infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
metasploit-framework/external/source/exploits/CVE-2010-0232/kitrap0d/kitrap0d.rc

82 lines
4.0 KiB
Plaintext
Raw Normal View History

Move kitrap0d exploit from getsystem to local exploit This version modifies the existing meterpreter session and bumps the privs up to SYSTEM. However it's not how local exploits are supposed to work. More work will be done to make this create a new session with the elevated privs instead.
2013-11-11 01:11:42 +00:00
<EFBFBD><EFBFBD>// Microsoft Visual C++ generated resource script.
//
#include "resource.h"
#define APSTUDIO_READONLY_SYMBOLS
/////////////////////////////////////////////////////////////////////////////
//
// Generated from the TEXTINCLUDE 2 resource.
//
#include "winres.h"
/////////////////////////////////////////////////////////////////////////////
#undef APSTUDIO_READONLY_SYMBOLS
/////////////////////////////////////////////////////////////////////////////
// English (United States) resources
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENU)
LANGUAGE LANG_ENGLISH, SUBLANG_ENGLISH_US
#ifdef APSTUDIO_INVOKED
/////////////////////////////////////////////////////////////////////////////
//
// TEXTINCLUDE
//
1 TEXTINCLUDE
BEGIN
"resource.h\0"
END
2 TEXTINCLUDE
BEGIN
"#include ""winres.h""\r\n"
"\0"
END
3 TEXTINCLUDE
BEGIN
"\r\n"
"\0"
END
#endif // APSTUDIO_INVOKED
#endif // English (United States) resources
/////////////////////////////////////////////////////////////////////////////
/////////////////////////////////////////////////////////////////////////////
// English (Australia) resources
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENA)
LANGUAGE LANG_ENGLISH, SUBLANG_ENGLISH_AUS
/////////////////////////////////////////////////////////////////////////////
//
// DLL
//
#ifdef _DEBUG
Remove genericity, x64 and renamed stuff As per discussion on the github issue, the following changes were made: * Project renamed from elevate to kitrap0d, implying that this is not intended to be a generic local priv esc exploit container. * Container DLL no longer generic, always calls the kitrap0d exploit. * Removal of all x64 code and project configurations. * Invocation of the exploit changed so that the address of the payload is passed in to the exploit entry point. The exploit is now responsible for executing the payload if the exploit is successful. This removes the possibility of the payload getting executed when the exploit fails. * Source moved to the appropriate CVE folder. * Binary moved to the appropriate CVE folder. * Little bit of source rejigging to tidy things up.
2013-11-14 02:17:07 +00:00
IDR_DLL_KITRAP0D DLL "..\\kitrap0d_payload\\Debug\\Win32\\kitrap0d_payload.x86.dll"
Move kitrap0d exploit from getsystem to local exploit This version modifies the existing meterpreter session and bumps the privs up to SYSTEM. However it's not how local exploits are supposed to work. More work will be done to make this create a new session with the elevated privs instead.
2013-11-11 01:11:42 +00:00
#else
Remove genericity, x64 and renamed stuff As per discussion on the github issue, the following changes were made: * Project renamed from elevate to kitrap0d, implying that this is not intended to be a generic local priv esc exploit container. * Container DLL no longer generic, always calls the kitrap0d exploit. * Removal of all x64 code and project configurations. * Invocation of the exploit changed so that the address of the payload is passed in to the exploit entry point. The exploit is now responsible for executing the payload if the exploit is successful. This removes the possibility of the payload getting executed when the exploit fails. * Source moved to the appropriate CVE folder. * Binary moved to the appropriate CVE folder. * Little bit of source rejigging to tidy things up.
2013-11-14 02:17:07 +00:00
IDR_DLL_KITRAP0D DLL "..\\kitrap0d_payload\\Release\\Win32\\kitrap0d_payload.x86.dll"
Move kitrap0d exploit from getsystem to local exploit This version modifies the existing meterpreter session and bumps the privs up to SYSTEM. However it's not how local exploits are supposed to work. More work will be done to make this create a new session with the elevated privs instead.
2013-11-11 01:11:42 +00:00
#endif
#endif // English (Australia) resources
/////////////////////////////////////////////////////////////////////////////
#ifndef APSTUDIO_INVOKED
/////////////////////////////////////////////////////////////////////////////
//
// Generated from the TEXTINCLUDE 3 resource.
//
/////////////////////////////////////////////////////////////////////////////
#endif // not APSTUDIO_INVOKED