Fork: 0
0xRoM / DirtyScripts
Transfer to URL with SHA Find file
Newer
Older
DirtyScripts / privesc / Sherlock.ps1
root on 13 Jan 2020 16 KB fixed issue with issue numbers not increasing
Raw Blame History 
  1. <#
  2.  
  3.     File: Sherlock.ps1
  4.     Author: @_RastaMouse
  5.     License: GNU General Public License v3.0
  6.  
  7. #>
  8.  
  9. <#
  10.  
  11. RTM build reference, because I'm stupid and forget...
  12.  
  13. 6002: Vista SP2/2008 SP2
  14. 7600: 7/2008 R2
  15. 7601: 7 SP1/2008 R2 SP1
  16. 9200: 8/2012
  17. 9600: 8.1/2012 R2
  18. 10240: 10 Threshold
  19. 10586: 10 Threshold 2
  20. 14393: 10 Redstone/2016
  21. 15063: 10 Redstone 2
  22. 16299: 10 Redstone 3
  23. 17134: 10 Redstone 4
  24.  
  25. #>
  26.  
  27. $Global:ExploitTable = $null
  28.  
  29. function Get-FileVersionInfo ($FilePath) {
  30.  
  31.     $VersionInfo = (Get-Item $FilePath).VersionInfo
  32.     $FileVersion = ( "{0}.{1}.{2}.{3}" -f $VersionInfo.FileMajorPart, $VersionInfo.FileMinorPart, $VersionInfo.FileBuildPart, $VersionInfo.FilePrivatePart )
  33.         
  34.     return $FileVersion
  35.  
  36. }
  37.  
  38. function Get-InstalledSoftware($SoftwareName) {
  39.  
  40.     $SoftwareVersion = Get-WmiObject -Class Win32_Product | Where-Object { $_.Name -eq $SoftwareName } | Select-Object Version
  41.     $SoftwareVersion = $SoftwareVersion.Version  # I have no idea what I'm doing
  42.     
  43.     return $SoftwareVersion
  44.  
  45. }
  46.  
  47. function Get-Architecture {
  48.  
  49.     # This is the CPU architecture.  Returns "64-bit" or "32-bit".
  50.     $CPUArchitecture = (Get-WmiObject Win32_OperatingSystem).OSArchitecture
  51.  
  52.     # This is the process architecture, e.g. are we an x86 process running on a 64-bit system.  Retuns "AMD64" or "x86".
  53.     $ProcessArchitecture = $env:PROCESSOR_ARCHITECTURE
  54.  
  55.     return $CPUArchitecture, $ProcessArchitecture
  56.  
  57. }
  58.  
  59. function Get-CPUCoreCount {
  60.  
  61.     $CoreCount = (Get-WmiObject Win32_Processor).NumberOfLogicalProcessors
  62.     
  63.     return $CoreCount
  64.  
  65. }
  66.  
  67. function New-ExploitTable {
  68.  
  69.     # Create the table
  70.     $Global:ExploitTable = New-Object System.Data.DataTable
  71.  
  72.     # Create the columns
  73.     $Global:ExploitTable.Columns.Add("Title")
  74.     $Global:ExploitTable.Columns.Add("MSBulletin")
  75.     $Global:ExploitTable.Columns.Add("CVEID")
  76.     $Global:ExploitTable.Columns.Add("Link")
  77.     $Global:ExploitTable.Columns.Add("VulnStatus")
  78.  
  79.     # Add the exploits we are interested in.
  80.  
  81.     # MS10
  82.     $Global:ExploitTable.Rows.Add("User Mode to Ring (KiTrap0D)","MS10-015","2010-0232","https://www.exploit-db.com/exploits/11199/")
  83.     $Global:ExploitTable.Rows.Add("Task Scheduler .XML","MS10-092","2010-3338, 2010-3888","https://www.exploit-db.com/exploits/19930/")
  84.     # MS13
  85.     $Global:ExploitTable.Rows.Add("NTUserMessageCall Win32k Kernel Pool Overflow","MS13-053","2013-1300","https://www.exploit-db.com/exploits/33213/")
  86.     $Global:ExploitTable.Rows.Add("TrackPopupMenuEx Win32k NULL Page","MS13-081","2013-3881","https://www.exploit-db.com/exploits/31576/")
  87.     # MS14
  88.     $Global:ExploitTable.Rows.Add("TrackPopupMenu Win32k Null Pointer Dereference","MS14-058","2014-4113","https://www.exploit-db.com/exploits/35101/")
  89.     # MS15
  90.     $Global:ExploitTable.Rows.Add("ClientCopyImage Win32k","MS15-051","2015-1701, 2015-2433","https://www.exploit-db.com/exploits/37367/")
  91.     $Global:ExploitTable.Rows.Add("Font Driver Buffer Overflow","MS15-078","2015-2426, 2015-2433","https://www.exploit-db.com/exploits/38222/")
  92.     # MS16
  93.     $Global:ExploitTable.Rows.Add("'mrxdav.sys' WebDAV","MS16-016","2016-0051","https://www.exploit-db.com/exploits/40085/")
  94.     $Global:ExploitTable.Rows.Add("Secondary Logon Handle","MS16-032","2016-0099","https://www.exploit-db.com/exploits/39719/")
  95.     $Global:ExploitTable.Rows.Add("Windows Kernel-Mode Drivers EoP","MS16-034","2016-0093/94/95/96","https://github.com/SecWiki/windows-kernel-exploits/tree/master/MS16-034?")
  96.     $Global:ExploitTable.Rows.Add("Win32k Elevation of Privilege","MS16-135","2016-7255","https://github.com/FuzzySecurity/PSKernel-Primitives/tree/master/Sample-Exploits/MS16-135")
  97.     # Miscs that aren't MS
  98.     $Global:ExploitTable.Rows.Add("Nessus Agent 6.6.2 - 6.10.3","N/A","2017-7199","https://aspe1337.blogspot.co.uk/2017/04/writeup-of-cve-2017-7199.html")
  99.  
  100. }
  101.  
  102. function Set-ExploitTable ($MSBulletin, $VulnStatus) {
  103.  
  104.     if ( $MSBulletin -like "MS*" ) {
  105.  
  106.         $Global:ExploitTable | Where-Object { $_.MSBulletin -eq $MSBulletin
  107.  
  108.         } | ForEach-Object {
  109.  
  110.             $_.VulnStatus = $VulnStatus
  111.  
  112.         }
  113.  
  114.     } else {
  115.  
  116.  
  117.     $Global:ExploitTable | Where-Object { $_.CVEID -eq $MSBulletin
  118.  
  119.         } | ForEach-Object {
  120.  
  121.             $_.VulnStatus = $VulnStatus
  122.  
  123.         }
  124.  
  125.     }
  126.  
  127. }
  128.  
  129. function Get-Results {
  130.  
  131.     $Global:ExploitTable
  132.  
  133. }
  134.  
  135. function Find-AllVulns {
  136.  
  137.     if ( !$Global:ExploitTable ) {
  138.  
  139.         $null = New-ExploitTable
  140.     
  141.     }
  142.  
  143.         Find-MS10015
  144.         Find-MS10092
  145.         Find-MS13053
  146.         Find-MS13081
  147.         Find-MS14058
  148.         Find-MS15051
  149.         Find-MS15078
  150.         Find-MS16016
  151.         Find-MS16032
  152.         Find-MS16034
  153.         Find-MS16135
  154.         Find-CVE20177199
  155.  
  156.         Get-Results
  157.  
  158. }
  159.  
  160. function Find-MS10015 {
  161.  
  162.     $MSBulletin = "MS10-015"
  163.     $Architecture = Get-Architecture
  164.  
  165.     if ( $Architecture[0] -eq "64-bit" ) {
  166.  
  167.         $VulnStatus = "Not supported on 64-bit systems"
  168.  
  169.     } Else {
  170.  
  171.         $Path = $env:windir + "\system32\ntoskrnl.exe"
  172.         $VersionInfo = Get-FileVersionInfo($Path)
  173.         $VersionInfo = $VersionInfo.Split(".")
  174.  
  175.         $Build = $VersionInfo[2]
  176.         $Revision = $VersionInfo[3].Split(" ")[0]
  177.  
  178.         switch ( $Build ) {
  179.  
  180.             7600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "20591" ] }
  181.             default { $VulnStatus = "Not Vulnerable" }
  182.  
  183.         }
  184.  
  185.     }
  186.  
  187.     Set-ExploitTable $MSBulletin $VulnStatus
  188.  
  189. }
  190.  
  191. function Find-MS10092 {
  192.  
  193.     $MSBulletin = "MS10-092"
  194.     $Architecture = Get-Architecture
  195.  
  196.     if ( $Architecture[1] -eq "AMD64" -or $Architecture[0] -eq "32-bit" ) {
  197.  
  198.         $Path = $env:windir + "\system32\schedsvc.dll"
  199.  
  200.     } ElseIf ( $Architecture[0] -eq "64-bit" -and $Architecture[1] -eq "x86" ) {
  201.  
