Skip to content

pivots and server invalid signature and decryption failed #1861

@manesec

Description

@manesec

Describe the bug
pivots and server invalid signature and decryption failed.

To Reproduce
Steps to reproduce the behavior:

  1. git clone https://github.com/BishopFox/sliver.git and make
  2. generate -m 192.168.19.135:443 -o windows -s payload.exe -j 10 -d
  3. mtls -l 443
  4. pivots tcp --bind 0.0.0.0 -l 9999
  5. generate -i 192.168.19.136:9999 -o windows -s pivots.exe -j 10 -d

Video: https://youtu.be/GKJmCkOCN-w

Error Logs

payload.exe

2025/01/22 18:13:45 sliver.go:90: Hello my name is PRESIDENTIAL_PLUNGER
2025/01/22 18:13:45 limits.go:58: Limit checks completed
2025/01/22 18:13:45 sliver.go:108: Running in session mode
2025/01/22 18:13:45 session.go:69: Starting interactive session connection loop ...
2025/01/22 18:13:45 transports.go:41: Starting c2 url generator () ...
2025/01/22 18:13:45 transports.go:104: Return generator: (chan *url.URL)(0xc00006a720)
2025/01/22 18:13:45 transports.go:92: Yield c2 uri = 'mtls://192.168.19.135:443'
2025/01/22 18:13:45 transports.go:92: Yield c2 uri = 'mtls://192.168.19.135:443'
2025/01/22 18:13:45 session.go:86: Next CC = mtls://192.168.19.135:443
2025/01/22 18:13:45 session.go:86: Next CC = mtls://192.168.19.135:443
2025/01/22 18:13:45 session.go:176: Connecting -> 192.168.19.135:443
2025/01/22 18:13:45 transports.go:92: Yield c2 uri = 'mtls://192.168.19.135:443'
2025/01/22 18:13:45 uuid_windows.go:48: Registry host uuid value too short
2025/01/22 18:13:45 sliver.go:288: Host Uuid: 69f94d56-fc47-8ad9-5094-7452a9038e6f
2025/01/22 18:13:45 tun.go:53: [tunnel] Tunnel handlers map[20:0x8aaec0 22:0x8a8680 23:0x8a7880 80:0x8a92e0 82:0x8acba0 125:0x8aeb00]
2025/01/22 18:14:11 sliver.go:182: [recv] pivotHandler with type 50
2025/01/22 18:14:11 tcp.go:41: Starting TCP pivot listener on 0.0.0.0:9999
2025/01/22 18:14:11 pivots.go:90: [pivot] my peer id: 9022447462198621400
2025/01/22 18:14:11 pivots.go:91: [pivot] adding listener: 0.0.0.0:9999
2025/01/22 18:14:14 implant.go:99: minisign signature validation: true
2025/01/22 18:14:14 implant.go:99: minisign signature validation: true
2025/01/22 18:14:14 pivots.go:315: [pivot] peer key exchange completed successfully with peer 242343157157768198
2025/01/22 18:14:14 crypto.go:203: invalid signature on ciphertext
2025/01/22 18:14:14 pivots.go:550: [pivot] Decryption error: decryption failed

pivots.exe

2025/01/22 18:14:14 sliver.go:90: Hello my name is COOPERATIVE_CHEMICAL
2025/01/22 18:14:14 limits.go:58: Limit checks completed
2025/01/22 18:14:14 sliver.go:108: Running in session mode
2025/01/22 18:14:14 session.go:66: Starting interactive session connection loop ...
2025/01/22 18:14:14 transports.go:41: Starting c2 url generator () ...
2025/01/22 18:14:14 transports.go:104: Return generator: (chan *url.URL)(0xc00006a720)
2025/01/22 18:14:14 transports.go:92: Yield c2 uri = 'tcppivot://192.168.19.136:9999'
2025/01/22 18:14:14 transports.go:92: Yield c2 uri = 'tcppivot://192.168.19.136:9999'
2025/01/22 18:14:14 session.go:83: Next CC = tcppivot://192.168.19.136:9999
2025/01/22 18:14:14 session.go:83: Next CC = tcppivot://192.168.19.136:9999
2025/01/22 18:14:14 session.go:177: Attempting to connect via TCP Pivot to 192.168.19.136:9999
2025/01/22 18:14:14 transports.go:92: Yield c2 uri = 'tcppivot://192.168.19.136:9999'
2025/01/22 18:14:14 implant.go:99: minisign signature validation: true
2025/01/22 18:14:14 pivotclient.go:62: [pivot] Peer key exchange successful
2025/01/22 18:14:14 pivotclient.go:143: [pivot] my peer id: 242343157157768198
2025/01/22 18:14:14 pivotclient.go:144: [pivot] Sending server key exchange ...
2025/01/22 18:14:14 pivotclient.go:154: [pivot] Waiting for server key exchange response (5m) ...
2025/01/22 18:14:14 pivotclient.go:237: [pivot] Error (read msg-length): EOF
2025/01/22 18:14:14 pivotclient.go:328: [pivot] Error reading message: EOF
2025/01/22 18:14:14 sliver.go:151: [session] failed to establish connection: EOF
2025/01/22 18:14:14 sliver.go:131: Reconnect sleep: 10s

Expected behavior
pivots can work.

Screenshots

Image

Image

Desktop (please complete the following information):

  • New of Kali linux.
  • Microsoft Windows 10 Enterprise.
  • Sliver server: v1.5.39 - 31c7093

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions