这里写自定义目录标题
一、使用 Ms011-080 获取 WinXP 的 SYSTEM 权限
1. Ms011-080 对应补丁 Kb2592799
微软官网公告(https://technet.microsoft.com/library/security/ms11-080)
2. kali集成了exploit
┌──(root💀kali)-[/home/kali-2]
└─# searchsploit Ms11-080
------------------------------------------------------------- ---------------------------------
Exploit Title | Path
------------------------------------------------------------- ---------------------------------
Microsoft Windows - 'AfdJoinLeaf' Local Privilege Escalation | windows/local/21844.rb
Microsoft Windows XP/2003 - 'afd.sys' Local Privilege Escala | windows/local/18176.py
------------------------------------------------------------- ---------------------------------
Shellcodes: No Results
两个脚本
3. 查看.py
- 原理缓冲区溢出
- 拷贝
cp /usr/share/exploitdb/exploits/windows/local/18176.py /home/kali-3/Desktop/桌面
┌──(root💀kali)-[/home/kali-2]
└─# cat /usr/share/exploitdb/exploits/windows/local/18176.py 1 ⨯
################################################################################
<