cobbr / cobbr/Covenant

[Bug] GruntHTTP.exe failing to execute.

Open
#332 11 comments 0 reactions 1 assignee Claimed by @cobbr View on GitHub
Dominant language
C#
Stars
4.7k
Forks
822
PR merge metrics
No merged PRs in 30d

Description

**Feature Request or Bug**
Bug

**Describe the feature request or bug**
When executing a vanilla GruntHTTP.exe on a windows build with real-time protection switched off, the execution fails

**To Reproduce**
Steps to reproduce the behavior:
1. Create a HTTP Listener, modifying the name, port and connect address
2. Select Launchers -> Binary
3. Select the Listener created in step 1 and the GruntHTTP implant template
4. Select Generate and then download
5. Copy the exe to the host operating system
6. Switch off Windows Defender real-time protection on the target box
7. Copy the executable onto the target box
8. Launch a command prompt
9. Navigate to the directory with the GruntHTTP.exe and attempt to execute.
10. Error message generated with no connection back:
Illegal characters in path.
at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str)
at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList)
at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String[] pathList, Boolean checkForDuplicates, Boolean needFullPath)
at System.IO.Path.GetFullPath(String path)
at System.Net.WebClient.GetUri(String path)
at System.Net.WebClient.UploadString(String address, String data)
at GruntStager.GruntStager.ExecuteStager()

**Expected behavior**
I expected the execution of the implant to result in a 'grunt'

**Screenshots**
Screenshot 2021-08-25 at 14 19 05

**Covenant Server Information:**
- OS: Kali
- Native

**Browser Information:**
- Browser Chrome
- Version [e.g. 22]

**Target Information (System that implant is running on):**
- OS: Windows 10
- Version 21H1 Build 19043.928

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.