File tree Expand file tree Collapse file tree 1 file changed +15
-7
lines changed
modules/exploits/windows/local Expand file tree Collapse file tree 1 file changed +15
-7
lines changed Original file line number Diff line number Diff line change @@ -287,18 +287,26 @@ def check
287
287
return Exploit ::CheckCode ::Detected
288
288
end
289
289
290
- os = sysinfo [ "OS" ]
291
- unless os =~ /windows xp/i or os =~ /[2003|.net server].*service pack 2/i
292
- return Exploit ::CheckCode ::Safe
293
- end
294
-
295
290
handle = open_device ( "\\ \\ .\\ NDProxy" )
296
291
if handle . nil?
297
292
return Exploit ::CheckCode ::Safe
298
293
end
299
294
session . railgun . kernel32 . CloseHandle ( handle )
300
295
301
- return Exploit ::CheckCode ::Appears
296
+ os = sysinfo [ "OS" ]
297
+ case os
298
+ when /windows xp.*service pack 3/i
299
+ return Exploit ::CheckCode ::Appears
300
+ when /[2003|.net server].*service pack 2/i
301
+ return Exploit ::CheckCode ::Appears
302
+ when /windows xp/i
303
+ return Exploit ::CheckCode ::Detected
304
+ when /[2003|.net server]/i
305
+ return Exploit ::CheckCode ::Detected
306
+ else
307
+ return Exploit ::CheckCode ::Safe
308
+ end
309
+
302
310
end
303
311
304
312
def exploit
@@ -316,7 +324,7 @@ def exploit
316
324
if target . name =~ /Automatic/
317
325
print_status ( "Detecting the target system..." )
318
326
os = sysinfo [ "OS" ]
319
- if os =~ /windows xp/i
327
+ if os =~ /windows xp.*service pack 3 /i
320
328
my_target = targets [ 1 ]
321
329
print_status ( "Running against #{ my_target . name } " )
322
330
elsif ( ( os =~ /2003/ ) and ( os =~ /service pack 2/i ) )
You can’t perform that action at this time.
0 commit comments