Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Impossible to start https listener any other way than simple "https" command #1865

Open
kr3tu opened this issue Jan 26, 2025 · 0 comments
Open

Comments

@kr3tu
Copy link

kr3tu commented Jan 26, 2025

Hello!
Apologies if my question is dumb, I am new to all these.

I am trying to follow this article:
https://medium.com/@youcef.s.kelouaz/writing-a-sliver-c2-powershell-stager-with-shellcode-compression-and-aes-encryption-9725c0201ea8

Steps to reproduce the behavior:
0. I created pem and crt files following:
https://www.darkoperator.com/blog/2015/6/14/tip-meterpreter-ssl-certificate-validation

  1. I first created a profile:
    sliver > profiles new -b https://3.79.14.3:443 --skip-symbols --format shellcode --arch amd64 local
    It worked well.

  2. Then I tried to start https listener at port 443:
    sliver > https -L 3.79.14.3 -l 443 -c /home/ubuntu/crt.crt -k /home/ubuntu/key.key
    Unfortunately I am getting an error - PFA.

  3. FYI - I was able to start stage listener without any problems though:
    sliver > stage-listener --url https://3.79.14.3:8080 --profile local -c /home/ubuntu/crt.crt -k /home/ubuntu/key.key -C deflate9 --aes-encrypt-key D(G+KbPeShVmYq3t6v9y$B&E)H@McQfT --aes-encrypt-iv 8y/B?E(G+KbPeShV

I don't have anything else listening on 443. Actually if I choose any other port like 4443, it is the same error. If I try to run this without crt and key for a test, it is still the same error. The only was "https" command works is when I run it without any additional switches and values...

Please kindly help.

Image Image

Desktop (please complete the following information):

  • OS: Ubuntu hosted on EC2
  • Ubuntu 24.04.1 LTS with the most recent Sliver running
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant