CVE-2020-1313

CVE-2020-1313 Abstract Windows Update Orchestrator Service è un servizio DCOM utilizzato da altri componenti per installare gli aggiornamenti di Windows già scaricati. USO era vulnerabile a un elevazione dei privilegi da qualsiasi utente a sistema locale a causa di un'autorizzazione impropria dei...

Microsoft Windows Update Orchestrator Unchecked ScheduleWork Call Exploit

This Metasploit module exploit uses access to the UniversalOrchestrator ScheduleWork API call which does not verify the caller's token before scheduling a job to be run as SYSTEM. You cannot schedule something in a given time, so the payload will execute as system sometime in the next 24 hours...

Microsoft Windows Update Orchestrator Unchecked ScheduleWork Call

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/exploit/exe' require 'msf/core/post/windows/registry'...