BishopFox / sliver

Adversary Emulation Framework
GNU General Public License v3.0
8.21k stars 1.08k forks source link

Named pipe stager error #1594

Open prol000 opened 6 months ago

prol000 commented 6 months ago

Describe the bug There's an error when trying to setup a stager listener having a named pipe pivot. If I understand correctly, this should generate a payload which when executed will allow a beacon to communicate back to the sliver server via a named pipe. Given the RPC error retrieved, I'm having second thoughts. Please correct me if I'm wrong.

To Reproduce Steps to reproduce the behavior (ip addresses are redacted:

  1. get a session over a beacon and run a named pipe pivot: pivots named-pipe --bind foobar --allow-all
  2. get the ip address and create a new profile with a named pipe: profiles new beacon --wg REDACTED-SLIVER-SERVER-IP:443 --format shellcode --named-pipe REDACTED-BEACON-IP/pipe/foobar shellcode-wg-np
  3. start a stage listener over tcp: stage-listener -u tcp://REDACTED-SLIVER-SERVER-IP:8081 -p shellcode-wg-np [*] No builds found for profile shellcode-wg-np, generating a new one [!] Error generating implant [!] rpc error: code = Unknown desc = exit status 1

Expected behavior Create a stage listener which serves a payload that can connect back to the sliver server via a named-pipe

Desktop (please complete the following information):

rkervella commented 5 months ago

Can you check$HOME/.sliver/logs/sliver.log for a more verbose error message?