  202.         $Path = $env:windir + "\sysnative\schedsvc.dll"
  203.  
  204.     }
  205.  
  206.         $VersionInfo = Get-FileVersionInfo($Path)
  207.         $VersionInfo = $VersionInfo.Split(".")
  208.  
  209.         $Build = $VersionInfo[2]
  210.         $Revision = $VersionInfo[3].Split(" ")[0]
  211.  
  212.         switch ( $Build ) {
  213.  
  214.             7600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "20830" ] }
  215.             default { $VulnStatus = "Not Vulnerable" }
  216.  
  217.         }
  218.  
  219.     Set-ExploitTable $MSBulletin $VulnStatus
  220.  
  221. }
  222.  
  223. function Find-MS13053 {
  224.  
  225.     $MSBulletin = "MS13-053"
  226.     $Architecture = Get-Architecture
  227.  
  228.     if ( $Architecture[0] -eq "64-bit" ) {
  229.  
  230.         $VulnStatus = "Not supported on 64-bit systems"
  231.  
  232.     } Else {
  233.  
  234.         $Path = $env:windir + "\system32\win32k.sys"
  235.         $VersionInfo = Get-FileVersionInfo($Path)
  236.         $VersionInfo = $VersionInfo.Split(".")
  237.  
  238.         $Build = $VersionInfo[2]
  239.         $Revision = $VersionInfo[3].Split(" ")[0]
  240.  
  241.         switch ( $Build ) {
  242.  
  243.             7600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -ge "17000" ] }
  244.             7601 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "22348" ] }
  245.             9200 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "20732" ] }
  246.             default { $VulnStatus = "Not Vulnerable" }
  247.  
  248.         }
  249.  
  250.     }
  251.  
  252.     Set-ExploitTable $MSBulletin $VulnStatus
  253.  
  254. }
  255.  
  256. function Find-MS13081 {
  257.  
  258.     $MSBulletin = "MS13-081"
  259.     $Architecture = Get-Architecture
  260.  
  261.     if ( $Architecture[0] -eq "64-bit" ) {
  262.  
  263.         $VulnStatus = "Not supported on 64-bit systems"
  264.  
  265.     } Else {
  266.  
  267.         $Path = $env:windir + "\system32\win32k.sys"
  268.         $VersionInfo = Get-FileVersionInfo($Path)
  269.         $VersionInfo = $VersionInfo.Split(".")
  270.  
  271.         $Build = $VersionInfo[2]
  272.         $Revision = $VersionInfo[3].Split(" ")[0]
  273.  
  274.         switch ( $Build ) {
  275.  
  276.             7600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -ge "18000" ] }
  277.             7601 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "22435" ] }
  278.             9200 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "20807" ] }
  279.             default { $VulnStatus = "Not Vulnerable" }
  280.  
  281.         }
  282.  
  283.     }
  284.  
  285.     Set-ExploitTable $MSBulletin $VulnStatus
  286.  
  287. }
  288.  
  289. function Find-MS14058 {
  290.  
  291.     $MSBulletin = "MS14-058"
  292.     $Architecture = Get-Architecture
  293.  
  294.     if ( $Architecture[1] -eq "AMD64" -or $Architecture[0] -eq "32-bit" ) {
  295.  
  296.         $Path = $env:windir + "\system32\win32k.sys"
  297.  
  298.     } ElseIf ( $Architecture[0] -eq "64-bit" -and $Architecture[1] -eq "x86" ) {
  299.  
  300.         $Path = $env:windir + "\sysnative\win32k.sys"
  301.  
  302.     }
  303.  
  304.         $VersionInfo = Get-FileVersionInfo($Path)
  305.         $VersionInfo = $VersionInfo.Split(".")
  306.  
  307.         $Build = $VersionInfo[2]
  308.         $Revision = $VersionInfo[3].Split(" ")[0]
  309.  
  310.         switch ( $Build ) {
  311.  
  312.             7600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -ge "18000" ] }
  313.             7601 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "22823" ] }
  314.             9200 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "21247" ] }
  315.             9600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "17353" ] }
  316.             default { $VulnStatus = "Not Vulnerable" }
  317.  
  318.         }
  319.  
  320.     Set-ExploitTable $MSBulletin $VulnStatus
  321.  
  322. }
  323.  
  324. function Find-MS15051 {
  325.  
  326.     $MSBulletin = "MS15-051"
  327.     $Architecture = Get-Architecture
  328.  
  329.     if ( $Architecture[1] -eq "AMD64" -or $Architecture[0] -eq "32-bit" ) {
  330.  
  331.         $Path = $env:windir + "\system32\win32k.sys"
  332.  
