Skip to content

Commit

Permalink
fixing the ncat command for silly putty
Browse files Browse the repository at this point in the history
the command was incorrect, --ssl should be after the port number, it was confusing :/
  • Loading branch information
fajllo authored Oct 22, 2024
1 parent 9e9f903 commit 1dc0271
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion labs/1-3.Challenge-SillyPutty/answers/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -96,8 +96,10 @@ A: The shell does not spawn without a proper TLS handshake, so using a basic nca
There are a few ways to coerce a shell to spawn from this binary. One is to use ncat with the `--ssl` option along with rerouting the traffic to the localhost like before:

```
ncat -nvlp --ssl 8443
ncat -nvlp 8443 --ssl
```
![image](https://github.com/user-attachments/assets/4aeabecf-4f96-4e07-a666-7e3cf28538a6)

... and then running the malware again.

Another is to pull the PowerShell payload out of the binary via decompression/base64 decoding, and remove the argument for `-sslcon true`. This removes the reverse shell's requirement to negotiate a TLS handshake.
Expand Down

0 comments on commit 1dc0271

Please sign in to comment.