Cn33liz / p0wnedShell

PowerShell Runspace Post Exploitation Toolkit
BSD 3-Clause "New" or "Revised" License
1.52k stars 336 forks source link

Redirection/Output missing in reverse tcp shell #7

Open cyb3rwr3ck opened 6 years ago

cyb3rwr3ck commented 6 years ago

First: Thx for the great tool! Second: My lab setup is the following:

Now, if I select one of the options there is exactly zero output and the application must be closed by ^C Probably it is some kind of redirection issue but the strange thing is that the menu is displayed correctly. Any ideas?

Cn33liz commented 6 years ago

Hi, nice to hear that you like the tool. I suspect that the ConstrainedLanguageMode is causing this issue, i'll try if i can reproduce the issue.

Regards,

Cornelis

2018-04-27 18:23 GMT+02:00 cyb3rwr3ck notifications@github.com:

First: Thx for the great tool! Second: My lab setup is the following:

  • victim has applocker and ConstrainedLanguageMode active
  • Code execution exists through ps remoting
  • dll with tcp reverse shell code was downloaded onto the victim and executed via rundll32
  • powercat listener receives the connection
  • p0wnedshell is executed in the reverse shell using InstallUtil -> p0wnedshell menu is displayed

Now, if I select one of the options there is exactly zero output and the application must be closed by ^C Probably it is some kind of redirection issue but the strange thing is that the menu is displayed correctly. Any ideas?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/Cn33liz/p0wnedShell/issues/7, or mute the thread https://github.com/notifications/unsubscribe-auth/ADqH5nuBESTG63dXM65MhwTv6eMzMYEiks5ts0YEgaJpZM4TqoFe .