Merge branch 'master' into fix-1444

BishopFox · Nov 3, 2023 · 4da9233 · 4da9233
2 parents c1d1bf7 + 16db603
commit 4da9233
Showing 1 changed file with 9 additions and 7 deletions.
diff --git a/implant/sliver/transports/httpclient/httpclient.go b/implant/sliver/transports/httpclient/httpclient.go
@@ -648,13 +648,15 @@ func (s *SliverHTTPClient) closeURL() *url.URL {
 // Must return at least a file name, path segments are optional
 func (s *SliverHTTPClient) randomPath(segments []string, filenames []string, ext string) []string {
 	genSegments := []string{}
-	if 0 < len(segments) {
-		n := insecureRand.Intn(len(segments)) // How many segments?
-		for index := 0; index < n; index++ {
-			seg := segments[insecureRand.Intn(len(segments))]
-			genSegments = append(genSegments, seg)
-		}
-	}
+        if 0 < len(segments) {
+                min, _ := strconv.Atoi("{{.HTTPC2ImplantConfig.MinPaths}}")
+                max, _ := strconv.Atoi("{{.HTTPC2ImplantConfig.MaxPaths}}")
+                n := insecureRand.Intn(max-min+1) + min // How many segments?
+                for index := 0; index < n; index++ {
+                        seg := segments[insecureRand.Intn(len(segments))]
+                        genSegments = append(genSegments, seg)
+                }
+        }
 	filename := filenames[insecureRand.Intn(len(filenames))]
 
 	// {{if .Config.Debug}}