diff --git a/src/core/tamper/rev.py b/src/core/tamper/rev.py index 55993592e2..b667a40e0d 100644 --- a/src/core/tamper/rev.py +++ b/src/core/tamper/rev.py @@ -32,7 +32,7 @@ def tamper(payload): if settings.EXPLOITATION_PHASE: if settings.USER_APPLIED_CMD in settings.RAW_PAYLOAD: if settings.USE_BACKTICKS: - rev_cmd = "`echo " + settings.USER_APPLIED_CMD[::-1] + "|rev`" + rev_cmd = "\\`echo " + settings.USER_APPLIED_CMD[::-1] + "|rev\\`" else: rev_cmd = "$(echo " + settings.USER_APPLIED_CMD[::-1] + "|rev)" payload = settings.RAW_PAYLOAD.replace(settings.USER_APPLIED_CMD, rev_cmd).replace(settings.SINGLE_WHITESPACE, settings.WHITESPACES[0]) diff --git a/src/utils/settings.py b/src/utils/settings.py index 7c1d8027f9..15daa009a2 100755 --- a/src/utils/settings.py +++ b/src/utils/settings.py @@ -262,7 +262,7 @@ def sys_argv_errors(): DESCRIPTION = "The command injection exploiter" AUTHOR = "Anastasios Stasinopoulos" VERSION_NUM = "4.1" -REVISION = "3" +REVISION = "4" STABLE_RELEASE = False VERSION = "v" if STABLE_RELEASE: