class Rex::Post::Meterpreter::Ui::Console::CommandDispatcher::Priv::Elevate

The local privilege escalation portion of the extension.

Constants

ELEVATE_TECHNIQUE_ANY
ELEVATE_TECHNIQUE_DESCRIPTION
ELEVATE_TECHNIQUE_NONE
ELEVATE_TECHNIQUE_SERVICE_NAMEDPIPE
ELEVATE_TECHNIQUE_SERVICE_NAMEDPIPE2
ELEVATE_TECHNIQUE_SERVICE_TOKENDUP
Klass

Public Instance Methods

cmd_getsystem( *args ) click to toggle source

Attempt to elevate the meterpreter to that of local system.

# File lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb, line 50
def cmd_getsystem( *args )

  technique = ELEVATE_TECHNIQUE_ANY

  desc = ""
  ELEVATE_TECHNIQUE_DESCRIPTION.each_index { |i| desc += "\n\t\t#{i} : #{ELEVATE_TECHNIQUE_DESCRIPTION[i]}" }

  getsystem_opts = Rex::Parser::Arguments.new(
    "-h" => [ false, "Help Banner." ],
    "-t" => [ true, "The technique to use. (Default to \'#{technique}\')." + desc ]
  )

  getsystem_opts.parse(args) { | opt, idx, val |
    case opt
      when "-h"
        print_line( "Usage: getsystem [options]\n" )
        print_line( "Attempt to elevate your privilege to that of local system." )
        print_line( getsystem_opts.usage )
        return
      when "-t"
        technique = val.to_i
    end
  }

  if( technique < 0 or technique >= ELEVATE_TECHNIQUE_DESCRIPTION.length )
    print_error( "Technique '#{technique}' is out of range." );
    return false;
  end

  result = client.priv.getsystem( technique )

  # got system?
  if result[0]
    print_line( "...got system (via technique #{result[1]})." );
  else
    print_line( "...failed to get system." );
  end

  return result
end
commands() click to toggle source

List of supported commands.

# File lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb, line 33
def commands
  {
    "getsystem" => "Attempt to elevate your privilege to that of local system."
  }
end
name() click to toggle source

Name for this dispatcher.

# File lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb, line 42
def name
  "Priv: Elevate"
end