swisskyrepo
/
NetExec
mirror of https://github.com/swisskyrepo/NetExec.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

feat(spooler): update spooler module to update database if spooler service is enabled

main
Marshall Hallenbeck 2023-03-09 18:31:32 -05:00
parent 47d68dce7b
commit f6bd41f94f
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
cme/modules/spooler.py
View File

@ -2,6 +2,7 @@
# -*- coding: utf-8 -*- # -*- coding: utf-8 -*-
# https://raw.githubusercontent.com/SecureAuthCorp/impacket/master/examples/rpcdump.py # https://raw.githubusercontent.com/SecureAuthCorp/impacket/master/examples/rpcdump.py
import logging
from impacket.examples import logger from impacket.examples import logger
from impacket import uuid, version from impacket import uuid, version
from impacket.dcerpc.v5 import transport, epm from impacket.dcerpc.v5 import transport, epm
@ -15,6 +16,7 @@ KNOWN_PROTOCOLS = {
445: {'bindstr': r'ncacn_np:%s[\pipe\epmapper]'}, 445: {'bindstr': r'ncacn_np:%s[\pipe\epmapper]'},
} }
class CMEModule: class CMEModule:
''' '''
For printnightmare: detect if print spooler is enabled or not. Then use @cube0x0's project https://github.com/cube0x0/CVE-2021-1675 or Mimikatz from Benjamin Delpy For printnightmare: detect if print spooler is enabled or not. Then use @cube0x0's project https://github.com/cube0x0/CVE-2021-1675 or Mimikatz from Benjamin Delpy
@ -61,7 +63,7 @@ class CMEModule:
# Display results. # Display results.
endpoints = {} endpoints = {}
# Let's groups the UUIDS # Let's group the UUIDS
for entry in entries: for entry in entries:
binding = epm.PrintStringBinding(entry['tower']['Floors']) binding = epm.PrintStringBinding(entry['tower']['Floors'])
tmpUUID = str(entry['tower']['Floors'][0]) tmpUUID = str(entry['tower']['Floors'][0])
@ -90,8 +92,8 @@ class CMEModule:
logging.debug(" %s" % binding) logging.debug(" %s" % binding)
logging.debug("") logging.debug("")
context.log.highlight('Spooler service enabled') context.log.highlight('Spooler service enabled')
host_id = context.db.get_computers(connection.host)[0][0] host = context.db.get_computers(connection.host)[0]
database.update_computer(context.db, host_id, spooler=True) context.db.add_computer(host.ip, host.hostname, host.domain, host.os, host.smbv1, host.signing, spooler=True)
break break
if entries: if entries:
@ -103,7 +105,6 @@ class CMEModule:
else: else:
logging.info('No endpoints found.') logging.info('No endpoints found.')
def __fetchList(self, rpctransport): def __fetchList(self, rpctransport):
dce = rpctransport.get_dce_rpc() dce = rpctransport.get_dce_rpc()
dce.connect() dce.connect()