Metasploit mailing list archives

Meterpreter scripts for RunAs privilege escalation & other mischief


From: David Porcello <DPorcello () vermontmutual com>
Date: Fri, 3 Dec 2010 10:48:51 -0500

send_keystrokes.rb: Meterpreter script to interactively send keystrokes to an open application window using the 
vbscript SendKeys method. Can be used to escalate privileges into RunAs-invoked command shells on XP.



IE_click_run.rb: Meterpreter script to interactively click "Run" at the IE "File Download Security Warning" prompts. 
Can be used to escalate privileges into RunAs-invoked IE instances without end-user interaction on XP.



http://code.google.com/p/metscripts/downloads/list

http://grep8000.blogspot.com/2010/04/windows-privilege-escalation-talk.html

Dave.

________________________________
NOTICE: The information contained in this e-mail and any attachments is intended solely for the recipient(s) named 
above, and may be confidential and legally privileged. If you received this e-mail in error, please notify the sender 
immediately by return e-mail and delete the original message and any copy of it from your computer system. If you are 
not the intended recipient, you are hereby notified that any review, disclosure, retransmission, dissemination, 
distribution, copying, or other use of this e-mail, or any of its contents, is strictly prohibited.

Although this e-mail and any attachments are believed to be free of any virus or other defects, it is the 
responsibility of the recipient to ensure that it is virus-free and no responsibility is accepted by the sender for any 
loss or damage arising if such a virus or defect exists.
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: