Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wifi mouse windows #260

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
netsh advfirewall firewall add rule name=MouseServer dir=in action=allow program="C:\\Program\ Files\ (x86)\\MouseServer.exe\\MouseServer.exe" enable=yes
schtasks /create /rl HIGHEST /ru system /sc ONSTART /tn wifimousefirewall /f /tr "netsh advfirewall firewall add rule name=MouseServer dir=in action=allow program=C:\\Program\ Files\ (x86)\\MouseServer.exe\\MouseServer.exe enable=yes"
Binary file not shown.
Binary file not shown.
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
class wifi_mouse_windows::flags {
# this is how secgen
## $secgen_parameters = secgen_functions::get_parameters($::base64_inputs_file)
$leaked_filenames = ["flagsecret"] ##$secgen_parameters['leaked_filenames']
$strings_to_leak = ["flag message"] ##$secgen_parameters['strings_to_leak']

::secgen_functions::leak_files { 'wireless-mouse-file-leak':
storage_directory => "C:\\",
leaked_filenames => $leaked_filenames,
strings_to_leak => $strings_to_leak,
leaked_from => 'wireless_mouse',
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
class wifi_mouse_windows::install {
Exec { path => ["C:\\Windows"] }

file { 'C:\vc_redist.x86.exe':
source => 'puppet:///modules/wifi_mouse_windows/vc_redist.x86.exe',
} ->
exec { 'install_c++_redistributable':
command => 'C:\\vc_redist.x86.exe /install /quiet /norestart',
} ->
file { 'C:\wireless_mouse_installer.exe':
source => 'puppet:///modules/wifi_mouse_windows/wireless_mouse_installer.exe',
} ->
exec { 'install_wireless_mouse':
command => 'C:\\Windows\\system32\\cmd.exe /c "start timeout /t 120 taskkill /b C:\\wireless_mouse_installer.exe /VERYSILENT /NORESTART"',
timeout => 1200,
} ->
file { 'C:\\create-firewall-rule.ps1':
source => 'puppet:///modules/wifi_mouse_windows/create-firewall-rule.ps1'
} ->
exec { 'create-firewall-rule':
command => 'C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -noexit -file "C:\\create-firewall-rule.ps1"',
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
<?xml version="1.0"?>
<vulnerability xmlns="http://github.com/cliffe/SecGen/vulnerability"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://github.com/cliffe/SecGen/vulnerability">
<name>WiFi Mouse Windows</name>
<author>Harry J. Hall</author>
<module_license>MIT</module_license>
<description>
The Windows version of WiFi Mouse 1.7.8.5 which contains an authentication vulnerability.
WiFi Mouse is a tool for controlling a computer using a smartphone.
</description>

<type>Remote control software</type>
<privilege>user_rwx</privilege>
<access>remote</access>
<platform>windows</platform>
<difficulty>medium</difficulty>

<read_fact>server_name</read_fact>
<read_fact>strings_to_leak</read_fact>
<read_fact>leaked_filenames</read_fact>

<default_input into="string_to_leak">
<generator type="message_generator"/>
</default_input>

<default_input into="leaked_filenames">
<generator type="filename_generator">
</default_input>
</vulnerability>
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
include wifi_mouse_windows::install
include wifi_mouse_windows::flags