search

bats3c / shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments
https://blog.dylan.codes/shad0w/
MIT License
2.03k stars 323 forks source link

Command line option doesn't work #29

Closed b4b857f6ee closed 4 years ago

b4b857f6ee commented 4 years ago

Hello,

Looks like the cli with option didn't work (some exemple) :

image

image

bats3c commented 4 years ago

migrate -p 2280 will work, can use that as a work around.

elevate -s is a feature to be implemented in the future

bats3c commented 4 years ago

migrate -p 2280 will work, can use that as a work around.

Just tested and this does not work as a fix. Going to work on a patch.

bblenard commented 4 years ago

If it helps it worked for me just fine

shad0w(rto@RTO-WIN10) ≫ migrate --pid 5932                                                                                                                                                                                                    

shad0w(rto@RTO-WIN10) ≫                                                                                                                                                                                                                       
[i] Beacon (7c90826677546a685ea85f250672174d) received task                                                                                                                                                                                   
[DEBUG] HTTP - '/register' was hit, attempting to register                                                                                                                                                                                    
[i] Tasked beacon to die                                                                                                                                                                                                                      
[+] Successfully migrated (7288)                                                                                                                                                                                                              
[i] Tasked beacon to die                                                                                                                                                                                                                      
[+] Successfully migrated (5932)                                                                                                                                                                                                              
[i] Beacon (7c90826677546a685ea85f250672174d) received task                                                                                                                                                                                   
shad0w(rto@RTO-WIN10) ≫                                                                                                                                                                                                                       
shad0w(rto@RTO-WIN10) ≫ beacons                                                                                                                                                                                                               
[i] 3 active beacons                                                                                                                                                                                                                          

+--------+---------------+----------------------------+                                                                                                                                                                                       
| Number |    Session    |        Last Checkin        |                                                                                                                                                                                       
+--------+---------------+----------------------------+                                                                                                                                                                                       
|   1    | rto@RTO-WIN10 | 2020-09-18 01:18:05.521785 |                                                                                                                                                                                       
|   2    | rto@RTO-WIN10 | 2020-09-18 01:22:35.392923 |                                                                                                                                                                                       
|   3    | rto@RTO-WIN10 | 2020-09-18 01:22:43.251760 |                                                                                                                                                                                       
+--------+---------------+----------------------------+
b4b857f6ee commented 4 years ago

I will test it later, there is so much difference between my test and the beta version .

bats3c commented 4 years ago

I've just retested and it's worked. I must have been using an old build or sumthin by accident.