[BUG] Copy command in C# is bugged in v7.0
polarlotus opened this issue · comments
Description
The "copy" command in the C# implant is no longer working as expected in v7.0. The destination file is never written and/ or the command does not return.
Execution Environment:
C# Implant 32 and 64bit
Data | Value |
---|---|
Full Posh version (PoshC2 v7.0 (837846a 2020-08-20 22:12:50) | |
OS & version | Windows 7 - Windows 10 |
Using Docker/containerisation? | NO |
Implant Info
- What implant does the problem occur on? C#
- How was the implant created? Running a default payload? Unmodified SharpShellcode.bin and default exe's
Defensive Technologies
- Is the target environment running any particular defensive products? AVs/EDRs etc?
No.
To Reproduce
Steps to reproduce the behavior:
- Generate default C# implant
- Wait until implant has run and established with C2 and Stage2-core.exe etc has loaded.
- copy c:\test.txt c:\test.bak. (replace test.txt with your own file)
- Nothing happens.
Expected behavior
The source file should be copied to the destination.
Screenshots
N/A
Attach files if required
N/A
Additional context
Add any other context about the problem here.
Confirmed bug in 7.0.4. Fix is incoming.
Temporary workaround... shove an extra argument in:
copy asdf c:\temp\test.txt c:\temp\test.bak
Someone can't count using 0 based indexing ;)
@Console this is fixed now right?
Works like a dream now. Thanks for the efforts here.
Awesome stuff thanks @Console !!