Skip to content

Conversation

@h00die
Copy link
Contributor

@h00die h00die commented Oct 22, 2025

Updates the windows service persistence to the new mixin, adds the ability to run as either powershell or sc.exe, and uses more libraries. Part of #20374

Verification

  • Start msfconsole
  • exploit the box somehow
  • use exploit/windows/persistence/service
  • set SESSION <id>
  • exploit
  • Verify persistence is created, and you get a new session if apt is run
  • Verify cleanup works
  • Document is updated and correct

@h00die h00die changed the title update windows service to persistence mixin Draft: update windows service to persistence mixin Oct 22, 2025
@h00die
Copy link
Contributor Author

h00die commented Oct 22, 2025

Draft, forgot to finish the docs.

@h00die h00die changed the title Draft: update windows service to persistence mixin update windows service to persistence mixin Oct 22, 2025
@h00die h00die marked this pull request as draft October 22, 2025 23:43
@h00die
Copy link
Contributor Author

h00die commented Oct 22, 2025

Drafting while this is discussed in slack

@h00die
Copy link
Contributor Author

h00die commented Oct 24, 2025

#20657

@h00die h00die marked this pull request as ready for review November 5, 2025 21:39
@h00die
Copy link
Contributor Author

h00die commented Nov 5, 2025

I've reworked this a bit and now it can attempt any of the 3 method (API, powershell, sc.exe) since it wasn't much code to keep all 3 ideas in there. Auto is default and tries API first.

@h00die
Copy link
Contributor Author

h00die commented Nov 5, 2025

@bwatters-r7 ready for review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants