jjd Posted March 22, 2017 Share Posted March 22, 2017 (edited) I cant get this to work! I found another thread when searching for how to escape special char, but it seem to not work for me. copying that code Q STRING \$Bunny \= \(gwmi win32_volume -f \'label\=\'\'BashBunny\'\'\' \| Select-Object -ExpandProperty DriveLetter\) in my bunny outputs this to notepad $Bunny = (gwmi win32_volume -f <label=<<BashBunny<<< ~ Select-Object -ExpandProperty DriveLetter) the code from the WiPassDump payload Q STRING '.((gwmi win32_volume -f '"'"'label='"''"'BashBunny'"'''"').Name+'"'"'payloads/' outputs .((gwmi win32_volume -f <label=<<BashBunny<<<).Name+<payloads#) and this Q STRING '$a = Get-WmiObject -Class Win32_Volume -Filter "Label='BashBunny'" | select -expand Name' outputs $a = Get-WmiObject -Class Win32_Volume -Filter @Label=BashBunny@ ~ select -expand Name this is what made me realize that i needed to escape them This works the same on both windows and mac clients, I am in Canada (not french Canada) and my language (on pc) is set to English US. anyone have any ideas? I have tried setting QUACK SET_LANGUAGE us but it does not seem to help, us.json is all thats in my languages folder. any ideas? Edited March 22, 2017 by jjd Quote Link to comment Share on other sites More sharing options...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.