Hello,
i had managed to backdoor a payload with another .exe template using Veil evasion with the backdoor factory method.
Now however when i execute the payload in my virtual machine, the exploit would suck on sending stage for ages with no meterpreter session popping up.
the payload is embedded in the spider.exe file, and i had closed the application after losing any hope of getting a meterpreter session ( i've waited for 10 mins ). and even had tried to embed the payload with another .exe template but nothing is working.
How can i fix this?
Thanks
3 Responses
now i know that the payload that i've used is incompatible with my exploit. but still another issue surface up now, whenever i try to choose metertcp or even meterpreterhttps, this is what i keep getting :-
* In the backdoor module
* Checking if binary is supported
* Gathering file info
* Reading win32 entry instructions
The following WinIntelPE32s are available: (use -s)
caveminerinline
iatreversetcpinline
iatreversetcpinlinethreaded
iatreversetcpstagerthreaded
iatusersuppliedshellcodethreaded
meterpreterreversehttpsthreaded
reverseshelltcpinline
reversetcpstagerthreaded
usersuppliedshellcodethreaded
is it maybe possible to add the meterpreter/reversetcp to this dictionary? and if yes, what is the exact path to it.
and so to avoid confusion i've used the native/backdoorfactory, and from there i've tried to choose the metertcp, even tried to put another payload paths, ex. windows/meterpreter/reversetcp , cs/meterpreter/revtcp , c/meterpreter/revtcp. no matter what i try same error :-
* In the backdoor module
* Checking if binary is supported
* Gathering file info
* Reading win32 entry instructions
The following WinIntelPE32s are available: (use -s)
caveminerinline
iatreversetcpinline
iatreversetcpinlinethreaded
iatreversetcpstagerthreaded
iatusersuppliedshellcodethreaded
meterpreterreversehttpsthreaded
reverseshelltcpinline
reversetcpstagerthreaded
usersuppliedshellcodethreaded
because i want to embed it with another .exe template so maybe i could reduce my chances being caught by AV.
Share Your Thoughts