byt3bl33d3r / CrackMapExec

A swiss army knife for pentesting networks
BSD 2-Clause "Simplified" License
8.38k stars 1.64k forks source link

'version too low' SSL error with empire_exec #212

Closed tratteur closed 6 years ago

tratteur commented 6 years ago

Seeing similar issues to the problems with DeathStar and Empire on recent Kali. Empire is started with the REST api and defaults, all running fine.

CME is the 'stable' version included in Kali (3.1.5)

crackmapexec smb 1.2.3.4 -u bob -p 'Password!' -d DOMAIN -M empire_exec -o LISTENER=DeathStar
EMPIRE_EXEC                                    [-] Unable to connect to Empire's RESTful API: HTTPSConnectionPool(host='127.0.0.1', port=1337): Max retries exceeded with url: /api/admin/login (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_hello', 'version too low')],)",),))
tratteur commented 6 years ago

Just double-checked, this issue also affects 4.0.0dev - 'Sercurty' / current git.

swarleysez commented 6 years ago

Any update to this? I'm getting the same issue running stable CME (3.1.5) and Empire 2.2

network23 commented 6 years ago

Same issue on Kali with the 4.0.0dev version and Empire version 2.2. It has something to do with SSL version?

n8tr0n commented 6 years ago

I just tried with a fresh install of Debian 9. Everything works. Took a few extra steps to get the crypto libraries installed.

n8tr0n commented 6 years ago

That was with Deathstar.

dinvisible1 commented 6 years ago

hmmm, so what happens with kali 2.0 2017? cause both dont work

AdrianVollmer commented 6 years ago

May be related to this: https://bugs.python.org/issue31453

byt3bl33d3r commented 6 years ago

Just FYI this was a bug with Empire not CME. I submitted a PR to Empire (https://github.com/EmpireProject/Empire/pull/744) which addresses this issue and was merged recently. If you're still seeing the error you probably need to update Empire.