search

EmpireProject / Empire

Empire is a PowerShell and Python post-exploitation agent.
http://www.powershellempire.com/
BSD 3-Clause "New" or "Revised" License
7.4k stars 2.81k forks source link

Adding new module to enumerate possible vulnerable DCOM applications #1273

Closed sud0woodo closed 5 years ago

sud0woodo commented 5 years ago

I created a module that checks if there are MemberTypes that would allow code exec or other techniques that might be viable for lateral movement, etc.

This module is a port from the original script that will be released with a research paper. The subset of strings for checking if there are vulnerable DCOM applications can be modified in the Invoke-DCOMrade.ps1 invoke_dcomrade.zip

sud0woodo commented 5 years ago

Also: Sorry if I messed up with the Pull request, I'm not used to Github yet