github/metasploit-payloads
1
Fork 0
mirror of https://github.com/rapid7/metasploit-payloads synced 2025-05-06 16:09:38 +02:00
Code Releases Activity

Add registry_check_key_exists for Python

Browse Source
This commit is contained in:
Spencer McIntyre 2022-09-01 15:27:06 -04:00
parent 9d11bb84b1
commit 56ee6899f3
1 changed files with 13 additions and 2 deletions

13
python/meterpreter/ext_server_stdapi.py

@ -2463,10 +2463,11 @@ def stdapi_registry_load_key(request, response):
def _wreg_close_key(hkey): def _wreg_close_key(hkey):
ctypes.windll.advapi32.RegCloseKey(hkey) ctypes.windll.advapi32.RegCloseKey(hkey)
def _wreg_open_key(request): def _wreg_open_key(request, permission=None):
root_key = packet_get_tlv(request, TLV_TYPE_ROOT_KEY)['value'] root_key = packet_get_tlv(request, TLV_TYPE_ROOT_KEY)['value']
base_key = packet_get_tlv(request, TLV_TYPE_BASE_KEY)['value'] base_key = packet_get_tlv(request, TLV_TYPE_BASE_KEY)['value']
base_key = ctypes.create_string_buffer(bytes(base_key, 'UTF-8')) base_key = ctypes.create_string_buffer(bytes(base_key, 'UTF-8'))
if permission is None:
permission = packet_get_tlv(request, TLV_TYPE_PERMISSION).get('value', winreg.KEY_ALL_ACCESS) permission = packet_get_tlv(request, TLV_TYPE_PERMISSION).get('value', winreg.KEY_ALL_ACCESS)
handle_id = ctypes.c_void_p() handle_id = ctypes.c_void_p()
if ctypes.windll.advapi32.RegOpenKeyExA(root_key, ctypes.byref(base_key), 0, permission, ctypes.byref(handle_id)) != ERROR_SUCCESS: if ctypes.windll.advapi32.RegOpenKeyExA(root_key, ctypes.byref(base_key), 0, permission, ctypes.byref(handle_id)) != ERROR_SUCCESS:
@ -2507,6 +2508,16 @@ def _wreg_set_value(request, response, hkey):
result = ctypes.windll.advapi32.RegSetValueExA(hkey, ctypes.byref(value_name), 0, value_type, value_data, len(value_data)) result = ctypes.windll.advapi32.RegSetValueExA(hkey, ctypes.byref(value_name), 0, value_type, value_data, len(value_data))
return result, response return result, response
@register_function_if(has_windll)
def stdapi_registry_check_key_exists(request, response):
err, hkey = _wreg_open_key(request, permission=winreg.KEY_QUERY_VALUE)
if err == ERROR_SUCCESS:
_wreg_close_key(hkey)
response += tlv_pack(TLV_TYPE_BOOL, True)
else:
response += tlv_pack(TLV_TYPE_BOOL, False)
return ERROR_SUCCESS, response
@register_function_if(has_windll) @register_function_if(has_windll)
def stdapi_registry_open_key(request, response): def stdapi_registry_open_key(request, response):
err, hkey = _wreg_open_key(request) err, hkey = _wreg_open_key(request)