From d0ff2b116a2a411313bdff267eba8671641c0d37 Mon Sep 17 00:00:00 2001 From: gwillcox-r7 Date: Wed, 10 Jun 2020 23:22:43 -0500 Subject: [PATCH] Add in some changes to the documentation to conform to linting standards --- .../cve_2020_0787_bits_arbitrary_file_move.md | 25 ++++++++++--------- 1 file changed, 13 insertions(+), 12 deletions(-) diff --git a/documentation/modules/exploit/windows/local/cve_2020_0787_bits_arbitrary_file_move.md b/documentation/modules/exploit/windows/local/cve_2020_0787_bits_arbitrary_file_move.md index 99df7183f3..cf9f4d07a5 100644 --- a/documentation/modules/exploit/windows/local/cve_2020_0787_bits_arbitrary_file_move.md +++ b/documentation/modules/exploit/windows/local/cve_2020_0787_bits_arbitrary_file_move.md @@ -22,6 +22,18 @@ All affected systems should have the BITS service installed and running. If an a the BITS service running, then the BITS service will need to be started on that host prior to exploiting this vulnerability. +## Verification Steps + 1. Start msfconsole + 2. Get a session with basic privileges on a Windows 10 machine + 3. Do: ```use exploit/windows/local/cve_2020_0787_bits_arbitrary_file_move``` + 4. Do: ```set payload windows/x64/``` if the target is an x64 machine, or + ```set payload windows/``` if the target is an x86 machine. + 5. Do: ```set SESSION ``` + 6. Do: ```set JOB_WAIT_TIME ``` to set the number of seconds you want to wait for the BITS job to complete. + 7. Do: Set the ```LPORT``` and ```RHOST``` options for the payload as needed. + 6. Do: ```run``` + 7. You should get a shell running as SYSTEM a few seconds after the `JOB_WAIT_TIME` timer expires. + ## Options **OVERWRITE_DLL** Overwrite WindowsCreDeviceInfo.dll if it exists (false by default). @@ -37,17 +49,6 @@ vulnerability. take a long time to run depending on the load of the target computer, so this allows one to add some additional delay if needed to ensure the BITS job has successfully completed prior to attempting to conduct the LPE. - -## Verification Steps - 1. Start msfconsole - 2. Get a session with basic privileges on a Windows 10 machine - 3. Do: ```use exploit/windows/local/cve_2020_0787_bits_arbitrary_file_move``` - 4. Do: ```set payload windows/x64/``` if the target is an x64 machine, or ```set payload windows/``` if the target is an x86 machine. - 5. Do: ```set SESSION ``` - 6. Do: ```set JOB_WAIT_TIME ``` to set the number of seconds you want to wait for the BITS job to complete. - 7. Do: Set the ```LPORT``` and ```RHOST``` options for the payload as needed. - 6. Do: ```run``` - 7. You should get a shell running as SYSTEM a few seconds after the `JOB_WAIT_TIME` timer expires. ## Scenarios @@ -357,4 +358,4 @@ test DESKTOP-PL99PE8 (null) meterpreter > -``` \ No newline at end of file +```