Stephen Fewer 7a0c223fe6 Partial solution for #1448. Fall back to CreateProcessWithTokenW when CreateProcessAsUser fails with ERROR_PRIVILEGE_NOT_HELD. While only available on 2003 and above this works on my server 2008 test case which was failing before. ...

git-svn-id: file:///home/svn/framework3/trunk@9781 4d416f70-5f16-0410-b530-b9f4589650da

2010-07-11 18:36:57 +00:00

..

config

This *should* fix all cases where execute -t would fail to use an impersonated token

2010-07-09 19:32:51 +00:00

eventlog

Swapping in the latest patched copy of Meterpreter. See #275

2009-03-22 18:56:28 +00:00

power

Swapping in the latest patched copy of Meterpreter. See #275

2009-03-22 18:56:28 +00:00

process

Partial solution for #1448. Fall back to CreateProcessWithTokenW when CreateProcessAsUser fails with ERROR_PRIVILEGE_NOT_HELD. While only available on 2003 and above this works on my server 2008 test case which was failing before.

2010-07-11 18:36:57 +00:00

registry

Adds reg queryclass

2009-12-31 15:52:30 +00:00

session.c

Commit all the code for the new 'screenshot' command in the stdapi extension. Screenshot will now work on NT4 - 7 on both x86 and x64 and on newer versions of Windows we can break out of session isolation (e.g. session 0 isolation for services) to screenshot the active desktop (or logon screen) without the need to migrate meterpreter. The majority of the migration code-injection stuff has been refactored out into base_inject.c so it can be shared with the new ps_inject() functionality to inject dlls. The 'ps' command now reports what session each process belongs to (if this is too verbose we can remove it or add a -v verbose switch to the ps command). The 'execute' command can now take a -s switch in order to create a process in a users session under the users privs (assuming you have the privs to do this).

2010-03-11 17:09:55 +00:00

session.h

Commit all the code for the new 'screenshot' command in the stdapi extension. Screenshot will now work on NT4 - 7 on both x86 and x64 and on newer versions of Windows we can break out of session isolation (e.g. session 0 isolation for services) to screenshot the active desktop (or logon screen) without the need to migrate meterpreter. The majority of the migration code-injection stuff has been refactored out into base_inject.c so it can be shared with the new ps_inject() functionality to inject dlls. The 'ps' command now reports what session each process belongs to (if this is too verbose we can remove it or add a -v verbose switch to the ps command). The 'execute' command can now take a -s switch in order to create a process in a users session under the users privs (assuming you have the privs to do this).

2010-03-11 17:09:55 +00:00

sys.h

Swapping in the latest patched copy of Meterpreter. See #275

2009-03-22 18:56:28 +00:00