Grant Willcox
98 lines
2.1 KiB
Markdown
98 lines
2.1 KiB
Markdown
## Vulnerable Application
|
|
|
|
This module enumerates patches applied to a Windows system using the
|
|
WMI query: `SELECT HotFixID, InstalledOn FROM Win32_QuickFixEngineering`.
|
|
|
|
|
|
## Verification Steps
|
|
|
|
1. Start msfconsole
|
|
2. Get meterpreter session
|
|
3. Do: `use post/windows/gather/enum_patches`
|
|
4. Do: `set SESSION <session id>`
|
|
5. Do: `run`
|
|
|
|
## Options
|
|
|
|
|
|
## Scenarios
|
|
|
|
### Windows 11 Pro 10.0.22000 Build 22000 x64
|
|
|
|
```
|
|
msf6 post(windows/gather/enum_patches) > set session 1
|
|
session => 1
|
|
msf6 post(windows/gather/enum_patches) > run
|
|
|
|
[*] Running module against WINDEV2110EVAL (192.168.200.140)
|
|
|
|
Installed Patches
|
|
=================
|
|
|
|
HotFix ID Install Date
|
|
--------- ------------
|
|
KB5009469 2/27/2022
|
|
KB5009641 2/26/2022
|
|
KB5011493 3/5/2022
|
|
|
|
[*] Patch list saved to /root/.msf4/loot/20220911234321_default_192.168.200.140_enum_patches_485106.txt
|
|
[*] Post module execution completed
|
|
```
|
|
|
|
### Windows 7 SP1 x64
|
|
|
|
```
|
|
msf6 post(windows/gather/enum_patches) > set session 1
|
|
session => 1
|
|
msf6 post(windows/gather/enum_patches) > run
|
|
|
|
[*] Running module against TEST (192.168.200.190)
|
|
|
|
Installed Patches
|
|
=================
|
|
|
|
HotFix ID Install Date
|
|
--------- ------------
|
|
KB2533623 3/29/2019
|
|
KB2534111 2/1/2016
|
|
KB2639308 3/29/2019
|
|
KB2670838 3/29/2019
|
|
KB2729094 3/29/2019
|
|
KB2731771 3/29/2019
|
|
KB2786081 3/29/2019
|
|
KB2834140 3/29/2019
|
|
KB2841134 3/29/2019
|
|
KB2849696 3/29/2019
|
|
KB2849697 3/29/2019
|
|
KB2882822 3/29/2019
|
|
KB2888049 3/29/2019
|
|
KB2999226 9/4/2017
|
|
KB958488 5/26/2017
|
|
KB976902 11/21/2010
|
|
|
|
[*] Patch list saved to /root/.msf4/loot/20220911233948_default_192.168.200.190_enum_patches_697182.txt
|
|
[*] Post module execution completed
|
|
```
|
|
|
|
### Windows XP SP3 x86
|
|
|
|
```
|
|
msf6 post(windows/gather/enum_patches) > set session 1
|
|
session => 1
|
|
msf6 post(windows/gather/enum_patches) > run
|
|
|
|
[*] Running module against WINXP (192.168.200.164)
|
|
|
|
Installed Patches
|
|
=================
|
|
|
|
HotFix ID Install Date
|
|
--------- ------------
|
|
KB811113 4/5/2013
|
|
KB936929 4/5/2013
|
|
Q147222
|
|
|
|
[*] Patch list saved to /root/.msf4/loot/20220911233635_default_192.168.200.164_enum_patches_552914.txt
|
|
[*] Post module execution completed
|
|
```
|