  333.     } ElseIf ( $Architecture[0] -eq "64-bit" -and $Architecture[1] -eq "x86" ) {
  334.  
  335.         $Path = $env:windir + "\sysnative\win32k.sys"
  336.  
  337.     }
  338.  
  339.         $VersionInfo = Get-FileVersionInfo($Path)
  340.         $VersionInfo = $VersionInfo.Split(".")
  341.  
  342.         $Build = $VersionInfo[2]
  343.         $Revision = $VersionInfo[3].Split(" ")[0]
  344.  
  345.         switch ( $Build ) {
  346.  
  347.             7600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "18000" ] }
  348.             7601 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "22823" ] }
  349.             9200 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "21247" ] }
  350.             9600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "17353" ] }
  351.             default { $VulnStatus = "Not Vulnerable" }
  352.  
  353.         }
  354.  
  355.     Set-ExploitTable $MSBulletin $VulnStatus
  356.  
  357. }
  358.  
  359. function Find-MS15078 {
  360.  
  361.     $MSBulletin = "MS15-078"
  362.  
  363.     $Path = $env:windir + "\system32\atmfd.dll"
  364.     $VersionInfo = Get-FileVersionInfo($Path)
  365.     $VersionInfo = $VersionInfo.Split(" ")
  366.  
  367.     $Revision = $VersionInfo[2]
  368.  
  369.     switch ( $Revision ) {
  370.  
  371.         243 { $VulnStatus = "Appears Vulnerable" }
  372.         default { $VulnStatus = "Not Vulnerable" }
  373.  
  374.     }
  375.  
  376.     Set-ExploitTable $MSBulletin $VulnStatus
  377.  
  378. }
  379.  
  380. function Find-MS16016 {
  381.  
  382.     $MSBulletin = "MS16-016"
  383.     $Architecture = Get-Architecture
  384.  
  385.     if ( $Architecture[0] -eq "64-bit" ) {
  386.  
  387.         $VulnStatus = "Not supported on 64-bit systems"
  388.  
  389.     } Else {
  390.  
  391.         $Path = $env:windir + "\system32\drivers\mrxdav.sys"
  392.         $VersionInfo = Get-FileVersionInfo($Path)
  393.         $VersionInfo = $VersionInfo.Split(".")
  394.  
  395.         $Build = $VersionInfo[2]
  396.         $Revision = $VersionInfo[3].Split(" ")[0]
  397.  
  398.         switch ( $Build ) {
  399.  
  400.             7600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "16000" ] }
  401.             7601 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "23317" ] }
  402.             9200 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "21738" ] }
  403.             9600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "18189" ] }
  404.             10240 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "16683" ] }
  405.             10586 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le "103" ] }
  406.             default { $VulnStatus = "Not Vulnerable" }
  407.  
  408.         }
  409.  
  410.     }
  411.  
  412.     Set-ExploitTable $MSBulletin $VulnStatus
  413.  
  414. }
  415.  
  416. function Find-MS16032 {
  417.  
  418.     $MSBulletin = "MS16-032"
  419.     
  420.     $CPUCount = Get-CPUCoreCount
  421.  
  422.     if ( $CPUCount -eq "1" ) {
  423.  
  424.         $VulnStatus = "Not Supported on single-core systems"
  425.     
  426.     } Else {
  427.     
  428.         $Architecture = Get-Architecture
  429.  
  430.         if ( $Architecture[1] -eq "AMD64" -or $Architecture[0] -eq "32-bit" ) {
  431.  
  432.             $Path = $env:windir + "\system32\seclogon.dll"
  433.  
  434.         } ElseIf ( $Architecture[0] -eq "64-bit" -and $Architecture[1] -eq "x86" ) {
  435.  
  436.             $Path = $env:windir + "\sysnative\seclogon.dll"
  437.  
  438.         } 
  439.  
  440.             $VersionInfo = Get-FileVersionInfo($Path)
  441.  
  442.             $VersionInfo = $VersionInfo.Split(".")
  443.  
  444.             $Build = [int]$VersionInfo[2]
  445.             $Revision = [int]$VersionInfo[3].Split(" ")[0]
  446.  
  447.             switch ( $Build ) {
  448.  
  449.                 6002 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revison -lt 19598 -Or ( $Revision -ge 23000 -And $Revision -le 23909 ) ] }
  450.                 7600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le 19148 ] }
  451.                 7601 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -lt 19148 -Or ( $Revision -ge 23000 -And $Revision -le 23347 ) ] }
  452.                 9200 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revison -lt 17649 -Or ( $Revision -ge 21000 -And $Revision -le 21767 ) ] }
  453.                 9600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revison -lt 18230 ] }
  454.                 10240 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -lt 16724 ] }
  455.                 10586 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le 161 ] }
  456.                 default { $VulnStatus = "Not Vulnerable" }
  457.  
