Forum Thread: Stuck on Sending Stage (METASPLOIT)

Hello,

i had managed to backdoor a payload with another .exe template using Veil evasion with the backdoor factory method.

Now however when i execute the payload in my virtual machine, the exploit would suck on sending stage for ages with no meterpreter session popping up.

the payload is embedded in the spider.exe file, and i had closed the application after losing any hope of getting a meterpreter session ( i've waited for 10 mins ). and even had tried to embed the payload with another .exe template but nothing is working.

How can i fix this?

Thanks

3 Responses

now i know that the payload that i've used is incompatible with my exploit. but still another issue surface up now, whenever i try to choose metertcp or even meterpreterhttps, this is what i keep getting :-

* In the backdoor module
* Checking if binary is supported
* Gathering file info
* Reading win32 entry instructions
The following WinIntelPE32s are available: (use -s)
caveminerinline
iatreversetcpinline
iat
reversetcpinlinethreaded
iat
reversetcpstagerthreaded
iat
usersuppliedshellcodethreaded
meterpreter
reversehttpsthreaded
reverseshelltcpinline
reverse
tcpstagerthreaded
usersuppliedshellcodethreaded

is it maybe possible to add the meterpreter/reversetcp to this dictionary? and if yes, what is the exact path to it.

and so to avoid confusion i've used the native/backdoorfactory, and from there i've tried to choose the metertcp, even tried to put another payload paths, ex. windows/meterpreter/reversetcp , cs/meterpreter/revtcp , c/meterpreter/revtcp. no matter what i try same error :-

* In the backdoor module
* Checking if binary is supported
* Gathering file info
* Reading win32 entry instructions
The following WinIntelPE32s are available: (use -s)
caveminerinline
iatreversetcpinline
iat
reversetcpinlinethreaded
iat
reversetcpstagerthreaded
iat
usersuppliedshellcodethreaded
meterpreter
reversehttpsthreaded
reverseshelltcpinline
reverse
tcpstagerthreaded
usersuppliedshellcodethreaded

because i want to embed it with another .exe template so maybe i could reduce my chances being caught by AV.

Share Your Thoughts

  • Hot
  • Active