-
Notifications
You must be signed in to change notification settings - Fork 795
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Migrate the ZeroLogon exploiter to a plugin #3164
Comments
mssalvatore
added a commit
that referenced
this issue
May 1, 2023
mssalvatore
added a commit
that referenced
this issue
May 1, 2023
mssalvatore
added a commit
that referenced
this issue
May 1, 2023
mssalvatore
added a commit
that referenced
this issue
May 2, 2023
mssalvatore
added a commit
that referenced
this issue
May 2, 2023
mssalvatore
added a commit
that referenced
this issue
May 3, 2023
mssalvatore
added a commit
that referenced
this issue
May 3, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
Replace the hard-coded ZeroLogon exploiter with ZeroLogon exploiter plugin.
Use the SMBExploiter and/or HadoopExploiter as templates.
A note on scope
The ZeroLogon exploiter is large and complex. There's lots of room for improvement in its code quality, however, the time it would take to reimplement it is probably not worth the value on such an old vulnerability. We can make small improvements, but should avoid getting sucked into a large refactor of this exploiter. In other words, if we can simply wrap the existing exploiter with a
plugin.py
, let's do that (as much as is possible).Tasks
The text was updated successfully, but these errors were encountered: