chrispetrou/HRShell

Could not get a reverse shell with HTTPS

alexonk opened this issue · 3 comments

alexonk commented

Hi, I tried to obtain a shell with HTTP, it worked.
On the other hand, I have followed all steps provided to try to obtain a shell with HTTPS but no result.
Could you please verify if that is working? Thank you
It is still a great tool nonetheless.

chrispetrou commented

Hi @alexonk - I tried with HTTPS and I can confirm (using wireshark) that it works for me. Could you please describe with a bit more detail the error e.g.:

  • what actually doesn't work?
  • the problem was with the server or with the client?
  • What where the commands you issued?
    etc...

Note 1: In case you decide to establish an HTTPS connection, the url you'll have to provide to the client must be in the form of "https://..." - if you use http in the url then it is designed not to work.

Note 2: In case you didn't use client.py as client and coded yours instead - you must either pass the appropriate certificate somehow of disable SSL verification - but that only in case you didn't use the client provided.

chrispetrou commented

Hi @alexonk
Did you manage to resolve the issues with the notes I provided above - any feedback is appreciated...

chrispetrou commented

Closing since I cannot reproduce and got no feedback. If anyone in the future face the same problem feel free to reopen the issue but in that case please provide some additional info.