Mythic icon indicating copy to clipboard operation
Mythic copied to clipboard

Update agent response handling to deserialize multiple responses independently

Open DannyBoyk opened this issue 1 month ago • 0 comments

The current version of Medusa has a bug in the ps command when running on Linux that returns PIDs as strings instead of ints. This causes its response to not deserialize correctly in the Mythic server code and all responses would be thrown away, even if some of them were good. This is bad because agents will typically resend responses until acknowledged and this one bad response will prevent any future responses from being handled.

The logic was updated to parse and handle responses independently so that: they can all be acknowledge back to the agent even if an error occurs with some of the responses; successful responses are handled correctly; the status of any command is updated to error if the response cannot be parsed so the operator gets that feedback.

Fixes #492

DannyBoyk avatar Nov 05 '25 19:11 DannyBoyk