Telefonica / Eternalblue-Doublepulsar-Metasploit

Module of Metasploit to exploit the vulnerability Eternalblue-Doublepulsar.
GNU Lesser General Public License v2.1
1.09k stars 520 forks source link

wrong elff class #45

Open eliddell1 opened 7 years ago

eliddell1 commented 7 years ago

I am running kali 2.0 and targeting a windows 8 VM. I have added i386 architecture, as well as wine32.

when i run this module in metasploit i get the following output/error:

`msf exploit(eternalblue_doublepulsar) > run

[] Started reverse TCP handler on 10.0.0.10:4444 [] 10.0.0.20:445 - Generating Eternalblue XML data [] 10.0.0.20:445 - Generating Doublepulsar XML data [] 10.0.0.20:445 - Generating payload DLL for Doublepulsar [] 10.0.0.20:445 - Writing DLL in /root/.wine/drive_c/eternal11.dll [] 10.0.0.20:445 - Launching Eternalblue... ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. [-] Error getting output back from Core; aborting... [-] 10.0.0.20:445 - Are you sure it's vulnerable? [] 10.0.0.20:445 - Launching Doublepulsar... ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/lib/snoopy.so' from /etc/ld.so.preload cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. [-] 10.0.0.20:445 - Oops, something was wrong! [] Exploit completed, but no session was created. msf exploit(eternalblue_doublepulsar) > `

UrielRicardo commented 7 years ago

@eliddell1 Set the path of the "deps" directory that I see along with the exploit. set DOUBLEPULSARPATH (press tab) set ETERNALBLUEPATH (press tab)

eliddell1 commented 7 years ago

What do you mean exactly.. both are already set to /root/Eternalblue-Doublepulsar-Metasploit/deps/