peterpt
commented
6 years ago The problem is not the module itself , this module is not running in msf5 , latest git . My first guess is the required dependency msfcore on the start of the ruby script . However , the guys here did an excellent job decoding how the xml files for eternalblue and doublepulsar should be written to exploit the target . By looking into the ruby script it is easy to see that before launchine those exes with wine , they copy the skeleton xml files to their final name and change the values that user have wroted on metasploit module , like rhost , timeout , target , etc .... Any bash script with sed to change those values like they did and creating the payloads with those bad chars is enough to run the doublepulsar implant with eternalblue.exe and running the doublepulsar.exe ahead to call the backdoor and inject the payload . It is pretty simple .
I hope they find the xml tricks to do all the other executables in the package . Thinking a bit more on it , basically it is just needed to run fuzzbunch package with some target with smb vulnerable and the original python scripts will do the work that i am asking to Elevenpaths .
Look here : https://github.com/ElevenPaths/Eternalblue-Doublepulsar-Metasploit/blob/master/eternalblue_doublepulsar.rb
some simple explanation :
Line 24 : this is for the payload that metasploit will create Line 67 : They do the copy of the skeleton file Line 68,69,70 : They write in the eternalblue.xml file the rhost,rport &timeout values Line 74 : defines the target for W7,2008 & vista with value : WIN72K8R2 on the xml line 76 : defines everything else , xp , server 2003 with XP value on xml line 79 : they write one of those values on the xml file from line 82 to 91 : they do the same for double pulsar config Line 95 to 101 : they create the payload to doublepulsar inject on the target Line 106 : They launch "wine Eternalblue-2.2.0.exe" amd wait for the output of it line 107 : checks the output if it returned succefully or not and show you the message" line 115 : they launch doublepulsar with wine and also wait for the output .
It is pretty simple the code , basically it is almost like copying all of it and paste it on a bashscript with some adapted changes and it will run perfectly .
AtharavRH
lilplucky
whenever i use the command use exploit/windows/smb/eternalblue_doublepulsar
it gives me an error saying: "failed to load module: exploit/windows/smb/eternalblue_doublepulsar"
i moved the rb file to the windows.smb directory so i dont know what to do