Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

getting the program to work #3

Open
xeberos opened this issue Nov 15, 2021 · 5 comments
Open

getting the program to work #3

xeberos opened this issue Nov 15, 2021 · 5 comments

Comments

@xeberos
Copy link

xeberos commented Nov 15, 2021

thank you for presenting this program,

I tried to use on a Linux machine to connect to windows 10
and i got the following:
Screenshot_1
I am unsure about the msrpc folder:
midl /app_config lateral.idl

cl /c lateral_s.c

cl /c lateral.c

link /out:lateral.exe lateral.c lateral_s.c
it is not so clear.

and call.py gave me:
Screenshot_2

can you please instruct on how to get the program to work

@s0i37
Copy link
Owner

s0i37 commented Nov 15, 2021

Hello.
In first picture you have wrong username/password. Make sure also that you specified domain right. For example:
./msrpcproxy.py "shell -dom corp.local -user admin -pass passw0rd 10.10.10.10" (domain machine)
./msrpcproxy.py "shell -dom . -user admin -pass passw0rd 10.10.10.10" (local machine)
or interactive mode

./msrpcproxy.py
shell -dom . -user admin -pass passw0rd 10.10.10.10

Be careful, if you use wrong creds you will have 3 wrong attempts at once (a little disadvantage of msrpcproxy).

In second picture you dont need to call call.py. It is internal testing script. You just need msrpcproxy.py and lateral.exe.

@xeberos
Copy link
Author

xeberos commented Nov 15, 2021

Thank you for your reply,

I tried as instructed
Screenshot_4

It makes a connection:
Screenshot_3

And also a service:
Screenshot_6

Screenshot_7

However still no luck.
I also tried with windows firewall and defender/antivirus disabled.
the windows machine is Windows 10 Pro

Maybe i am missing something?

@s0i37
Copy link
Owner

s0i37 commented Nov 16, 2021

Service was created but not started.
It looks like lateral.exe was removed by antivirus.
Please check that c:\windows\lateral.exe exists.

@xeberos
Copy link
Author

xeberos commented Nov 17, 2021

Finally it is working.

lateral.exe is there after using built in Administrator account credentials,disabling antivirus AND using "clear" command to reinstall msrpcproxy.py.

also this occured:
reg4t43f

so changed to socks5 in proxychains.conf.

just a note,this occurs sometimes when typing commands:
sdf3455g

otherwise, very useful program : )

@s0i37
Copy link
Owner

s0i37 commented Nov 22, 2021

Good.
Yes you need socks5 for using msrpcproxy.
About NetBIOSTimeout sometimes it happens.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants