EmpireProject / Empire

Empire is a PowerShell and Python post-exploitation agent.
http://www.powershellempire.com/
BSD 3-Clause "New" or "Revised" License
7.36k stars 2.8k forks source link

Cannot execute Lazagne with invoke_reflectivepeinjection #1360

Open kkar opened 5 years ago

kkar commented 5 years ago

Empire Version

version 2.5

OS Information (Linux flavor, Python version)

Kali linux, Empire's required python version

Expected behavior

Theoretically, lazagne.exe should be uploaded to the agent and executed from memory along with its ExeArgs.

Screenshot of error, embedded text output, or Pastebin link to the error

No data returned, no output file created on the "victim's" computer by setting lazagne's -oN parameter in ExeArgs and does not seem to be running in general. I cannot verify if the injection fails whatsoever. I tried the ForceASLR option as well.

Any ideas on how can we execute lazagne, or any other PE using the invoke_reflectpeinjection module?