Merge pull request #19833 from cdelafuente-r7/fix/mod/petitpotam

Fix PetitPotam UUID when using EsfRPC with `lsarpc` named pipe
rapid7 · Jan 27, 2025 · 936e0df · 936e0df
2 parents 589b906 + b3c2ae4
commit 936e0df
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/modules/auxiliary/scanner/dcerpc/petitpotam.rb b/modules/auxiliary/scanner/dcerpc/petitpotam.rb
@@ -10,6 +10,13 @@
 require 'ruby_smb/dcerpc/efsrpc'
 
 class MetasploitModule < Msf::Auxiliary
+
+  module EfsrpcOverLsarpc
+    include RubySMB::Dcerpc::Efsrpc
+
+    UUID = RubySMB::Dcerpc::Efsrpc::LSARPC_UUID
+  end
+
   include Msf::Exploit::Remote::DCERPC
   include Msf::Exploit::Remote::SMB::Client::Authenticated
   include Msf::Auxiliary::Scanner
@@ -20,7 +27,7 @@ class MetasploitModule < Msf::Auxiliary
   # Efsrpc and it's normal UUID
   PIPE_HANDLES = {
     lsarpc: {
-      endpoint: RubySMB::Dcerpc::Lsarpc,
+      endpoint: EfsrpcOverLsarpc,
       filename: 'lsarpc'.freeze
     },
     efsrpc: {