Skip to content

Commit 936e0df

Browse files
authored
Merge pull request rapid7#19833 from cdelafuente-r7/fix/mod/petitpotam
Fix PetitPotam UUID when using EsfRPC with `lsarpc` named pipe
2 parents 589b906 + b3c2ae4 commit 936e0df

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

modules/auxiliary/scanner/dcerpc/petitpotam.rb

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,13 @@
1010
require 'ruby_smb/dcerpc/efsrpc'
1111

1212
class MetasploitModule < Msf::Auxiliary
13+
14+
module EfsrpcOverLsarpc
15+
include RubySMB::Dcerpc::Efsrpc
16+
17+
UUID = RubySMB::Dcerpc::Efsrpc::LSARPC_UUID
18+
end
19+
1320
include Msf::Exploit::Remote::DCERPC
1421
include Msf::Exploit::Remote::SMB::Client::Authenticated
1522
include Msf::Auxiliary::Scanner
@@ -20,7 +27,7 @@ class MetasploitModule < Msf::Auxiliary
2027
# Efsrpc and it's normal UUID
2128
PIPE_HANDLES = {
2229
lsarpc: {
23-
endpoint: RubySMB::Dcerpc::Lsarpc,
30+
endpoint: EfsrpcOverLsarpc,
2431
filename: 'lsarpc'.freeze
2532
},
2633
efsrpc: {

0 commit comments

Comments
 (0)