Missing persist in startJob_t function in operations.cpp

[Marco-Johansson]

Hi,

First of all, thank you for making this project available for free — I really appreciate your work.

I downloaded both the server and client files, built them, and started testing. While using the client, I noticed that in the startJob_t function in operations.cpp, there is no persist part.

I wanted to ask: is this because the released version is not the latest, or is this functionality not included at all?

Thanks in advance for your clarification!

[tajiknomi]

The persist method is left intentionally because there are various methods (e.g. Registry run keys, scheduled tasks, and services) for persistence in windows and the impact it has on the security EP/AVs.
You can implement your own method in the operations.cpp or maybe you don't need to because there is a command-line option already available and you can do the persistence using the command-line / execution capability.

[Marco-Johansson]

Yes, that’s correct — but I think it would be better to include a persist method, even if it can be detected.

Also, I noticed another issue: downloading a file from the target PC does not seem to work correctly, even when using the release build.

[tajiknomi]

Have you setup the http server ? I had posted the php script which will handle files on your server.

[tajiknomi]

@Marco-Johansson : The latest release for windows has built-in portable-apache, so you don't need to setup your own apache server for upload/download capability. Kindly view the Quick Start section for windows