update removal commands for osx/local/persistence

fixes #12870
rapid7 · Jan 21, 2020 · 06843d0 · 06843d0
1 parent 7b7f56e
commit 06843d0
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/modules/exploits/osx/local/persistence.rb b/modules/exploits/osx/local/persistence.rb
@@ -121,9 +121,9 @@ def keepalive?
   # prints out a list of paths to remove and commands to run.
   def list_removal_paths
     files = [backdoor_path, plist_path]
-    print_status("To remove the persistence, run:\n"+
-                 "$ launchctl unload -w #{plist_path.shellescape}\n"+
-                 files.map{|f| "$ rm #{f}"}.join("\n"))
+    print_status("To remove the persistence, run:\n$ " +
+      files.map{|f| "rm #{f}"}.join("; ") +
+      "; launchctl stop #{File.basename(backdoor_path)}")
   end
 
   # path to the LaunchAgent service configuration plist