When executing a direct command to Client's OS (through the Execute command), if the execution of the given command is perpetual the Server deadlocks. Also, even if the execution is not perpetual and just takes a lot of time the user is stuck looking at the blank window and waiting for client response (not being able to focus on another client for example). There is currently no way to send a keyboard interrupt. My current idea is to implement a detach feature (This will solve the long waiting time). For the perpetual execution my current approach is to move the client handling of the Execute command in a thread and while it's executing wait for a KILL command from the Server (somewhat like flooding functions are currently handled on the Client side).
The reason this is marked as a priority is that a malicious Client can exploit this to deadlock the Server as soon as the later send it an Exexute command, effectively forcing the PenTester to restart the Server. It's not marked as severe as the later versions of Clients will automatically try to reconnect upon losing the Server so no Client will be lost.
When executing a direct command to Client's OS (through the
Executecommand), if the execution of the given command is perpetual the Server deadlocks. Also, even if the execution is not perpetual and just takes a lot of time the user is stuck looking at the blank window and waiting for client response (not being able to focus on another client for example). There is currently no way to send a keyboard interrupt. My current idea is to implement a detach feature (This will solve the long waiting time). For the perpetual execution my current approach is to move the client handling of theExecutecommand in a thread and while it's executing wait for aKILLcommand from the Server (somewhat like flooding functions are currently handled on the Client side).The reason this is marked as a priority is that a malicious Client can exploit this to deadlock the Server as soon as the later send it an
Exexutecommand, effectively forcing the PenTester to restart the Server. It's not marked as severe as the later versions of Clients will automatically try to reconnect upon losing the Server so no Client will be lost.