rasta-mouse / watson Goto Github PK

I've been unable to build this to run on a system with .net 2.0. Is it possible to build to run on older .NET frameworks?

Hi,
Where can I download older version of Watson? I would like to use Watson v0.1

Please, could You release an executable for x86 and x86-64? People can download and use it easily. thank you

Hi

Today I followed htb walkthrough https://0xdf.gitlab.io/2019/03/05/htb-devel.html

Compiled the code as Net Framework v3.5 and ran the exe on the target machine. Following error showed. Any help? Thanks.

I was following 0xdf's guide on HackTheBox Bounty machine, found here.

According to him, Watson wouldn’t compile for .NET Framework 2.0, until it got updated and it worked for him.

However, based on his screenshot (of 1 error code), I am facing the same issue (except that I have 10 errors + 23 warnings):

I am getting the same number of errors + 18 warnings when compiling for .NET Framework 3.0:

It compiles perfectly fine for .NET Framework 3.5:

I have not tried compiling for higher versions of .NET Framework after 3.5.

I am using a Windows 7 Enterprise machine on VirtualBox, with Microsoft Visual Studio Community 2015 installed.

Sorry if this is the wrong place to ask but I have no idea where else to enquire.

Thank you so much for your time!

Is there a plan to include pre-built release binaries at any time?

I'm running into the below error and I'm not sure why. This is freshly downloaded. Watson worked for me before, I reinstalled/reformatted Windows, and now it will not run.

System.Collections.Generic.KeyNotFoundException
HResult=0x80131577
Message=The given key was not present in the dictionary.
Source=mscorlib
StackTrace:
at System.ThrowHelper.ThrowKeyNotFoundException()
at System.Collections.Generic.Dictionary`2.get_Item(TKey key)
at Watson.Program.Main(String[] args) in C:\Users\****\Source\Repos\Watson\Watson\Program.cs:line 25

Thanks

I was using Sherlock before, now I want to try this.
But I dont get it how to get the EXE file (only I see is the sln file).
Sorry for the noob question, any suggestion is most appreciated.

CVE-2020-0683 is a pretty reliable EOP vulnerability which should be mentioned.

The original POC Code is here https://github.com/padovah4ck/CVE-2020-0683, i weaponized this one as powershell script:
https://raw.githubusercontent.com/S3cur3Th1sSh1t/Creds/master/PowershellScripts/cve-2020-0683.ps1

CVE-2020-0668 could also be added, there are POC Exploits as well.
https://github.com/itm4n/SysTracingPoc

Greetings

I have an alternative and simpler exploit for CVE-2019-1253 available here which gives Full Control over the target file.

Hi, the following code marks a patched OS as vulnerable and a vulnerable one as patched.

... 
if (supersedence.Intersect(installedKBs).Any())
{
     vulnerabilities.SetAsVulnerable(name);
}
...

The supersedence stores a list of known KBs for a particular CVE. The installedKBs stores a list of KBs extracted from the target machine. Since we are enumerating for missing KBs, if none of installedKBs is presented in supersedence, the OS is considered as vulnerable. I think the correct one is:

...
if (!supersedence.Intersect(installedKBs).Any())
...

Bests.

The execution of Watson.exe without any argument shows an error suggesting missing files:

PS C:\> .\Watson.Exe
  __    __      _
 / / /\ \ \__ _| |_ ___  ___  _ __
 \ \/  \/ / _` | __/ __|/ _ \| '_ \
  \  /\  / (_| | |_\__ \ (_) | | | |
   \/  \/ \__,_|\__|___/\___/|_| |_|

                           v0.1

                  Sherlock sucks...
                   @_RastaMouse

 [*] OS Build number: 7601
 [*] CPU Address Width: 64
 [*] Process IntPtr Size: 8
 [*] Using Windows path: C:\WINDOWS\System32

 [*] Finished. Sorry, found 0 vulns :(
ERROR> C:\WINDOWS\System32\win32kfull.sys
ERROR> C:\WINDOWS\System32\gdiplus.dll
ERROR> C:\WINDOWS\System32\coremessaging.dll

Actually, this files are missing on this system.

Tested on Windows 7 SP1 64 bits (6.1.7601):

ERROR> C:\WINDOWS\System32\win32kfull.sys
ERROR> C:\WINDOWS\System32\gdiplus.dll
ERROR> C:\WINDOWS\System32\coremessaging.dll

Tested on Windows Server 2012 R2 Standard 64 bits (6.3.9600):

ERROR> C:\WINDOWS\System32\win32kfull.sys
ERROR> C:\WINDOWS\System32\pcadm.dll
ERROR> C:\WINDOWS\System32\coremessaging.dll

(Note: the second lines are different.)

Work great on Windows 10 64 bits up-to-date.

Do you confirm that Watson only work on Win10+ and Win2016+?