Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Venom Openssl listener session resume persistence #46

Open
alviseelvis opened this issue Mar 15, 2020 · 3 comments
Open

Venom Openssl listener session resume persistence #46

alviseelvis opened this issue Mar 15, 2020 · 3 comments

Comments

@alviseelvis
Copy link

alviseelvis commented Mar 15, 2020

problem
Dear,
i'm using, for a penetartion test, the venom openssl (option 8 and then 2 on venom) in persistence mode.
It's working perfectly but i don't know how i can resume the session (handler).
Also i have a problem on target with ftp cmd command, when i run it he go on "freeze" without possible to exit and return on norml cmd command.
Any idea for how i cn resolve it without closing the session?
thank you.
Best regards.

@r00t-3xp10it
Copy link
Owner

r00t-3xp10it commented Mar 16, 2020

Persistence explained ..

1º venom openssl agent builds 2 SSL certificates in 'venom-main/output/'

[ key.pem ]   AND   [ cert.pem ]

2º - Venom openssl 'persistence module' writes a batch script into target 'startup folder'

%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\KB4524147_$random_name.update.bat

3º - Attacker needs to Restart target machine and start the OpenSSL handler

cd venom/output
openssl s_server -quiet -key key.pem -cert cert.pem -port $lport



Now about 'FTP' issue i dont know whats wrong ..

@alviseelvis
Copy link
Author

alviseelvis commented Mar 16, 2020 via email

@r00t-3xp10it
Copy link
Owner

venom v1.0.17.7 release update auto store persistence settings into a ZIP file ..

zip handler files

  • handler_ID:<$Id>.zip
  • handler.sh <-- Handler script with all persistence settings stored
  • README.txt <-- Instructions how to use handler.sh script
  • cert.pem <-- OpenSSL certificate
  • key.pem <-- OpenSSL certificate

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants