search

rapid7 / metasploit-framework

Metasploit Framework
https://www.metasploit.com/
Other
33.79k stars 13.9k forks source link

Bluekeep x86 payload not available anywhere, where to find? #12928

Closed Phoenix2875 closed 4 years ago

Phoenix2875 commented 4 years ago

Hi, I'm trying to find a bluekeep payload x86 version for xp-2003. In my archive there's only x64 versions. Searched quite everywhere but unable to find the x86 (original) version of payloads. My test server is a 2003 so x64 is not working. Any ideas where to find it? thank you.

bwatters-r7 commented 4 years ago

We do not support 2003 targets or x86 targets in our bluekeep module right now. Given the difficulty to write an x86 2003 target version and the limited use cases, I do not believe we will do so. I googled "x86 bluekeep" and someone appears to have uploaded a lot of shellcode they say is a Windows 7x86 version here: https://www.exploit-db.com/exploits/47683. I do not know if it is safe or if it works, though.

Phoenix2875 commented 4 years ago

Thank you for the answer, but something doesn't match. I see in many "proof of concept" that has 2003 choice. Also if you install ispy that uses Metasploit there's the 2003/xp choice. That means that there's already a payload for Metasploit into the package..

mrrrmeow commented 9 months ago

any progress finding x86?

bwatters-r7 commented 9 months ago

Hi there, again. No; to my knowledge we still do not support the x86 OSes for bluekeep. The reason remains that the exploit code and kernel-to-userland context switch is not trivial. We are aware that several people have claimed to have working PoCs, and they may even work, but for most of us, this is not a priority right now.

If any community member wanted to add additional targets, we would be happy to test, verify, and land it, but there's already a lot of things we would like to do to support more modern operating systems that we don't have time for.