Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implants frequently timeout when executing .NET binaries via execute-assembly #1822

Open
thesevenrings opened this issue Nov 24, 2024 · 0 comments

Comments

@thesevenrings
Copy link

thesevenrings commented Nov 24, 2024

Describe the bug
Sliver implants are just not working on my end when I use functionality such as execute-assembly to execute .NET binaries. For example, consider the following command:

execute-assembly /home/kali/Documents/Sliver/SharpCollection/NetFramework_4.5_x64/SharpView.exe "get-netuser -PreauthNotRequired" -t 240 -i -E -M

This results in the session displaying "Executing Assembly" and hanging. Waiting a bit for the assembly to actually execute results in the following error:

[!] rpc error: code = Unknown desc = implant timeout

Here is the contents of my log file:

INFO[2024-11-24T08:01:08-05:00] [github.com/grpc-ecosystem/[email protected]/logging/logrus/options.go:220] finished unary call with code OK 
INFO[2024-11-24T08:01:16-05:00] [github.com/grpc-ecosystem/[email protected]/logging/logrus/options.go:220] finished unary call with code OK 
INFO[2024-11-24T08:01:19-05:00] [github.com/grpc-ecosystem/[email protected]/logging/logrus/options.go:220] finished unary call with code OK 
INFO[2024-11-24T08:01:24-05:00] [github.com/grpc-ecosystem/[email protected]/logging/logrus/options.go:220] finished unary call with code OK 
INFO[2024-11-24T08:01:25-05:00] [github.com/grpc-ecosystem/[email protected]/logging/logrus/options.go:220] finished unary call with code OK 
ERRO[2024-11-24T08:03:25-05:00] [github.com/grpc-ecosystem/[email protected]/logging/logrus/options.go:224] finished unary call with code Unknown 
ERRO[2024-11-24T08:10:04-05:00] [github.com/grpc-ecosystem/[email protected]/logging/logrus/options.go:224] finished unary call with code Unknown 

Note that uploading the SharpView vbinary with Upload, and dropping into a shell to run the exact same command is successful.

Sliver version:

[server] sliver (WIDESPREAD_BREAKFAST) > version

[*] Client v1.5.42 - 85b0e870d05ec47184958dbcb871ddee2eb9e3df - linux/amd64
    Compiled at 2024-02-28 14:46:53 -0500 EST
    Compiled with go version go1.20.7 linux/amd64
[*] Server v1.5.42 - 85b0e870d05ec47184958dbcb871ddee2eb9e3df - linux/amd64
    Compiled at 2024-02-28 14:46:53 -0500 EST

OS Version:

Linux kali 6.11.2-amd64 #1 SMP PREEMPT_DYNAMIC Kali 6.11.2-1kali1 (2024-10-15) x86_64 GNU/Linux
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant