search

byt3bl33d3r / DeathStar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.
GNU General Public License v3.0
1.58k stars 329 forks source link

Host #21

Closed barrett092 closed 7 years ago

barrett092 commented 7 years ago

Any reason why my host in Empire won't change to the Local IP address? Instead it just stays at 127.0.0.1

barrett092 commented 7 years ago

When you launch the DeathStar listener that is..

InfiniteSuns commented 7 years ago

Same problem here, I've figured out a bypass, which works for me:

  1. Run Empire with REST API, don't run DeathStar yet;
  2. Configure and run regular Empire http listener with "Host" and "Port" set to your local IP and 8443;
  3. Kill this http listener and start DeathStar, now it'll bind to your local IP, not 127.0.1.1.
barrett092 commented 7 years ago

Thanks for the workaround!

byt3bl33d3r commented 7 years ago

@barrett092 @InfiniteSuns That usually happens when Empire fails to detect your interface. You can use any listener with DeathStar (not just the one it creates), it only creates it on runtime for convinience sake.

TL;DR Killing the listener, setting the correct IP and restarting it again will fix it.