Skip to content

[BUG][PRIORITY] Fix logic bug that deadlocks the server (from TODO) #36

Description

@panagiks

When executing a direct command to Client's OS (through the Execute command), if the execution of the given command is perpetual the Server deadlocks. Also, even if the execution is not perpetual and just takes a lot of time the user is stuck looking at the blank window and waiting for client response (not being able to focus on another client for example). There is currently no way to send a keyboard interrupt. My current idea is to implement a detach feature (This will solve the long waiting time). For the perpetual execution my current approach is to move the client handling of the Execute command in a thread and while it's executing wait for a KILL command from the Server (somewhat like flooding functions are currently handled on the Client side).
The reason this is marked as a priority is that a malicious Client can exploit this to deadlock the Server as soon as the later send it an Exexute command, effectively forcing the PenTester to restart the Server. It's not marked as severe as the later versions of Clients will automatically try to reconnect upon losing the Server so no Client will be lost.

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions