diff --git a/content/posts/commits/2026-06-18-commit-f3779a9.md b/content/posts/commits/2026-06-18-commit-f3779a9.md new file mode 100644 index 0000000..46042b3 --- /dev/null +++ b/content/posts/commits/2026-06-18-commit-f3779a9.md @@ -0,0 +1,48 @@ +--- +title: "[bojemoi] fix(uzi): optimize meterpreter upgrade to survive ephemeral shell sessions" +date: 2026-06-18T15:09:45+02:00 +draft: false +tags: ["commit", "bojemoi", "main"] +categories: ["Git Activity"] +summary: "Commit f3779a9 par Betty dans bojemoi" +author: "Betty" +--- + +## Commit `f3779a9` + +| | | +|---|---| +| **Repository** | bojemoi | +| **Branch** | `main` | +| **Author** | Betty | +| **Hash** | `f3779a95bba9b6742b97a10628613c6e6802f137` | + + +### Description + +- Add upfront session liveness check before attempting upgrade +- Try post/multi/manage/shell_to_meterpreter first (MSF native, ~30s max, + no shell round-trips) before falling back to msfvenom+base64 injection +- Pass _whoami from handle_new_sessions to upgrade_to_meterpreter to + eliminate redundant whoami shell command (~9s saved) +- Reduce shell_cmd timeout from 9s fixed to variable max_wait (5-9s) +- Add session liveness check between strategy 1 and fallback +- Refactor enrichment/reporting into _finalize_upgrade() helper + +Previous flow took ~100s before first shell command, causing "Invalid +session identifier" on ephemeral bind_netcat sessions. + +Co-Authored-By: Claude Sonnet 4.6 + +### Files Changed + +``` +M borodino/thearm_uzi +``` + +### Diff Summary + +``` + borodino/thearm_uzi | 197 ++++++++++++++++++++++++++++++++++++++-------------- + 1 file changed, 146 insertions(+), 51 deletions(-) +```