splunk/attack_range

SSL: WRONG_VERSION_NUMBER

Opened this issue · 2 comments

Rudy-RENOUX commented

Hello,

When I simulate an attack against a Windows server on a port other than 5985, I get the following error:

python attack_range.py simulate -e ART -t ar-win2016-server-member-1 -te T1053.005-1
fatal: [127.0.0.1]: UNREACHABLE! => {"changed": false, "msg": "ssl: HTTPSConnectionPool(host='127.0.0.1', port=5986): Max retries exceeded with url: /wsman (Caused by SSLError(SSLError(1, '[SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1129)')))", "unreachable": true}

My first server is a win2016 DC (port 5985): on this port, it works fine
My second server is a win2016 member of the domain (port 5986): ko

My environment is :
python 3.9.17
vagrant 2.3.7

Has anyone come across this problem before ?

Rudy-RENOUX commented

To solve the issue, in attack_range/modules/ansible/atomic_red_team.yml, i had ansible_winrm_scheme: 'http'

image

kyusan93 commented

It would be better to change from source.
modules/art_simulation_controller.py