Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Stagers cannot connect back to http listeners over ssl #462

Open
captain-woof opened this issue Jul 18, 2021 · 1 comment
Open

[BUG] Stagers cannot connect back to http listeners over ssl #462

captain-woof opened this issue Jul 18, 2021 · 1 comment
Labels
bug Something isn't working

Comments

@captain-woof
Copy link

captain-woof commented Jul 18, 2021

Note: Please fill out all sections (if applicable) and do not delete the below section headers, otherwise the bot will close the issue.

Empire Version

  • Empire 4.0.0+gitsubmodule-0kali2

OS Information (Linux flavor, Python version)

  • OS: Kali
  • Python: 3.9

Describe the bug

Creating an http listener with ssl enabled, generating a stager to callback to that listener, and then executing that stager on the target does not create a connection at all. I tested this in a non-AV environment, Windows 10.

To Reproduce

Steps to reproduce the behavior:

  1. uselistener http
  2. set SSL True
  3. set CertPath path-to-dir
  4. set Host host
  5. set Port port
  6. execute
  7. usestager windows/hta (or csharp_exe, it doesn't matter which one)
  8. set Listener http (Didn't change the name for this test)
  9. execute

Then on target machine,
mshta https://my-host:port/payload.hta

Expected behavior

A prompt asking user whether to trust the certificate, and creating a connection back when clicked on 'Yes'.

Screenshots

If needed, please ask.

Additional context

None.

@captain-woof captain-woof added the bug Something isn't working label Jul 18, 2021
@janit0rjoe
Copy link

Have you tried adding the private cert to the targets windows cert storage?
In a testing environment you can always do this. During an assesment you would of course use valid certs.

vinnybod pushed a commit that referenced this issue Nov 11, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants