infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

I'm an idiot, fix logon xpath

bug/bundler_fix
Thomas McCarthy 2013-02-14 09:16:47 -05:00
parent e78cbdd14d
commit 7b2c1afadb
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/exploits/windows/local/s4u_persistence.rb
View File

@ -193,7 +193,7 @@ class Metasploit3 < Msf::Exploit::Local
when 'logon' when 'logon'
# Trigger based on winlogon event, checks windows license key after logon # Trigger based on winlogon event, checks windows license key after logon
print_status("This trigger triggers on event 4101 which validates the Windows license") print_status("This trigger triggers on event 4101 which validates the Windows license")
line = "(EventID=4101) and *[System[Provider[@Name='Microsoft-Windows-Winlogon']]]" line = "*[System[EventID='4101']] and *[System[Provider[@Name='Microsoft-Windows-Winlogon']]]"
xml = create_trigger_event_tags("Application", line, xml) xml = create_trigger_event_tags("Application", line, xml)
when 'lock' when 'lock'