starred/Quasar

Fork 0

mirror of https://github.com/quasar/Quasar.git synced 2026-04-25 15:25:59 +03:00

[GH-ISSUE #748] "powershell" in Remote shell, just got stuck #492

New issue

Closed

opened 2026-02-27 15:50:37 +03:00 by kerem · 10 comments

kerem commented

2026-02-27 15:50:37 +03:00

Owner

Originally created by @CaledoniaProject on GitHub (Jan 14, 2019).
Original GitHub issue: https://github.com/quasar/Quasar/issues/748

Fresh compile from master branch, the remote shell isn't working well.

I typed powershell -ep bypass and it become like this:

And the shell is no longer working, was it expected?

P.S I'm Running both client and server on Windows 8.1.

Originally created by @CaledoniaProject on GitHub (Jan 14, 2019). Original GitHub issue: https://github.com/quasar/Quasar/issues/748 Fresh compile from master branch, the remote shell isn't working well. I typed `powershell -ep bypass` and it become like this: ![screen 2019-01-14 at 12 15 43](https://user-images.githubusercontent.com/1357701/51096291-52cbea80-17f6-11e9-98ae-1c2bba05eab7.jpg) And the shell is no longer working, was it expected? P.S I'm Running both client and server on Windows 8.1.

kerem

2026-02-27 15:50:37 +03:00

closed this issue
added the
bug
label

kerem commented

2026-02-27 15:50:37 +03:00

Author

Owner

@MaxXor commented on GitHub (Jan 14, 2019):

The shell implementation has some problems when other processes are opened inside it. :/

@MaxXor commented on GitHub (Jan 14, 2019): The shell implementation has some problems when other processes are opened inside it. :/

kerem commented

2026-02-27 15:50:38 +03:00

Author

Owner

@MaxXor commented on GitHub (Jan 26, 2019):

Can you confirm it's working with github.com/quasar/QuasarRAT@040f25f4ca? The console shouldn't get stuck anymore.

@MaxXor commented on GitHub (Jan 26, 2019): Can you confirm it's working with https://github.com/quasar/QuasarRAT/commit/040f25f4ca4e5514a1d49d49c9462f55da3ba59a? The console shouldn't get stuck anymore.

kerem commented

2026-02-27 15:50:38 +03:00

Author

Owner

@CaledoniaProject commented on GitHub (Jan 27, 2019):

Not really. Built a release with latest dev branch:

open shell
type whoami
type powershell -- Got weird display like in the screenshot, cp936 issue?
type cmd /c whoami -- No results, shell is broken

@CaledoniaProject commented on GitHub (Jan 27, 2019): Not really. Built a release with latest dev branch: 1. open shell 2. type whoami 3. type powershell -- Got weird display like in the screenshot, cp936 issue? 4. type cmd /c whoami -- No results, shell is broken ![screenshot 2019-01-27 at 1 52 37 pm](https://user-images.githubusercontent.com/1357701/51797261-127b5c00-223b-11e9-89d1-a2e3071309c7.jpg)

kerem commented

2026-02-27 15:50:38 +03:00

Author

Owner

@MaxXor commented on GitHub (Jan 27, 2019):

Could you trying entering some powershell command? For me it looks like this:

@MaxXor commented on GitHub (Jan 27, 2019): Could you trying entering some powershell command? For me it looks like this: ![powershell](https://user-images.githubusercontent.com/7271470/51798704-3a58c880-2217-11e9-9fff-677d202122dc.png)

kerem commented

2026-02-27 15:50:38 +03:00

Author

Owner

@CaledoniaProject commented on GitHub (Jan 27, 2019):

I tried, it just shows a red char "W" and nothing else. No matter what I type, I got no feedback on the screen.

Tried on both English OS and non-english ones, same result. So it's not a code page issue.

@CaledoniaProject commented on GitHub (Jan 27, 2019): I tried, it just shows a red char "W" and nothing else. No matter what I type, I got no feedback on the screen. ![screenshot 2019-01-27 at 10 19 55 pm](https://user-images.githubusercontent.com/1357701/51802136-bab41380-2281-11e9-8d49-8c8fb712777e.jpg) Tried on both English OS and non-english ones, same result. So it's not a code page issue.

kerem commented

2026-02-27 15:50:38 +03:00

Author

Owner

@MaxXor commented on GitHub (Jan 27, 2019):

What Powershell version are you using?

@MaxXor commented on GitHub (Jan 27, 2019): What Powershell version are you using?

kerem commented

2026-02-27 15:50:38 +03:00

Author

Owner

@CaledoniaProject commented on GitHub (Jan 27, 2019):

Complete test results:

Windows 2008 R2 English + PS 2.X failed
Windows 8.1 Chinese + PS 4.X, failed
Windows 2016 English + PS 5.X, works

@CaledoniaProject commented on GitHub (Jan 27, 2019): Complete test results: - [ ] Windows 2008 R2 English + PS 2.X failed - [ ] Windows 8.1 Chinese + PS 4.X, failed - [x] Windows 2016 English + PS 5.X, works

kerem commented

2026-02-27 15:50:38 +03:00

Author

Owner

@MaxXor commented on GitHub (Jan 27, 2019):

Okay thanks a lot for testing! I can confirm it on my Windows 7 machine with PS 2.X. I think it's most likely a problem with the old PS versions. When I test it with ncat for example, which also spawns a new process and redirects input/ouput to the shell, it's working flawlessly.

I don't think it's worth it to add some complicated workaround for older Powershell versions.

@MaxXor commented on GitHub (Jan 27, 2019): Okay thanks a lot for testing! I can confirm it on my Windows 7 machine with PS 2.X. I think it's most likely a problem with the old PS versions. When I test it with [ncat](https://nmap.org/ncat/) for example, which also spawns a new process and redirects input/ouput to the shell, it's working flawlessly. I don't think it's worth it to add some complicated workaround for older Powershell versions.

kerem commented

2026-02-27 15:50:38 +03:00

Author

Owner

@CaledoniaProject commented on GitHub (Jan 27, 2019):

Yeah, metasploit has similar issue on Windows 7.

@CaledoniaProject commented on GitHub (Jan 27, 2019): Yeah, metasploit has similar issue on Windows 7.

kerem commented

2026-02-27 15:50:38 +03:00

Author

Owner

@MaxXor commented on GitHub (Jan 27, 2019):