Skip to content

Conversation

@h00die
Copy link
Contributor

@h00die h00die commented Dec 27, 2025

Updates the windows s4u persistence to the new mixin. The original persistence worked in several different and very cool ways, and I felt it would be best to split them out instead of complicating the datastore based on which technique was chosen. Part of #20374

Verification

  • Start msfconsole
  • exploit the box somehow
  • use exploit/windows/persistence/service_for_user/<select a module>
  • set SESSION <id>
  • exploit
  • Verify persistence is created, and you get a new session after doing the trigger
  • Verify cleanup works
  • Document is updated and correct

Comment on lines -39 to -47
'Compat' => {
'Meterpreter' => {
'Commands' => %w[
stdapi_railgun_api
stdapi_sys_config_getenv
stdapi_sys_config_getuid
]
}
},
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This one should be kept along all the modules

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Technically the module works with out it (so is it really necessary?!)

I have a list of improvements for all the other modules, so i can add it to my list as a sweeping change if needed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants