CS Beacon - SMB Error Code

This commit is contained in:
Swissky 2020-10-15 17:22:00 +02:00
parent b32f4754d7
commit 3368084b2d

View file

@ -102,10 +102,23 @@ Configuration:
3. Interact with a beacon, and `sleep 0`
### SMB Beacon
### SMB Beacon
```powershell
link [host] [pipename]
connect [host] [port]
unlink [host] [PID]
jump [exec] [host] [pipe]
```
SMB Beacon uses Named Pipes. You might encounter these error code while running it.
| Error Code | Meaning | Description |
|------------|----------------------|----------------------------------------------------|
| 2 | File Not Found | There is no beacon for you to link to |
| 5 | Access is denied | Invalid credentials or you don't have permission |
| 53 | Bad Netpath | You have no trust relationship with the target system. It may or may not be a beacon there. |
Uses Named Pipes.
Connect to an SMB Beacon : `link [host] [pipe]`
### Metasploit compatibility
@ -385,7 +398,8 @@ Beacon Command Elevators
Artifact Kit (Cobalt Strike 4.0) - https://www.youtube.com/watch?v=6mC21kviwG4 :
- `sudo apt-get install mingw-w64`
- Download the artifact kit : `Go to Help -> Arsenal to download Artifact Kit (requires a licensed version of Cobalt Strike)`
- Install the dependencies : `sudo apt-get install mingw-w64`
- Edit the Artifact code
* Change pipename strings
* Change `VirtualAlloc` in `patch.c`/`patch.exe`, e.g: HeapAlloc