Coercer icon indicating copy to clipboard operation
Coercer copied to clipboard

[enhancement] \PIPE\efsrpc interface

Open s0i37 opened this issue 2 years ago • 0 comments

Hello. Currently coercer supports the following rpc interfaces:

/opt/Coercer/coercer/protocols(master) » grep -r uuid
MS_EFSR.py:    uuid = "c681d488-d850-11d0-8c52-00c04fd90f7e"
MS_FSRVP.py:    uuid = "a8e0653c-2744-4389-a61d-7373df8b2292"
MS_RPRN.py:    uuid = "12345678-1234-ABCD-EF00-0123456789AB"
MS_DFSNM.py:    uuid = "4fc742e0-4a10-11cf-8273-00aa004ae673"

However there is exists one more interface (in PetitPotam):

            'efsr': {
                'stringBinding': r'ncacn_np:%s[\PIPE\efsrpc]' % target,
                'MSRPC_UUID_EFSR': ('df1941c5-fe89-4e79-bf10-463657acf44d', '1.0')
            },

s0i37 avatar Aug 23 '22 09:08 s0i37