blog/content/posts/commits/2026-06-18-commit-f3779a9.md

title, date, draft, tags, categories, summary, author

title	date	draft	tags	categories	summary	author
[bojemoi] fix(uzi): optimize meterpreter upgrade to survive ephemeral shell sessions	2026-06-18T15:09:45+02:00	false	commit bojemoi main	Git Activity	Commit f3779a9 par Betty dans bojemoi	Betty

Commit f3779a9

Repository	bojemoi
Branch	main
Author	Betty
Hash	f3779a95bba9b6742b97a10628613c6e6802f137

Description

• Add upfront session liveness check before attempting upgrade
• Try post/multi/manage/shell_to_meterpreter first (MSF native, ~30s max, no shell round-trips) before falling back to msfvenom+base64 injection
• Pass _whoami from handle_new_sessions to upgrade_to_meterpreter to eliminate redundant whoami shell command (~9s saved)
• Reduce shell_cmd timeout from 9s fixed to variable max_wait (5-9s)
• Add session liveness check between strategy 1 and fallback
• Refactor enrichment/reporting into _finalize_upgrade() helper

Previous flow took ~100s before first shell command, causing "Invalid session identifier" on ephemeral bind_netcat sessions.

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

M	borodino/thearm_uzi

Diff Summary

 borodino/thearm_uzi | 197 ++++++++++++++++++++++++++++++++++++++--------------
 1 file changed, 146 insertions(+), 51 deletions(-)