49 lines
1.4 KiB
Markdown
49 lines
1.4 KiB
Markdown
---
|
|
title: "[bojemoi] fix(uzi): optimize meterpreter upgrade to survive ephemeral shell sessions"
|
|
date: 2026-06-18T15:09:45+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit f3779a9 par Betty dans bojemoi"
|
|
author: "Betty"
|
|
---
|
|
|
|
## Commit `f3779a9`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | Betty |
|
|
| **Hash** | `f3779a95bba9b6742b97a10628613c6e6802f137` |
|
|
|
|
|
|
### Description
|
|
|
|
- Add upfront session liveness check before attempting upgrade
|
|
- Try post/multi/manage/shell_to_meterpreter first (MSF native, ~30s max,
|
|
no shell round-trips) before falling back to msfvenom+base64 injection
|
|
- Pass _whoami from handle_new_sessions to upgrade_to_meterpreter to
|
|
eliminate redundant whoami shell command (~9s saved)
|
|
- Reduce shell_cmd timeout from 9s fixed to variable max_wait (5-9s)
|
|
- Add session liveness check between strategy 1 and fallback
|
|
- Refactor enrichment/reporting into _finalize_upgrade() helper
|
|
|
|
Previous flow took ~100s before first shell command, causing "Invalid
|
|
session identifier" on ephemeral bind_netcat sessions.
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M borodino/thearm_uzi
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
borodino/thearm_uzi | 197 ++++++++++++++++++++++++++++++++++++++--------------
|
|
1 file changed, 146 insertions(+), 51 deletions(-)
|
|
```
|