Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pivots and server invalid signature and decryption failed #1861

Open
manesec opened this issue Jan 22, 2025 · 0 comments
Open

pivots and server invalid signature and decryption failed #1861

manesec opened this issue Jan 22, 2025 · 0 comments

Comments

@manesec
Copy link

manesec commented Jan 22, 2025

Describe the bug
pivots and server invalid signature and decryption failed.

To Reproduce
Steps to reproduce the behavior:

  1. git clone https://github.com/BishopFox/sliver.git and make
  2. generate -m 192.168.19.135:443 -o windows -s payload.exe -j 10 -d
  3. mtls -l 443
  4. pivots tcp --bind 0.0.0.0 -l 9999
  5. generate -i 192.168.19.136:9999 -o windows -s pivots.exe -j 10 -d

Video: https://youtu.be/GKJmCkOCN-w

Error Logs

payload.exe

2025/01/22 18:13:45 sliver.go:90: Hello my name is PRESIDENTIAL_PLUNGER
2025/01/22 18:13:45 limits.go:58: Limit checks completed
2025/01/22 18:13:45 sliver.go:108: Running in session mode
2025/01/22 18:13:45 session.go:69: Starting interactive session connection loop ...
2025/01/22 18:13:45 transports.go:41: Starting c2 url generator () ...
2025/01/22 18:13:45 transports.go:104: Return generator: (chan *url.URL)(0xc00006a720)
2025/01/22 18:13:45 transports.go:92: Yield c2 uri = 'mtls://192.168.19.135:443'
2025/01/22 18:13:45 transports.go:92: Yield c2 uri = 'mtls://192.168.19.135:443'
2025/01/22 18:13:45 session.go:86: Next CC = mtls://192.168.19.135:443
2025/01/22 18:13:45 session.go:86: Next CC = mtls://192.168.19.135:443
2025/01/22 18:13:45 session.go:176: Connecting -> 192.168.19.135:443
2025/01/22 18:13:45 transports.go:92: Yield c2 uri = 'mtls://192.168.19.135:443'
2025/01/22 18:13:45 uuid_windows.go:48: Registry host uuid value too short
2025/01/22 18:13:45 sliver.go:288: Host Uuid: 69f94d56-fc47-8ad9-5094-7452a9038e6f
2025/01/22 18:13:45 tun.go:53: [tunnel] Tunnel handlers map[20:0x8aaec0 22:0x8a8680 23:0x8a7880 80:0x8a92e0 82:0x8acba0 125:0x8aeb00]
2025/01/22 18:14:11 sliver.go:182: [recv] pivotHandler with type 50
2025/01/22 18:14:11 tcp.go:41: Starting TCP pivot listener on 0.0.0.0:9999
2025/01/22 18:14:11 pivots.go:90: [pivot] my peer id: 9022447462198621400
2025/01/22 18:14:11 pivots.go:91: [pivot] adding listener: 0.0.0.0:9999
2025/01/22 18:14:14 implant.go:99: minisign signature validation: true
2025/01/22 18:14:14 implant.go:99: minisign signature validation: true
2025/01/22 18:14:14 pivots.go:315: [pivot] peer key exchange completed successfully with peer 242343157157768198
2025/01/22 18:14:14 crypto.go:203: invalid signature on ciphertext
2025/01/22 18:14:14 pivots.go:550: [pivot] Decryption error: decryption failed

pivots.exe

2025/01/22 18:14:14 sliver.go:90: Hello my name is COOPERATIVE_CHEMICAL
2025/01/22 18:14:14 limits.go:58: Limit checks completed
2025/01/22 18:14:14 sliver.go:108: Running in session mode
2025/01/22 18:14:14 session.go:66: Starting interactive session connection loop ...
2025/01/22 18:14:14 transports.go:41: Starting c2 url generator () ...
2025/01/22 18:14:14 transports.go:104: Return generator: (chan *url.URL)(0xc00006a720)
2025/01/22 18:14:14 transports.go:92: Yield c2 uri = 'tcppivot://192.168.19.136:9999'
2025/01/22 18:14:14 transports.go:92: Yield c2 uri = 'tcppivot://192.168.19.136:9999'
2025/01/22 18:14:14 session.go:83: Next CC = tcppivot://192.168.19.136:9999
2025/01/22 18:14:14 session.go:83: Next CC = tcppivot://192.168.19.136:9999
2025/01/22 18:14:14 session.go:177: Attempting to connect via TCP Pivot to 192.168.19.136:9999
2025/01/22 18:14:14 transports.go:92: Yield c2 uri = 'tcppivot://192.168.19.136:9999'
2025/01/22 18:14:14 implant.go:99: minisign signature validation: true
2025/01/22 18:14:14 pivotclient.go:62: [pivot] Peer key exchange successful
2025/01/22 18:14:14 pivotclient.go:143: [pivot] my peer id: 242343157157768198
2025/01/22 18:14:14 pivotclient.go:144: [pivot] Sending server key exchange ...
2025/01/22 18:14:14 pivotclient.go:154: [pivot] Waiting for server key exchange response (5m) ...
2025/01/22 18:14:14 pivotclient.go:237: [pivot] Error (read msg-length): EOF
2025/01/22 18:14:14 pivotclient.go:328: [pivot] Error reading message: EOF
2025/01/22 18:14:14 sliver.go:151: [session] failed to establish connection: EOF
2025/01/22 18:14:14 sliver.go:131: Reconnect sleep: 10s

Expected behavior
pivots can work.

Screenshots

Image

Image

Desktop (please complete the following information):

  • New of Kali linux.
  • Microsoft Windows 10 Enterprise.
  • Sliver server: v1.5.39 - 31c7093
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant