Skip to content

[BUG] download-file command via PBind-Sharp pivot is broken #276

@WildcardTheory

Description

@WildcardTheory

Description

Using the "download-file" command inside of an active PBind-connect csharp pivot results in an assembly-load error.

Execution Environment:

Full Posh version | PoshC2 v8.1 (5179034 2022-08-01 10:09:15)
OS & version | Any windows OS
Using | Standard git branch

Implant Info

C# - PBind

  • How was the implant created?

Default, Shellcode and custom, same results.

Defensive Technologies

  • Is the target environment running any particular defensive products?

No, this is a lab without any AV.

To Reproduce

Steps to reproduce the behavior:

  1. Fire up a csharp posh payload on HOST 1 & wait for callback.
  2. Fire up a PBind payload on target HOST 2.
  3. On host 1 use pbind-connect HOST 2.
  4. Receive PBIND pivot and verify that it's connected properly.
  5. Finally, inside the PBIND pivot download any file using "download-file". The error will immediately be apparent.

Expected behavior

The "download-file" command should commence the file download in the same way as the daisy and dropper payloads.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions