Not working on Nethunter

[mattewfarel]

I am running Nethunter on OnePlus One (bacon) with android Nougat and wine already installed am getting this result :

[] Started reverse TCP handler on 192.168.1.21:4444 [] 192.168.1.23:445 - Generating Eternalblue XML data [] 192.168.1.23:445 - Generating Doublepulsar XML data [] 192.168.1.23:445 - Generating payload DLL for Doublepulsar [] 192.168.1.23:445 - Writing DLL in /root/.wine/drive_c/eternal11.dll [] 192.168.1.23:445 - Launching Eternalblue... err:process:start_wineboot failed to start wineboot, err 1359 err:process:create_process L"Z:\usr\share\metasploit-framework\deps\Eternalblue-2.2.0.exe" not supported on this installation (x86 binary) wine: Bad EXE format for Z:\usr\share\metasploit-framework\deps\Eternalblue-2.2.0.exe. [-] 192.168.1.23:445 - Are you sure it's vulnerable? [] 192.168.1.23:445 - Launching Doublepulsar... err:process:start_wineboot failed to start wineboot, err 1359 err:process:create_process L"Z:\usr\share\metasploit-framework\deps\Doublepulsar-1.3.1.exe" not supported on this installation (x86 binary) wine: Bad EXE format for Z:\usr\share\metasploit-framework\deps\Doublepulsar-1.3.1.exe. [-] 192.168.1.23:445 - Oops, something was wrong! [] Exploit completed, but no session was created.

Can i assume after this that the PoC can not be executed under ARM architecture ?? are there any workarounds for this ?

[croulder]

you must install wine32

[mattewfarel]

root@kali:~# apt-get install wine32 Reading package lists... Done Building dependency tree Reading state information... Done wine32 is already the newest version (1.8.7-2). 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

it's already installed as you can see , but the same problem

[kr0no]

Try to set the WINEARCH environment variable to win32. Maybe it works.

[mattewfarel]

@kr0no i've tried setting WINEPATH to "wine32" , and i've had exactly the same the output mentioned above.

@kr0no one thing to mention here is that the first time i executed the PoC , there was no folder like "/root/.wine/drive_c" as the exploit needs by default in the WINEPATH , so i was obliged to mkdir that folder my self , can this be the source of the problem ?

[mattewfarel]

this is the output of winecfg :

root@kali:~# winecfg --help err:process:start_wineboot failed to start wineboot, err 1359 err:winediag:nulldrv_CreateWindow Application tried to create a window, but no driver could be loaded. err:winediag:nulldrv_CreateWindow The explorer process failed to start.

it's the same error 1359 showing in metasploit.

[boahen55]

Where you able to fix it. Am having the same problem

[ghost]

Same here xc

[CraftyViking]

You cannot run x64/86 instructions on ARM devices. However there's a solution. You could emulate x64/86 instructions and run Wine with ExaGear Desktop, but you will have to pay for it. https://eltechs.com/product/exagear-desktop/