EmpireProject / Empire

Empire is a PowerShell and Python post-exploitation agent.
http://www.powershellempire.com/
BSD 3-Clause "New" or "Revised" License
7.44k stars 2.81k forks source link

Added Invoke-DCOMrade.ps1 #1274

Open sud0woodo opened 5 years ago

sud0woodo commented 5 years ago

This is a powershell script that can enumerate possible vulnerable DCOM applications. The research is based on enigma0x3's findings but implemented in a script. The script outputs the potentially interesting CLSID's based on the amount of MemberTypes and outputs a list of vulnerable DCOM applications based on a list of strings that were derived from the other posts about abusing DCOM applications