Closed rasta-mouse closed 5 years ago
It's not apparent from that message, but the agent creating the TCP redirection needs to be running in an elevated context. (*
in front of the username in the agents list)
Holy $h1t. Thanks @mr64bit, that solved it.
[*] Active agents:
Name La Internal IP Machine Name Username Process PID Delay Last Seen Listener
---- -- ----------- ------------ -------- ------- --- ----- --------- ----------------
TL18RZP9 ps 172.16.68.199 DESKTOP-0RQFMCJ *DESKTOP-0RQFMCJ\RastaM powershell 5596 5/0.0 2019-01-06 09:23:59 http
(Empire: listeners/redirector) > execute
[*] Starting listener 'TL18RZP9'
[*] Tasked TL18RZP9 to run TASK_SHELL
[*] Agent TL18RZP9 tasked with task ID 1
[+] Listener successfully started!
[*] Active listeners:
Name Module Host Delay/Jitter KillDate
---- ------ ---- ------------ --------
TL18RZP9 redirector http://172.16.68.199:4444 5/0.0
http http http://172.16.68.204:443 5/0.0
Empire Version
3.0-Beta
OS Information (Linux flavor, Python version)
Kali GNU/Linux Rolling 2019.1
Python 2.7.15+
Expected behavior and description of the error, including any actions taken immediately prior to the error. The more detail the better.
I have an active
http
listener, simply namedhttp
and an agent checking in on that listener. Its name isLMT85GKE
and has an internal IP172.16.68.199
.In the
redirector
options, I set:Listener
tohttp
-> the name of my existing listenerinternalIP
to172.16.68.199
-> internal IP of the current agentName
toLMT85GKE
-> the name of my current agentListenPort
to4444
-> just something randomWhen I
execute
the listener, I get the following:Screenshot of error, embedded text output, or Pastebin link to the error
Any guidance would be appreciated.