mythicagents / apfell Goto Github PK

Getting below error while using prompt from Apfell payload.
prompt {"answer":"","icon":"/System/Library/CoreServices/Software Update.app/Contents/Resources/SoftwareUpdate.icns","text":"An application needs permission to update","title":"Application Needs to Update"}
Error: Can't convert types.

Ran into an interesting problem. If an apfell payload is generated without specifying proxy information, and the apfell payload is run on say a corporate machine that requires proxy authentication, apfell will not be able to talk out. This sounds obvious. But it WILL work if you comment out the lines containing:
session_config.connectionProxyDictionary = $(this.proxy_dict);

Its like the NSURLSession object is still attempting to use the proxy_dict object, even though its empty. Commenting out the lines appears to allow the apfell JXA to reference the system proxy settings and egress successfully.

The issue here is that during an operation, there would be no way to know the proxy info ahead of time, so requiring the hardcoding of this information in order for apfell to function isn't ideal. Maybe add some logic to check if the proxy_dict object is empty, and if so, it skips the connectionProxyDictionary call? Thanks in advance.

OS: Big Sur
System Version: macOS 11.6.6 (20G624)
Kernel Version: Darwin 20.6.0
Model Name: MacBook Pro
Model Identifier: MacBookPro15,1
Mythic version: v2.3.9

• Mythic version: v2.3.13
• file: https://github.com/D00MFist/PersistentJXA/blob/master/AtomPersist.js
• error info

   jsimport {"file":"Authentication failed"}
  

Upon upgrading to v2.3.7 of Mythic and the latest apfell, the clipboard command no longer works.

help clipboard shows

Usage Help: clipboard [data]

Description: Get all the types of contents on the clipboard, return specific types, or set the contents of the clipboard. Root has no clipboard!
Command Attributes: {
  "spawn_and_injectable": false,
  "supported_os": [],
  "builtin": false,
  "suggested_command": false,
  "load_only": false,
  "filter_by_build_parameter": {}
}

Parameter Group: "read"
  Name: Clipboard-Types
    Description: Types of clipboard data to retrieve, defaults to public.utf8-plain-text
    Type: Array
    Default Value: ["public.utf8-plain-text"]
    Required: False

Parameter Group: "write"
  Name: data
    Description: Data to put on the clipboard
    Type: String
    Default Value: 
    Required: False

and trying to run clipboard read does not work. Not does doing clipboard read public.utf8-plain-text which should be the default value.

clipboard read

TypeError: undefined is not an object (evaluating 'parsed_params['types'].length')

I cannot get it to work with any Value, including the default. I get the same TYpeError.