:~0,4%-%LDT:~4,2%-%LDT:~6,2% %LDT:~8,2%:%LDT:~10,2%:%LDT:~12,6%
echo Finished %ldt%
GOTO :END
:NEED_VS
ECHO "This command must be executed from within a Visual Studio Command prompt."
ECHO "This can be found under Microsoft Visual Studio 2013 -> Visual Studio Tools"
:END