evil-winrm-ai 3.9 → 4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e0154b8e0b66745fda3c9c3307b4a1b0ce87b2f06f09cf6ef1781572a97217f1
-  data.tar.gz: 7d1e174ae8c5701fb1c71ab10c7a977ae21c643bf747eaa3e897831d0d128868
+  metadata.gz: e1983c8cf5a0096c9baea9fd20c3047177640ec4f740311b51a46d847c5b696f
+  data.tar.gz: f37cc6856e0fbcc1eecbea0f26d236eb5619aa06c2a7c6fd01f14780e9a29ab0
 SHA512:
-  metadata.gz: 259ce4272eed5f43b4f750fb3648098742f3f531f77f4c9da5a8d00bb84710a9212acfb37c16cf7ee937b3afac0ef35fa4c21059439a44655b0208af8efc4cc3
-  data.tar.gz: efa099a376d3352765684da5ebf46d59590398a1f3d6771cad1be0e65d9fa6fbcd55707efbe14b9672266bfaf259619317318d90c3ae4e51daebad12cc9fd7bf
+  metadata.gz: 2c5094ccd7de1c78acf3110510b5ed5503e482ca4479763acfb8909df7c3614d2e556d95addbdb3af563197b63499287696937cb90c6a935f997b2f919094a8f
+  data.tar.gz: 84da83fa4c8a87f03d5360e86c6ec2d77523311edbf611c87ef8c733227fd095156d8220e842a0d4dfd084533666c61cc9e7b6ec8f7c3fc32ca523e67744cdfb

data/evil-winrm-ai.rb

@@ -18,11 +18,12 @@ require 'time'
 require 'fileutils'
 require 'logger'
 require 'shellwords'
+require 'thread'
 
 # Constants
 
 # Version
-VERSION = '3.9'
+VERSION = '4.1'
 
 # Msg types
 TYPE_INFO = 0
@@ -34,7 +35,7 @@ TYPE_SUCCESS = 4
 # Global vars
 
 # Available commands
-$LIST = %w[Bypass-4MSI services upload download clear cls menu exit]
+$LIST = %w[Bypass-4MSI services upload download clear cls menu exit quit]
 $COMMANDS = $LIST.dup
 $CMDS = $COMMANDS.clone
 $LISTASSEM = [''].sort
@@ -94,6 +95,9 @@ $WORDS_RANDOM_CASE = [
 $colors_enabled = true
 $check_rpath_completion = true
 
+# Flush stdout after each write
+$stdout.sync = true
+
 # Path for ps1 scripts and exec files
 $scripts_path = ''
 $executables_path = ''
@@ -184,7 +188,10 @@ module WinRM
         command = "Get-ChildItem #{remote_path} | Select-Object Name"
 
         @connection.shell(:powershell) { |e| e.run(command) }.stdout.strip.split(/\n/).drop(2).each do |file|
-          download(File.join(remote_file_path.to_s, file.strip), File.join(local_path, file.strip), chunk_size, false)
+          sanitized_path = File.basename(file.strip)
+          next if sanitized_path.empty? || sanitized_path == '.' || sanitized_path == '..'
+
+          download(File.join(remote_file_path.to_s, file.strip), File.join(local_path, sanitized_path), chunk_size, false)
         end
       end
 
@@ -1324,6 +1331,80 @@ class EvilWinRM
     ccache_path
   end
 
+  # True when the exception indicates the WinRM session is dead or was never established
+  def connection_error?(error)
+    error_msg = error.message.to_s.downcase
+    error_class = error.class.to_s
+
+    return true if error_msg.match?(/timeout|connection|closed|broken|reset|refused|unreachable|unauthorized|digest|ssl|ntlm|spnego|kerberos|gssapi|wsman|winrm|http|401|403|500|503|expired|empty response/)
+    return true if error_class.match?(/Timeout|Connection|Socket|HTTP|WinRM|GSSAPI|GssApi|OpenSSL|Errno/)
+
+    false
+  end
+
+  # WinRM::Connection#shell is lazy: the TCP/WinRM handshake happens on the first command.
+  # Never show the interactive prompt unless that command actually succeeds.
+  def verify_remote_connection(shell)
+    result = shell.run('(get-location).path')
+    pwd = result&.output.to_s.strip
+    raise 'Empty response from remote endpoint; session is not ready' if pwd.empty?
+
+    pwd
+  rescue => e
+    print_message('Cannot establish connection to remote endpoint. Check credentials and network.', TYPE_ERROR, true, $logger)
+    print_message("#{e.class}: #{e.message}", TYPE_ERROR, true, $logger)
+    custom_exit(1, false)
+  end
+
+  def handle_lost_connection(error)
+    puts
+    print_message("Connection timeout or error occurred: #{error.class} - #{error.message}", TYPE_ERROR, true, $logger)
+    print_message('Cleaning up and exiting...', TYPE_WARNING, true, $logger)
+    custom_exit(1, false)
+  end
+
+  # Keep the remote shell active while the local prompt is idle.
+  # Without this, Windows marks the shell Disconnected after ~1 minute of ShellInactivity
+  # and the next command fails even though the prompt still looks connected.
+  def decorate_shell_with_keepalive(shell, interval = 30)
+    mutex = Mutex.new
+    state = { last_activity: Time.now, stop: false }
+    original_run = shell.method(:run)
+
+    shell.define_singleton_method(:run) do |*args, &block|
+      mutex.synchronize do
+        result = original_run.call(*args, &block)
+        state[:last_activity] = Time.now
+        result
+      end
+    end
+
+    thread = Thread.new do
+      Thread.current.abort_on_exception = false
+      until state[:stop]
+        sleep(interval)
+        break if state[:stop]
+        next if (Time.now - state[:last_activity]) < interval
+        next unless shell.shell_id
+
+        begin
+          shell.run('[void]0')
+        rescue StandardError
+          # The next user command will surface a dead session
+        end
+      end
+    end
+
+    lambda do
+      state[:stop] = true
+      begin
+        thread.wakeup
+      rescue ThreadError
+      end
+      thread.join(1)
+    end
+  end
+
   # Main function
   def main
     arguments
@@ -1392,7 +1473,14 @@ class EvilWinRM
       time = Time.now.to_i
       print_message('Establishing connection to remote endpoint', TYPE_INFO)
       $conn.shell(:powershell) do |shell|
+        stop_keepalive = nil
         begin
+          last_pwd = verify_remote_connection(shell)
+          pwd = last_pwd
+          skip_pwd_refresh = true
+          print_message('Connection successful', TYPE_INFO)
+          stop_keepalive ||= decorate_shell_with_keepalive(shell)
+
           completion = proc do |str|
             case
             when Readline.line_buffer =~ /help.*/i
@@ -1462,32 +1550,22 @@ class EvilWinRM
           # Load history for this host/user
           load_history
 
-          until command == 'exit' do
-            begin
-              pwd = shell.run('(get-location).path').output.strip
-            rescue => e
-              # Handle connection/timeout errors when getting pwd
-              error_msg = e.message.to_s.downcase
-              if error_msg.include?('timeout') || error_msg.include?('connection') ||
-                 error_msg.include?('closed') || error_msg.include?('broken') ||
-                 e.class.to_s.include?('Timeout') || e.class.to_s.include?('Connection')
-                puts
-                print_message("Connection timeout or error occurred: #{e.class} - #{e.message}", TYPE_ERROR, true, $logger)
-                print_message("Cleaning up and exiting...", TYPE_WARNING, true, $logger)
-                # Clean up KRB5CCNAME before exiting
-                begin
-                  if defined?($original_krb5ccname) && !$original_krb5ccname.nil?
-                    ENV['KRB5CCNAME'] = $original_krb5ccname
-                  elsif defined?($original_krb5ccname) && $original_krb5ccname.nil?
-                    ENV.delete('KRB5CCNAME') if ENV.key?('KRB5CCNAME')
-                  end
-                rescue => cleanup_error
-                  # Ignore cleanup errors
+          until %w[exit quit].include?(command) do
+            if skip_pwd_refresh
+              skip_pwd_refresh = false
+            else
+              begin
+                new_pwd = shell.run('(get-location).path').output.to_s.strip
+                unless new_pwd.empty?
+                  pwd = new_pwd
+                  last_pwd = pwd
+                end
+              rescue => e
+                if connection_error?(e)
+                  handle_lost_connection(e)
+                else
+                  pwd = last_pwd
                 end
-                custom_exit(1, false)
-              else
-                # For other errors, try to continue with a default pwd
-                pwd = "C:\\"
               end
             end
 
@@ -1497,8 +1575,14 @@ class EvilWinRM
               command = Readline.readline("*Evil-WinRM* PS #{pwd}> ", true)
             end
 
-            # Handle Ctrl+L if it returns as empty or special character
-            if command == "\f" || (command.nil? && Readline.line_buffer.empty?)
+            if command.nil?
+              custom_exit(0)
+            end
+
+            break if %w[exit quit].include?(command.strip.downcase)
+
+            # Handle Ctrl+L if it returns as a special character
+            if command == "\f"
               clear_screen
               command = ''
               next
@@ -1806,27 +1890,9 @@ class EvilWinRM
               end
               $logger.info(output_logger)
             rescue => e
-              # Handle connection/timeout errors gracefully
-              error_msg = e.message.to_s.downcase
-              if error_msg.include?('timeout') || error_msg.include?('connection') ||
-                 error_msg.include?('closed') || error_msg.include?('broken') ||
-                 e.class.to_s.include?('Timeout') || e.class.to_s.include?('Connection')
-                puts
-                print_message("Connection timeout or error occurred: #{e.class} - #{e.message}", TYPE_ERROR, true, $logger)
-                print_message("Cleaning up and exiting...", TYPE_WARNING, true, $logger)
-                # Clean up KRB5CCNAME before exiting
-                begin
-                  if defined?($original_krb5ccname) && !$original_krb5ccname.nil?
-                    ENV['KRB5CCNAME'] = $original_krb5ccname
-                  elsif defined?($original_krb5ccname) && $original_krb5ccname.nil?
-                    ENV.delete('KRB5CCNAME') if ENV.key?('KRB5CCNAME')
-                  end
-                rescue => cleanup_error
-                  # Ignore cleanup errors
-                end
-                custom_exit(1, false)
+              if connection_error?(e)
+                handle_lost_connection(e)
               else
-                # Re-raise other errors
                 raise
               end
             end
@@ -1843,6 +1909,11 @@ class EvilWinRM
           else
             retry
           end
+        ensure
+          if stop_keepalive
+            stop_keepalive.call
+            stop_keepalive = nil
+          end
         end
 
         custom_exit(0)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: evil-winrm-ai
 version: !ruby/object:Gem::Version
-  version: '3.9'
+  version: '4.1'
 platform: ruby
 authors:
 - CyberVaca
@@ -11,7 +11,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-12-15 00:00:00.000000000 Z
+date: 2026-09-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: anthropic
@@ -155,6 +155,34 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 1.2.0
+- !ruby/object:Gem::Dependency
+  name: readline
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.0.4
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.0.4
+- !ruby/object:Gem::Dependency
+  name: readline-ext
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.0
 - !ruby/object:Gem::Dependency
   name: ruby-openai
   requirement: !ruby/object:Gem::Requirement
@@ -247,16 +275,22 @@ dependencies:
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5.0'
 description: The ultimate WinRM shell for hacking/pentesting. AI edition.
 email:
 - oscar.alfonso.diaz@gmail.com
@@ -293,7 +327,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.15
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Evil-WinRM