nettitude / PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[BUG] Copy command in C# is bugged in v7.0

polarlotus opened this issue · comments

Description

The "copy" command in the C# implant is no longer working as expected in v7.0. The destination file is never written and/ or the command does not return.

Execution Environment:

C# Implant 32 and 64bit

Data Value
Full Posh version (PoshC2 v7.0 (837846a 2020-08-20 22:12:50)
OS & version Windows 7 - Windows 10
Using Docker/containerisation? NO

Implant Info

  • What implant does the problem occur on? C#
  • How was the implant created? Running a default payload? Unmodified SharpShellcode.bin and default exe's

Defensive Technologies

  • Is the target environment running any particular defensive products? AVs/EDRs etc?
    No.

To Reproduce

Steps to reproduce the behavior:

  1. Generate default C# implant
  2. Wait until implant has run and established with C2 and Stage2-core.exe etc has loaded.
  3. copy c:\test.txt c:\test.bak. (replace test.txt with your own file)
  4. Nothing happens.

Expected behavior

The source file should be copied to the destination.

Screenshots

N/A

Attach files if required

N/A

Additional context

Add any other context about the problem here.

Confirmed bug in 7.0.4. Fix is incoming.

Temporary workaround... shove an extra argument in:

copy asdf c:\temp\test.txt c:\temp\test.bak
Someone can't count using 0 based indexing ;)

@Console this is fixed now right?

Works like a dream now. Thanks for the efforts here.

Awesome stuff thanks @Console !!