  458.             }
  459.     }
  460.     
  461.     Set-ExploitTable $MSBulletin $VulnStatus
  462.  
  463. }
  464.  
  465. function Find-MS16034 {
  466.  
  467.     $MSBulletin = "MS16-034"
  468.     
  469.     $Architecture = Get-Architecture
  470.  
  471.     if ( $Architecture[1] -eq "AMD64" -or $Architecture[0] -eq "32-bit" ) {
  472.  
  473.         $Path = $env:windir + "\system32\win32k.sys"
  474.  
  475.     } ElseIf ( $Architecture[0] -eq "64-bit" -and $Architecture[1] -eq "x86" ) {
  476.  
  477.         $Path = $env:windir + "\sysnative\win32k.sys"
  478.  
  479.     } 
  480.  
  481.     $VersionInfo = Get-FileVersionInfo($Path)
  482.  
  483.     $VersionInfo = $VersionInfo.Split(".")
  484.  
  485.     $Build = [int]$VersionInfo[2]
  486.     $Revision = [int]$VersionInfo[3].Split(" ")[0]
  487.  
  488.     switch ( $Build ) {
  489.  
  490.         6002 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revison -lt 19597 -Or $Revision -lt 23908 ] }
  491.         7601 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -lt 19145 -Or $Revision -lt 23346 ] }
  492.         9200 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revison -lt 17647 -Or $Revision -lt 21766 ] }
  493.         9600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revison -lt 18228 ] }
  494.         default { $VulnStatus = "Not Vulnerable" }
  495.  
  496.     }
  497.     
  498.     Set-ExploitTable $MSBulletin $VulnStatus
  499.  
  500. }
  501.  
  502. function Find-CVE20177199 {
  503.  
  504.     $CVEID = "2017-7199"
  505.     $SoftwareVersion = Get-InstalledSoftware "Nessus Agent"
  506.     
  507.     if ( !$SoftwareVersion ) {
  508.  
  509.         $VulnStatus = "Not Vulnerable"
  510.  
  511.     } else {
  512.  
  513.         $SoftwareVersion = $SoftwareVersion.Split(".")
  514.  
  515.         $Major = [int]$SoftwareVersion[0]
  516.         $Minor = [int]$SoftwareVersion[1]
  517.         $Build = [int]$SoftwareVersion[2]
  518.  
  519.         switch( $Major ) {
  520.  
  521.         6 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Minor -eq 10 -and $Build -le 3 -Or ( $Minor -eq 6 -and $Build -le 2 ) -Or ( $Minor -le 9 -and $Minor -ge 7 ) ] } # 6.6.2 - 6.10.3
  522.         default { $VulnStatus = "Not Vulnerable" }
  523.  
  524.         }
  525.  
  526.     }
  527.  
  528.     Set-ExploitTable $CVEID $VulnStatus
  529.  
  530. }
  531.  
  532. function Find-MS16135 {
  533.  
  534.     $MSBulletin = "MS16-135"
  535.     $Architecture = Get-Architecture
  536.  
  537.     if ( $Architecture[1] -eq "AMD64" -or $Architecture[0] -eq "32-bit" ) {
  538.  
  539.         $Path = $env:windir + "\system32\win32k.sys"
  540.  
  541.     } ElseIf ( $Architecture[0] -eq "64-bit" -and $Architecture[1] -eq "x86" ) {
  542.  
  543.         $Path = $env:windir + "\sysnative\win32k.sys"
  544.  
  545.     }
  546.  
  547.         $VersionInfo = Get-FileVersionInfo($Path)
  548.         $VersionInfo = $VersionInfo.Split(".")
  549.         
  550.         $Build = [int]$VersionInfo[2]
  551.         $Revision = [int]$VersionInfo[3].Split(" ")[0]
  552.  
  553.         switch ( $Build ) {
  554.  
  555.             7601 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -lt 23584 ] }
  556.             9600 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le 18524 ] }
  557.             10240 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le 16384 ] }
  558.             10586 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le 19 ] }
  559.             14393 { $VulnStatus = @("Not Vulnerable","Appears Vulnerable")[ $Revision -le 446 ] }
  560.             default { $VulnStatus = "Not Vulnerable" }
  561.  
  562.         }
  563.  
  564.     Set-ExploitTable $MSBulletin $VulnStatus
  565.  
  566. }
Buy Me A Coffee