Fixes persistence module by revering changes to the value returned by…

… the write_script_to_target function, which screws up the path that is used for startup. Currently an escaped path "C://Users//..." is being used instead of using windows standards "C:\Users\...".
rapid7 · Mar 10, 2015 · c6cb1e8 · c6cb1e8
1 parent cd992d5
commit c6cb1e8
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/modules/exploits/windows/local/persistence.rb b/modules/exploits/windows/local/persistence.rb
@@ -135,8 +135,8 @@ def write_script_to_target(vbs, name)
     begin
       write_file(tempvbs, vbs)
       print_good("Persistent Script written to #{tempvbs}")
-      tempvbs = tempvbs.gsub(/\\/, '//')      # Escape windows pathname separators.
-      @clean_up_rc << "rm #{tempvbs}\n"
+      # Escape windows pathname separators.
+      @clean_up_rc << "rm #{tempvbs.gsub(/\\/, '//')}\n"
     rescue
       print_error("Could not write the payload on the target hosts.")
       # return nil since we could not write the file on the target host.

diff --git a/scripts/meterpreter/persistence.rb b/scripts/meterpreter/persistence.rb
@@ -123,8 +123,8 @@ def write_script_to_target(target_dir,vbs)
   fd.write(vbs)
   fd.close
   print_good("Persistent Script written to #{tempvbs}")
-  tempvbs = tempvbs.gsub(/\\/, '//')      # Escape windows pathname separators.
-  file_local_write(@clean_up_rc, "rm #{tempvbs}\n")
+  # Escape windows pathname separators.
+  file_local_write(@clean_up_rc, "rm #{tempvbs.gsub(/\\/, '//')}\n")
   return tempvbs
 end