-
Notifications
You must be signed in to change notification settings - Fork 13.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Wrap kiwi cmd arguments in quotes #14802
Wrap kiwi cmd arguments in quotes #14802
Conversation
Before:
After:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Proposed code changes look good to land, thanks for referencing the quote from the official wiki as well for passersbys!
Tests complete and code looks good! Landing now... |
Release NotesFixed a bug involving the Kiwi library where commands passed to Kiwi via the |
thanks for trying to help solve my problem, but nothing works for me :) Does not work for me:
from .rc script
My method cmd_kiwi_cmd:
Is there anyone who tested it and who knows how to fix it?) |
Resolves #14136
Kiwi expects commands with an argument to be wrapped in quotes but we weren't doing that even when the user would wrap it in quotes one the meterpreter prompt. This PR resolves that by wrapping each command in quotes so kiwi can parse it correctly
Verification
windows/x64/meterpreter_reverse_http
)sessions -1
getsystem
(some kiwi commands require a privileged account)load kiwi
kiwi_cmd "sekurlsa::logonPasswords full"
mimikatz(powershell) # sekurlsa::logonPasswords full
previously thefull
would be run as a separate command which does not work