c3fa52f443
Update description
2015-05-29 13:47:20 -05:00
bcdae5fa1a
Forgot to add the datastore option
2015-05-27 18:12:38 -05:00
4f0e908c8b
Never mind, Vista doesn't have powershell.
2015-05-27 18:08:58 -05:00
d43706b65e
It doesn't look like Vista shows the powershell prompt
2015-05-27 18:04:35 -05:00
53774fed56
Be more strict with Win 7 for MS14-064
...
The Powershell prompt can cause BAP to hang so we need to be more
strict about that.
2015-05-27 18:01:40 -05:00
89e27d98ab
Use relative URL to GET payload for WinXP
...
Relative URLs are simpler, and allow the exploit to work on attack machines in NAT environments. Example: attack machine is NATed and does not have a DNS hostname. SRVHOST must be 0.0.0.0 but the victim cannot access the attacker from Rex::Socket.source_address
2015-03-23 14:40:06 -05:00
7591e9ece3
Unbreak the comment
2015-03-03 19:14:18 -06:00
79e7bf7f9c
Update comments and description
2015-03-03 19:13:15 -06:00
8d17aa04ee
Update the title too
2015-02-24 00:46:35 -06:00
578a545b22
Update MS14-064 for Windows XP
2015-02-23 23:08:13 -06:00
05d2703a98
Explain why obfuscation is disabled
2015-02-12 14:00:01 -06:00
50c72125a4
::Errno::EINVAL, disable obfuscation, revoke ms14-064
2015-02-12 11:54:01 -06:00
79f2708a6e
Slight fixes to grammar/desc/whitespace
...
Note that the format_all_drives module had a pile of CRLFs that should
have been caught by msftidy. Not sure why it didn't.
2014-12-04 13:11:33 -06:00
0f973fdf2b
Fix #4284 - Typo "neline" causing the exploit to break
...
"neline" isn't supposed to be there at all.
2014-12-01 01:24:30 -06:00
2a7d4ed963
Touchup
2014-11-28 10:12:05 -06:00
583494c0db
use BrowserExploitServer
2014-11-24 18:49:27 +01:00
08a67d78c5
module for CVE-2014-6332.
2014-11-24 08:25:18 +01:00
wchen-r7