Fixes #981

commixproject · Nov 18, 2024 · 92cf5d0 · 92cf5d0
1 parent 4ea7410
commit 92cf5d0
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 2 deletions.
diff --git a/doc/CHANGELOG.md b/doc/CHANGELOG.md
@@ -1,4 +1,5 @@
 ## Version 4.0 (TBA)
+* Revised: Minor bug-fix regarding tamper script "backticks.py"
 * Revised: Improvements regarding shell options `reverse_tcp`, `bind_tcp`.
 * Revised: Major code refactoring regarding session handler.
 * Revised: Minor improvement regarding options `--prefix`, `--suffix`.

diff --git a/src/core/tamper/backticks.py b/src/core/tamper/backticks.py
@@ -28,7 +28,7 @@
 def tamper(payload):
   settings.TAMPER_SCRIPTS[__tamper__] = True
   settings.USE_BACKTICKS = True
-  payload = payload.replace("$((", "`expr ").replace("))", "`")
+  payload = payload.replace("$((", "`expr" + settings.WHITESPACES[0]).replace("))", "`")
   return payload
 
 # eof
diff --git a/src/utils/settings.py b/src/utils/settings.py
@@ -262,7 +262,7 @@ def sys_argv_errors():
 DESCRIPTION = "The command injection exploiter"
 AUTHOR  = "Anastasios Stasinopoulos"
 VERSION_NUM = "4.0"
-REVISION = "114"
+REVISION = "115"
 STABLE_RELEASE = False
 VERSION = "v"
 if STABLE_RELEASE: