Venom Openssl listener session resume persistence about venom HOT 3 OPEN

venom v1.0.17.7 release update auto store persistence settings into a ZIP file ..

zip handler files

• handler_ID:<$Id>.zip
• handler.sh <-- Handler script with all persistence settings stored
• README.txt <-- Instructions how to use handler.sh script
• cert.pem <-- OpenSSL certificate
• key.pem <-- OpenSSL certificate

from venom.

Persistence explained ..

1º venom openssl agent builds 2 SSL certificates in 'venom-main/output/'

[ key.pem ]   AND   [ cert.pem ]

2º - Venom openssl 'persistence module' writes a batch script into target 'startup folder'

%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\KB4524147_$random_name.update.bat

3º - Attacker needs to Restart target machine and start the OpenSSL handler

cd venom/output
openssl s_server -quiet -key key.pem -cert cert.pem -port $lport

Now about 'FTP' issue i dont know whats wrong ..

from venom.

from venom.