payload isnot working

[0xIslamTaha]

I created a payload as the following image

Then I began the nc -l mood

Then I execute the payload.exe on X86 windows 7

The result is:

And I didnt receive any thing on port 4444

[EgeBalci]

I just tested the payload an it worked for me on WIN 7 machine, issue could be related with your virtual machine try it on another machine and try to run HERCULES code from souce with go run HERCULES.go

[0xIslamTaha]

I did it twice with a differant machine and I reinstall the go lang with the latest version 1.6.2. While I'm building the payload these message appears

After I create it, I still have the same error in a two different version machine!

any suggestions?
Thnaks

[EgeBalci]

It seems like a very rare case, honestly i have no idea what is wrong :/

Try to change processor core numbers on virtual machine if this not helps send me a payload sample for understanding the source of the problem.

[0xIslamTaha]

I found that this function CheckGolang() compare the current go version with 1.6.1 and if not, It will pop-up this message, So I think u have to edit this part to check 1.6.2 instead of 1.6.1.

I wanna know if your VM is 64-bit or 32-bit cos mine is 32-bit.

I tried to edit the payload.go it self but i faced a syntex error in it, so please have a look in it

HerC_payload_edit.go.zip

[EgeBalci]

Yes CheckGolang() function needs to be fixed i will deal whit it as soon as possible but it is not the problem that causes your error.
I have checked the code several times in different platforms but i didn't find any error like yours, unfortunately i can't help you but if you find a reason or solution about it please let me know.

[0xIslamTaha]

@EgeBalci I finally found that the payload is working well in x64 but its not working in x86. Please, check this issue. Also, The ~Meterperter module attract the antivirus ... Have you any suggestions to bypass that?

[EgeBalci]

Good news !
I finally figured out whats is wrong with my code and fixed it, now you can run x86 payloads with no error.

[0xIslamTaha]

Good work I will test it.
I would like to knw if there is another method to load the meterpretre payload without create .bat file in the hard desk? I mean we can load it in a memory and exedute it without touch the hard disk to not attract tbe AV?

[EgeBalci]

Yes i will implement more methods for executing meterpreter in future versions including memory byte injections and dll preloading atacks.