sliver
sliver copied to clipboard
c2-http mux bug
Describe the bug A clear and concise description of what the bug is. "github.com/gorilla/mux"
To Reproduce Steps to reproduce the behavior:
The default parameter mux has certain records that cannot be matched to the request uri.
Expected behavior A clear and concise description of what you expected to happen.
Screenshots If applicable, add screenshots to help explain your problem. http.go:511] [404] No match for /oauth2callback/oauth/db/admin.html?as=48627949&o=1320740
Desktop (please complete the following information):
- OS: Linux
- Version v1.5.9
Additional context Add any other context about the problem here.
In special cases, the match will fail. Want to change to a more capable http service.
Could be the OTP value not matching, you can check by using --disable-otp
when starting the handler. The implant will try to reconcile the key exchange by using the server's time in the response header but this doesn't always work.