osquery_cve-2024-23443

Proof of Concept POC CVE-2024-23443 hpbiososquery Add osqery extension HP BIOS WMI to Elastic Agent Dependencies pip install pywin32 pip install osquery pip install pyinstaller Build pyinstaller --onefile hpbiosenumeration.py Install 1. Copy extension to Elastic agent location copy...

Enumerate Users via WMI

Binary data wmienumlocalusers.nbin...

WMI Anti-spyware Enumeration

Binary data wmienumantispyware.nbin...