[Diego Pérez]

Hi!
As mentioned in the lectures use the ip from eth0, the ip from your host has nothing to do here. Are you running the .bat file in a windows virtual machine?

Greetings!
Diego

[Hossam H.I.M]

Yes from windows, but still there is no back connection

https://drive.google.com/file/d/1mCLhDZTw_EOsoq43Z-3lczY_iELMObI9/view?usp=drivesdk

[Diego Pérez]

Hi!
But can you answer if it’s a windows virtual machine? Because this is very weird, there’s no other student having issue with empire, I tested it and the tool works fine.
So let’s try again:
Can you show me the following please:
1. Result of ​ifconfig and route -n ​in Kali.
2. The result of ipconfig in Windows.
3. The options for the listener.
4. Can you share a screenshot of the Network settings used in Vmware for both machines.

Let me know.
Diego

[Hossam H.I.M]

https://drive.google.com/file/d/1RJsa11T4kSgqvirMCaWHsjLIZRpym503/view?usp=drivesdk

https://drive.google.com/file/d/1uM35v3lf6Zi1WcvEI2YcFaELnruIKJW5/view?usp=drivesdk

https://drive.google.com/file/d/1ZyoKG7A0A3TgosXZncPHroNrw3wW11Ts/view?usp=drivesdk

https://drive.google.com/file/d/1sleSdSHX9az5j0UKJbbYEhy2GKdYT5LU/view?usp=drivesdk

https://drive.google.com/file/d/1PM3dqCznXiRbpRGhGDzVSGFpxqVuN152/view?usp=drivesdk

https://drive.google.com/file/d/1DCmHV0SCdEKD2QR8t4DbHIo-Rgv6AB18/view?usp=drivesdk

[Hossam H.I.M]

https://drive.google.com/file/d/1rYUhf-lQLvA2l4nJ0vCwuW_7pi6shFIF/view?usp=drivesdk

[Diego Pérez]

Hi!
Use the http listener instead, why are you using a different one? That’s used for other kind of purposes. And send a screenshot with the options used for it.
Also you didn’t send the network settings used in VMware for each machine. And forget about the host it has nothing to do nor will be used in the attack.

Greetings!
Diego

[Hossam H.I.M]

You asked me that “show me listener options” you didn’t say show me what you have created, so I go to option and take a picture, I did not create anything and I have never created the one that the option shadow stands on.

https://drive.google.com/file/d/1DCmHV0SCdEKD2QR8t4DbHIo-Rgv6AB18/view?usp=drivesdk

Is this the network you want?

https://drive.google.com/file/d/1yNSxgCLHMl67DCUb4v4crJ7eT3Rnlq3p/view?usp=drivesdk

https://drive.google.com/file/d/1nxkmWpp5XHb77ZLK5K2uuxbRo7aO94Yi/view?usp=drivesdk

[Hossam H.I.M]

Those what I always used to creat and send to you

https://drive.google.com/file/d/1JHx3uWH_ELiOvS8Sh0Vq0UuvvMTaW_bp/view?usp=drivesdk

https://drive.google.com/file/d/1GOwcvRRhdGDiAy6HnhYHZb-mh34fzjjc/view?usp=drivesdk

https://drive.google.com/file/d/1L4uamjLOnNTcPQQU7cFSkBKJnIkTHzP6/view?usp=drivesdk

https://drive.google.com/file/d/1IqjgFiH7pJ9RflATYXD4rVVrOcriPxwf/view?usp=drivesdk

https://drive.google.com/file/d/1IqjgFiH7pJ9RflATYXD4rVVrOcriPxwf/view?usp=drivesdk

[Diego Pérez]

Hi!
We are trying to solve an issue so all the screenshots should be related to the modules and settings used.
The listener you created doesn’t have a Port value and the .bat launcher is from an old one, don’t reuse them create a new one each time. The current .bat has a port and your listener doesn’t.
Create it all over again, make sure to set the Port value in the listener (in the Port option only, not in the Host), then make sure the double quotes are in the newly created .bat file, if not add them manually. Then disable defender in windows machine and move the file to it and run it, then it should work.

Greetings!
Diego

[Hossam H.I.M]

The screenshot is related to what you’ve asked for is that “you want see the listener option I opened the listener options and took the picture, I did not create anything, I did not choose any options, I did not do anything, I just took a screenshot of what you asked for.

If you mean this screenshot doesn’t have a value, I just get a random screenshot from the screenshots that I have sent before just to show you I always used the http, and this screenshot was a step during the creation it didn’t executed without the port value

https://drive.google.com/file/d/1JHx3uWH_ELiOvS8Sh0Vq0UuvvMTaW_bp/view?usp=drivesdk

[Diego Pérez]

Hi!
Well, the screenshots you should share must be related to the current created listener and agent, not just a screenshot of an empty listener, that’s useless and doesn’t help to try to solve the problem. So, when you follow the previous steps I mentioned take screenshots of the settings used for the listener and the agent you are going to use, the same goes for the .bat listener.

Greetings!
Diego

[Hossam H.I.M]

Hi there,

Do you know what is the problem with this keylogger?

https://drive.google.com/file/d/16d2r_NiBtAbcMACcK9zaFLkb_JkdTtwS/view?usp=drivesdk

https://drive.google.com/file/d/1o4bdBGS1ylghwwqFxVqGR-vp-q2nuk9m/view?usp=drivesdk

https://drive.google.com/file/d/1epwYoM_ohw_BJ2ffc7jpx8KgEYA3Wfu0/view?usp=drivesdk

[Diego Pérez]

Hi!
What exactly did you do to get the Archive Manager error?
And in the windows side you need to disable defender to keep up with the testing.

Greetings!
Diego

[Hossam H.I.M]

I creat it and it won’t work I just open the keylogger file that gives me that error

[Diego Pérez]

Hi!
I asked 2 different questions and you are just responding with one answer, which question are you answering? Please try to be more precise to answer.

Greetings!
Diego

[Author]

Posts