rasta-mouse / watson Goto Github PK
View Code? Open in Web Editor NEWEnumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
License: GNU General Public License v3.0
Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
License: GNU General Public License v3.0
I've been unable to build this to run on a system with .net 2.0. Is it possible to build to run on older .NET frameworks?
Hi,
Where can I download older version of Watson? I would like to use Watson v0.1
Please, could You release an executable for x86 and x86-64? People can download and use it easily. thank you
C:\Users\dadp0\Desktop\AV Evasion projects\Watson-master\Watson\bin\Debug>Watson.exe
__ __ _
/ / /\ \ \__ _| |_ ___ ___ _ __
\ \/ \/ / _` | __/ __|/ _ \| '_ \
\ /\ / (_| | |_\__ \ (_) | | | |
\/ \/ \__,_|\__|___/\___/|_| |_|
v2.0
@_RastaMouse
Unhandled Exception: System.Collections.Generic.KeyNotFoundException: The given key was not present in the dictionary.
at System.ThrowHelper.ThrowKeyNotFoundException()
at System.Collections.Generic.Dictionary`2.get_Item(TKey key)
at Watson.Program.Main(String[] args) in C:\Users\dadp0\Desktop\AV Evasion projects\Watson-master\Watson\Program.cs:line 25
Hi
Today I followed htb walkthrough https://0xdf.gitlab.io/2019/03/05/htb-devel.html
Compiled the code as Net Framework v3.5 and ran the exe on the target machine. Following error showed. Any help? Thanks.
I was following 0xdf's guide on HackTheBox Bounty machine, found here.
According to him, Watson wouldn’t compile for .NET Framework 2.0, until it got updated and it worked for him.
However, based on his screenshot (of 1 error code), I am facing the same issue (except that I have 10 errors + 23 warnings):
I am getting the same number of errors + 18 warnings when compiling for .NET Framework 3.0:
It compiles perfectly fine for .NET Framework 3.5:
I have not tried compiling for higher versions of .NET Framework after 3.5.
I am using a Windows 7 Enterprise machine on VirtualBox, with Microsoft Visual Studio Community 2015 installed.
Sorry if this is the wrong place to ask but I have no idea where else to enquire.
Thank you so much for your time!
Is there a plan to include pre-built release binaries at any time?
I'm running into the below error and I'm not sure why. This is freshly downloaded. Watson worked for me before, I reinstalled/reformatted Windows, and now it will not run.
System.Collections.Generic.KeyNotFoundException
HResult=0x80131577
Message=The given key was not present in the dictionary.
Source=mscorlib
StackTrace:
at System.ThrowHelper.ThrowKeyNotFoundException()
at System.Collections.Generic.Dictionary`2.get_Item(TKey key)
at Watson.Program.Main(String[] args) in C:\Users\****\Source\Repos\Watson\Watson\Program.cs:line 25
Thanks
I was using Sherlock before, now I want to try this.
But I dont get it how to get the EXE file (only I see is the sln file).
Sorry for the noob question, any suggestion is most appreciated.
CVE-2020-0683 is a pretty reliable EOP vulnerability which should be mentioned.
The original POC Code is here https://github.com/padovah4ck/CVE-2020-0683, i weaponized this one as powershell script:
https://raw.githubusercontent.com/S3cur3Th1sSh1t/Creds/master/PowershellScripts/cve-2020-0683.ps1
CVE-2020-0668 could also be added, there are POC Exploits as well.
https://github.com/itm4n/SysTracingPoc
Greetings
I have an alternative and simpler exploit for CVE-2019-1253 available here which gives Full Control over the target file.
Hi, the following code marks a patched OS as vulnerable and a vulnerable one as patched.
...
if (supersedence.Intersect(installedKBs).Any())
{
vulnerabilities.SetAsVulnerable(name);
}
...
The supersedence
stores a list of known KBs for a particular CVE. The installedKBs
stores a list of KBs extracted from the target machine. Since we are enumerating for missing KBs, if none of installedKBs
is presented in supersedence
, the OS is considered as vulnerable. I think the correct one is:
...
if (!supersedence.Intersect(installedKBs).Any())
...
Bests.
The execution of Watson.exe
without any argument shows an error suggesting missing files:
PS C:\> .\Watson.Exe
__ __ _
/ / /\ \ \__ _| |_ ___ ___ _ __
\ \/ \/ / _` | __/ __|/ _ \| '_ \
\ /\ / (_| | |_\__ \ (_) | | | |
\/ \/ \__,_|\__|___/\___/|_| |_|
v0.1
Sherlock sucks...
@_RastaMouse
[*] OS Build number: 7601
[*] CPU Address Width: 64
[*] Process IntPtr Size: 8
[*] Using Windows path: C:\WINDOWS\System32
[*] Finished. Sorry, found 0 vulns :(
ERROR> C:\WINDOWS\System32\win32kfull.sys
ERROR> C:\WINDOWS\System32\gdiplus.dll
ERROR> C:\WINDOWS\System32\coremessaging.dll
Actually, this files are missing on this system.
Tested on Windows 7 SP1 64 bits (6.1.7601):
ERROR> C:\WINDOWS\System32\win32kfull.sys
ERROR> C:\WINDOWS\System32\gdiplus.dll
ERROR> C:\WINDOWS\System32\coremessaging.dll
Tested on Windows Server 2012 R2 Standard 64 bits (6.3.9600):
ERROR> C:\WINDOWS\System32\win32kfull.sys
ERROR> C:\WINDOWS\System32\pcadm.dll
ERROR> C:\WINDOWS\System32\coremessaging.dll
(Note: the second lines are different.)
Work great on Windows 10 64 bits up-to-date.
Do you confirm that Watson only work on Win10+ and Win2016+?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.