Skip to content

Commit 978fdb0

Browse files
committed
Comment out PSH target and explain why
I hope we can fix the PSH target in the future, but the Windows dropper works today, and you can specify a custom EXE if you really want.
1 parent a9a3075 commit 978fdb0

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

modules/exploits/multi/http/struts2_rest_xstream.rb

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,10 +42,12 @@ def initialize(info = {})
4242
'Platform' => 'python',
4343
'Arch' => ARCH_PYTHON
4444
],
45+
=begin this stuff that doesn't work yet
4546
['PowerShell (In-Memory)',
4647
'Platform' => 'win',
4748
'Arch' => [ARCH_X86, ARCH_X64]
4849
],
50+
=end
4951
['Linux (Dropper)',
5052
'Platform' => 'linux',
5153
'Arch' => [ARCH_X86, ARCH_X64]
@@ -92,6 +94,7 @@ def execute_command(cmd, opts = {})
9294
when /Python/
9395
%W{python -c #{cmd}}
9496
when /PowerShell/
97+
# This doesn't work yet
9598
%W{cmd.exe /c #{cmd_psh_payload(cmd, payload.arch, remove_comspec: true)}}
9699
when /Windows/
97100
%W{cmd.exe /c #{cmd}}

0 commit comments

Comments
 (0)