search

RedSiege / GraphStrike

Cobalt Strike HTTPS beaconing over Microsoft Graph API
546 stars 82 forks source link

No connect back #1

Closed raghavmishra closed 8 months ago

raghavmishra commented 8 months ago

Hi, I am trying get it working. I have generated raw shellcode using CS and converted that to exe. When I execute the binary I don't see a connect back and there is no beaconing activity shown on graphStrike server. In README, you have written that GraphStirke/client directory should be copied to CS client after provisioning. Can you please tell where to copy on client, if that's the issue with my setup?

raghavmishra commented 8 months ago

Resolved it.

Thirukrishnan commented 8 months ago

Hi Raghav! May I know how were you able to resolve it and where should I copy the contents of client directory after provisioning?

raghavmishra commented 8 months ago

@Thirukrishnan You can copy it anywhere.

Thirukrishnan commented 8 months ago

Thank you for the response Raghav! But still I am not getting callback for some reason! Will it be possible for you to explain the steps after setting up the server?

raghavmishra commented 8 months ago

I followed the steps exactly what mentioned in README. I have generated RAW shellcode and converted that to binary and dropped to the victim. @Thirukrishnan One QQ, did you setup the tenant with M65 license assigned?

Thirukrishnan commented 8 months ago

Yes I have setup the tenant with M65 license and may I know what tool you used for converting bin to exe file?I tried few but nothing seems to work and I couldn't find where is it not working too!!

raghavmishra commented 8 months ago

@Thirukrishnan https://github.com/repnz/shellcode2exe Sorry for the late response.