lateral icon indicating copy to clipboard operation
lateral copied to clipboard

getting the program to work

Open xeberos opened this issue 4 years ago • 5 comments

thank you for presenting this program,

I tried to use on a Linux machine to connect to windows 10 and i got the following: Screenshot_1 I am unsure about the msrpc folder: midl /app_config lateral.idl

cl /c lateral_s.c

cl /c lateral.c

link /out:lateral.exe lateral.c lateral_s.c it is not so clear.

and call.py gave me: Screenshot_2

can you please instruct on how to get the program to work

xeberos avatar Nov 15 '21 00:11 xeberos

Hello. In first picture you have wrong username/password. Make sure also that you specified domain right. For example: ./msrpcproxy.py "shell -dom corp.local -user admin -pass passw0rd 10.10.10.10" (domain machine) ./msrpcproxy.py "shell -dom . -user admin -pass passw0rd 10.10.10.10" (local machine) or interactive mode

./msrpcproxy.py
shell -dom . -user admin -pass passw0rd 10.10.10.10

Be careful, if you use wrong creds you will have 3 wrong attempts at once (a little disadvantage of msrpcproxy).

In second picture you dont need to call call.py. It is internal testing script. You just need msrpcproxy.py and lateral.exe.

s0i37 avatar Nov 15 '21 09:11 s0i37

Thank you for your reply,

I tried as instructed Screenshot_4

It makes a connection: Screenshot_3

And also a service: Screenshot_6

Screenshot_7

However still no luck. I also tried with windows firewall and defender/antivirus disabled. the windows machine is Windows 10 Pro

Maybe i am missing something?

xeberos avatar Nov 15 '21 13:11 xeberos

Service was created but not started. It looks like lateral.exe was removed by antivirus. Please check that c:\windows\lateral.exe exists.

s0i37 avatar Nov 16 '21 13:11 s0i37

Finally it is working.

lateral.exe is there after using built in Administrator account credentials,disabling antivirus AND using "clear" command to reinstall msrpcproxy.py.

also this occured: reg4t43f

so changed to socks5 in proxychains.conf.

just a note,this occurs sometimes when typing commands: sdf3455g

otherwise, very useful program : )

xeberos avatar Nov 17 '21 14:11 xeberos

Good. Yes you need socks5 for using msrpcproxy. About NetBIOSTimeout sometimes it happens.

s0i37 avatar Nov 22 '21 07:11 s0i37