Skip to content

Comments

fix: restore compatibility with modern Windows Update clients#18

Open
5tuk0v wants to merge 1 commit intoGoSecure:masterfrom
5tuk0v:master
Open

fix: restore compatibility with modern Windows Update clients#18
5tuk0v wants to merge 1 commit intoGoSecure:masterfrom
5tuk0v:master

Conversation

@5tuk0v
Copy link

@5tuk0v 5tuk0v commented Feb 23, 2026

Hey there, a fellow hacker got me curious about #17 and I took a look at it in the lab for fun. The tool seems to be working consistently on various OS versions after applying these fixes (written by our friend Claude):

  • Remove hardcoded Prerequisites category UUID (0fa1201d) from sync-updates.xml — modern WU clients no longer satisfy this category, causing updates to be silently marked non-applicable
  • Populate in get-config.xml with required protocol negotiation fields (ProtocolVersion, MaxExtendedUpdatesPerRequest, IsInventoryRequired, ClientReportingLevel) — absence causes 0x8024402a on current WU client versions
  • Catch ConnectionResetError/BrokenPipeError on EXE send in do_GET — suppresses noisy traceback from BITS range-request probe
  • Bump lxml to >=4.9.2 to fix build failure on Python 3.11+

Tested successfully on: Windows 10 22H2, Windows 11 24H2, Windows Server 2019, Windows Server 2022

Payload used during testing: python3 ./pywsus.py -H IP_ADDR -p 8530 -e PsExec64.exe -c '/accepteula /s cmd.exe /c "whoami > C:\pwned.txt"'

- Remove hardcoded Prerequisites category UUID (0fa1201d) from
  sync-updates.xml — modern WU clients no longer satisfy this category,
  causing updates to be silently marked non-applicable
- Populate <Properties> in get-config.xml with required protocol
  negotiation fields (ProtocolVersion, MaxExtendedUpdatesPerRequest,
  IsInventoryRequired, ClientReportingLevel) — absence causes 0x8024402a
  on current WU client versions
- Catch ConnectionResetError/BrokenPipeError on EXE send in do_GET —
  suppresses noisy traceback from BITS range-request probe
- Bump lxml to >=4.9.2 to fix build failure on Python 3.11+

Tested on: Windows 10 22H2, Windows 11 24H2, Windows Server 2019, Windows Server 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant