IE Low ElevationPolicy Priv Esc Exploits CVE-2013-3186

I have included the cab binaries as you can view these (contents is only XML/Powershell and the certificate file).

This is more of a POC unless the user creates their own CAB due to the code signing issues. I think we could create this automatically if we had osslsigncode available as a library but its easier to just use the Windows SDK. Also requires user to run the diagnostic so its not super useful.

To test the proof of concept you will need to install the certificate into the Trusted Root and Trusted Publishers certificate stores on the target machine. You can do this by copying the 'DiagPackage.cat' (in external/source/exploits/cve-2013-3186/diagpkg/output) to the target box, double click, View Signature, View Certificate, Install Certificate... 

If we did have automajjik code signing then the payload.ps1 wouldn't need to be dropped as the package powershell would contain the payload