Havoc icon indicating copy to clipboard operation
Havoc copied to clipboard

The following error occurs after listening

Open 0x7e-1sq opened this issue 2 years ago • 19 comments

qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 4959, resource id: 11165776, major code: 40 (TranslateCoords), minor code: 0

help me thanks..

0x7e-1sq avatar Oct 09 '22 12:10 0x7e-1sq

And I was unable to connect to a Havoc server through the EXE that Havoc generated

0x7e-1sq avatar Oct 09 '22 12:10 0x7e-1sq

can you provide more information? Like screenshots? Thanks for reporting

Cracked5pider avatar Oct 09 '22 13:10 Cracked5pider

image

0x7e-1sq avatar Oct 09 '22 13:10 0x7e-1sq

This is not a listener error. this is simply an XCB log. Does this crashes the client tho? Or what is your issue ?

Cracked5pider avatar Oct 09 '22 13:10 Cracked5pider

Will this error affect my use of Havoc? Because I found that no one else has this error, and there was no feedback from the Havoc server after I ran the EXE generated by Havoc.

0x7e-1sq avatar Oct 09 '22 13:10 0x7e-1sq

This won't affect the use of Havoc. Did your client crash? Did something else unexpected happen? What version are you on (please provide the commit hash you are on)

Cracked5pider avatar Oct 09 '22 13:10 Cracked5pider

No, everything is fine with my client, BUT there is no feedback from the server after the generated EXE runs. It has been bothering me for a day. I tried to generate exe dll shellcode, but the server did not get any feedback. image Havoc is latest

My feedback here is that I can't listen to any conversations image

0x7e-1sq avatar Oct 09 '22 13:10 0x7e-1sq

What version are you on? can you type git show -s in the Havoc directory? And send me a screenshot.

Cracked5pider avatar Oct 09 '22 13:10 Cracked5pider

image

commit 2ef6cf86b8cf85a8ce031846c2e7d57a020a551a (HEAD -> main, origin/main, origin/HEAD) Merge: 7052442 c5d66e9 Author: C5pider [email protected] Date: Sun Oct 9 00:57:44 2022 +0200

Merge pull request #149 from HavocFramework/dev

marget dev branch into main

0x7e-1sq avatar Oct 09 '22 13:10 0x7e-1sq

Alright can you share with me the running listeners and how you generate a paylaod?

Cracked5pider avatar Oct 09 '22 13:10 Cracked5pider

image image image image image image

That's how I do it I don't think headers and uris are necessary? I also tried to fill in these two options according to github before, but still failed.

0x7e-1sq avatar Oct 09 '22 14:10 0x7e-1sq

The uris are not necessary (if not specified the / is going to be used as the default)but I think it has something to do with the fact that your system is Chinese. There is currently no real support for Unicode environments. But can you restart the teamserver with the flag --debug-dev and recompile the agent and share with me the Debug prints that the agent gives away? Thanks that would help me a lot to support Unicode hosts.

Cracked5pider avatar Oct 09 '22 14:10 Cracked5pider

Do you mean that I need to recompile teamserver?

What do I need to do?

Add parameters when compiling

Again, add parameters at boot time

0x7e-1sq avatar Oct 09 '22 14:10 0x7e-1sq

start the teamserver with the following flag --debug-dev. This flag tells the teamserver to compile all agents in debug mode. which allows me to detect bugs/errors and other issues. For example: ./teamserver server --profile profiles/havoc.yaotl -v --debug-dev After you did this you can recompile the agent in the payload generator. After running it you will get a console log with debug messages. Can you share then the entire debug log with me ? thx.

Cracked5pider avatar Oct 09 '22 14:10 Cracked5pider

image

All I found was this log image

image

0x7e-1sq avatar Oct 09 '22 14:10 0x7e-1sq

No what i have meant is that you should regenerate a payload and execute it. The demon payload is going to show a console with debug prints.

Cracked5pider avatar Oct 09 '22 14:10 Cracked5pider

image image And then you just keep repeating falied 122 Is that right?

0x7e-1sq avatar Oct 09 '22 14:10 0x7e-1sq

Alright, perfect thx. Going to investigate this issue.

Cracked5pider avatar Oct 09 '22 14:10 Cracked5pider

Thank you for looking forward to your masterpiece

0x7e-1sq avatar Oct 09 '22 14:10 0x7e-1sq