Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue while running where in c2 server #3

Open
raghavmishra opened this issue Aug 31, 2021 · 1 comment
Open

Issue while running where in c2 server #3

raghavmishra opened this issue Aug 31, 2021 · 1 comment

Comments

@raghavmishra
Copy link

Hi Guys,
Can you please look into the below issue encountered while running 'where' command,

nicat-c2#where
() WAITING for yummy SNI form the agent - will timeout in 5 seconds
(
) - 226 bytes received in buffer
[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1123)
() - 226 bytes received in buffer
[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1123)
(
) - 226 bytes received in buffer
[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1123)
() - 229 bytes received in buffer
[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1123)
(
) - 228 bytes received in buffer
[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1123)
() - 228 bytes received in buffer
[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1123)
(
) - 226 bytes received in buffer
[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1123)
() - 229 bytes received in buffer
[SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1123)
(
) - 226 bytes received in buffer
(*) RECEIVED: CD-DkY8WvGBuXZidfnB b32 PAYLOAD
(!)'Non-base32 digit found' exception while decoding SNI in 'parseSniPayload' - exiting thread
Traceback (most recent call last):
File "/opt/SNIcat/snicat_c2.py", line 599, in
main()
File "/opt/SNIcat/snicat_c2.py", line 596, in main
socketLoop()
File "/opt/SNIcat/snicat_c2.py", line 521, in socketLoop
prompt = retrieveCmdWrapperAndSetPrompt(inputValue,0,0)
File "/opt/SNIcat/snicat_c2.py", line 373, in retrieveCmdWrapperAndSetPrompt
prompt_folder = (retrieveCmd(in_value.upper(),arg,arg2)).rstrip('\x00')
AttributeError: 'NoneType' object has no attribute 'rstrip'

I don't know why I am getting the exception. I have also tried to change the b32decode method as well. I had change to have casefold=True as the encoded value has lower case letters.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants
@raghavmishra and others