{"action":"created","issue":{"url":"https://api.github.com/repos/oddcod3/Phantom-Evasion/issues/13","repository_url":"https://api.github.com/repos/oddcod3/Phantom-Evasion","labels_url":"https://api.github.com/repos/oddcod3/Phantom-Evasion/issues/13/labels{/name}","comments_url":"https://api.github.com/repos/oddcod3/Phantom-Evasion/issues/13/comments","events_url":"https://api.github.com/repos/oddcod3/Phantom-Evasion/issues/13/events","html_url":"https://github.com/oddcod3/Phantom-Evasion/issues/13","id":331010274,"node_id":"MDU6SXNzdWUzMzEwMTAyNzQ=","number":13,"title":"Additional Options needed - keep alive","user":{"login":"anonymouz4","id":32394757,"node_id":"MDQ6VXNlcjMyMzk0NzU3","avatar_url":"https://avatars2.githubusercontent.com/u/32394757?v=4","gravatar_id":"","url":"https://api.github.com/users/anonymouz4","html_url":"https://github.com/anonymouz4","followers_url":"https://api.github.com/users/anonymouz4/followers","following_url":"https://api.github.com/users/anonymouz4/following{/other_user}","gists_url":"https://api.github.com/users/anonymouz4/gists{/gist_id}","starred_url":"https://api.github.com/users/anonymouz4/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/anonymouz4/subscriptions","organizations_url":"https://api.github.com/users/anonymouz4/orgs","repos_url":"https://api.github.com/users/anonymouz4/repos","events_url":"https://api.github.com/users/anonymouz4/events{/privacy}","received_events_url":"https://api.github.com/users/anonymouz4/received_events","type":"User","site_admin":false},"labels":[{"id":736603423,"node_id":"MDU6TGFiZWw3MzY2MDM0MjM=","url":"https://api.github.com/repos/oddcod3/Phantom-Evasion/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-06-10T22:59:38Z","updated_at":"2018-08-08T11:27:44Z","closed_at":null,"author_association":"NONE","body":"- **Issue 1**\r\nSomething I noticed was that if the reverse_tcp meterpreter session died, it didn't spawn/create a new one. If this isn't in it yet, it is really important to add this quick.\r\nI know there is a post-exploitation module that should implement this but I'm not sure if that works correctly.\r\n\r\n\r\nRerunning the reverse_tcp shellcode every x second **needs to be in the File itself!** Any persistence as **second file is not good**. Starting the main file itself is very cpu intense due to the av bypass methods. **Thats why it needs to be inside!**\r\nLike this:\r\n```\r\nmain(){\r\n\r\n    junkcode()\r\n    custom_shellcode=\"...\"\r\n\r\n    for(;;) {\r\n      execute_shellcode()\r\n      delay(10000);\r\n    }\r\n\r\n}\r\n```\r\n\r\n\r\n**Keeping the process alive is important, but its also important that the process itself reconnects if errors happen, otherwise the process would be still alive but with broken connection >> no shell**\r\n\r\n*-*               \r\n*-*\r\n> –> Will be implemented\r\n> - **Issue 2**\r\n> It would be nice to add other options besides `LHost` and `LPort` like `PrependMigrate` and `PrependMigrateProc`, just like you would in msfvenom.\r\n> \r\n>   I tried to bypass this by creating c shellcode with msfvenom and choosing it instead of the default meterpreter in Phantom-Evasion but it didn't work. (compiling worked but didn't connect)\r\n> I pasted the shellcode as oneline. Was that the correct way?\r\n> (see this other [issue](https://github.com/oddcod3/Phantom-Evasion/issues/15))\r\n> "},"comment":{"url":"https://api.github.com/repos/oddcod3/Phantom-Evasion/issues/comments/411373940","html_url":"https://github.com/oddcod3/Phantom-Evasion/issues/13#issuecomment-411373940","issue_url":"https://api.github.com/repos/oddcod3/Phantom-Evasion/issues/13","id":411373940,"node_id":"MDEyOklzc3VlQ29tbWVudDQxMTM3Mzk0MA==","user":{"login":"oddcod3","id":33157281,"node_id":"MDQ6VXNlcjMzMTU3Mjgx","avatar_url":"https://avatars1.githubusercontent.com/u/33157281?v=4","gravatar_id":"","url":"https://api.github.com/users/oddcod3","html_url":"https://github.com/oddcod3","followers_url":"https://api.github.com/users/oddcod3/followers","following_url":"https://api.github.com/users/oddcod3/following{/other_user}","gists_url":"https://api.github.com/users/oddcod3/gists{/gist_id}","starred_url":"https://api.github.com/users/oddcod3/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oddcod3/subscriptions","organizations_url":"https://api.github.com/users/oddcod3/orgs","repos_url":"https://api.github.com/users/oddcod3/repos","events_url":"https://api.github.com/users/oddcod3/events{/privacy}","received_events_url":"https://api.github.com/users/oddcod3/received_events","type":"User","site_admin":false},"created_at":"2018-08-08T11:27:44Z","updated_at":"2018-08-08T11:27:44Z","author_association":"OWNER","body":"@anonymouz4 this is a partial update , 1.2.1 will be released in few days with two keepalive modules (write lock & createmutex) and other stuffs i did not inclueded yet!\r\n"}}
{"actor":{"display_login":"oddcod3"}}