Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

winrm extension issue with WSL #1595

Open
m3rcer opened this issue Mar 13, 2024 · 0 comments
Open

winrm extension issue with WSL #1595

m3rcer opened this issue Mar 13, 2024 · 0 comments

Comments

@m3rcer
Copy link

m3rcer commented Mar 13, 2024

winrm extension issue with WSL

After importing WSL Ubuntu from an exported .tar file and launching sliver on it, the winrm extension fails with the error - Error: Could not load extension: rpc error: code = Unknown desc = Error building import table: Error loading module: The specified module could not be found.

Note that this works on WSL Ubuntu's mastercopy but not it's exported images, could be an WSL issue.

To Reproduce

  1. Link to Ubuntu.tar VM: https://drive.google.com/file/d/1WKmWxH9OVoN-DERqcKKh4xoxxLX_pyA1/view
    Sliver version used:
    [*] Server v1.5.41 - f2a3915 - linux/amd64
    Compiled at 2023-07-11 14:31:10 -0700 PDT

  2. Import the Ubuntu.tar using WSL: wsl --import Ubuntu C:\Ubuntu Ubuntu.tar

  3. Run Sliver server in an Ubuntu WSL terminal and attempt to run the winrm extension.

Output

[server] sliver (dcorp-vm1_https) > winrm -- -i dcorp-vm2 -u studentX -p password -c whoami 
[!] Could not load extension: rpc error: code = Unknown desc = Error building import table: Error loading module: The specified module could not be found.

Expected behavior

[server] sliver (dcorp-vm1_https) > winrm -- -i dcorp-vm2 -u studentX -p password -c whoami 
[*] Successfully executed winrm 
[*] Got output: 
[+] Arguments processed hostname: dcorp-vm2
command: whoami 
username: studentX 
password: password
dcorp\studentX

Remediations attempted

  1. Tried uninstalling and reinstalling the winrm extension from an offline build (https://github.com/sliverarmory/winrmdll-sliver) using the extensions command.

  2. Removed .sliver* folders from /root and reinstalled Sliver assets along with the winrm extension

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants