jm33-m0 / emp3r0r

Linux/Windows post-exploitation framework made by linux user
https://infosec.exchange/@jm33
MIT License
1.24k stars 235 forks source link

run_proxy Connection always corrupted #264

Closed luckseal closed 9 months ago

luckseal commented 9 months ago

Describe the bug

use run_proxy module

Connection always corrupted

To Reproduce

Steps to reproduce the behavior:

emm3r0r - 192.168.1.241 target-1 - 192.168.1.61 192.168.2.102 target-2 - 192.168.2.101

use target-1 run_proxy , connect to the proxy and ssh to 192.168.2.101

xxx@MacBook-Pro-5 ~ % proxychains4 ssh root@192.168.2.101
[proxychains] config file found: /usr/local/etc/proxychains.conf
[proxychains] preloading /usr/local/lib/libproxychains4.dylib
[proxychains] DLL init: proxychains-ng 4.16
[proxychains] Strict chain  ...  192.168.1.241:6666  ...  192.168.2.101:22  ...  OK
root@192.168.2.101's password:
Last login: Sun Oct  8 05:26:40 2023 from 192.168.2.102
[root@localhost ~]# pwd
/root
[root@localhost ~]# whBad packet length 1726738805.
ssh_dispatch_run_fatal: Connection to 192.168.1.241 port 6666: Connection corrupted

C2 Transport

Agent

OS

CPU architecture

jm33-m0 commented 9 months ago

For this scenario I suggest use port_fwd for now as it's more reliable. I will start working on the proxy soon.