{"action":"created","issue":{"url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/25","repository_url":"https://api.github.com/repos/BigNerd95/Chimay-Red","labels_url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/25/comments","events_url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/25/events","html_url":"https://github.com/BigNerd95/Chimay-Red/issues/25","id":300404077,"number":25,"title":"Cannot get shell -> Miktotik 6.37.5","user":{"login":"N0ur5","id":24260009,"avatar_url":"https://avatars3.githubusercontent.com/u/24260009?v=4","gravatar_id":"","url":"https://api.github.com/users/N0ur5","html_url":"https://github.com/N0ur5","followers_url":"https://api.github.com/users/N0ur5/followers","following_url":"https://api.github.com/users/N0ur5/following{/other_user}","gists_url":"https://api.github.com/users/N0ur5/gists{/gist_id}","starred_url":"https://api.github.com/users/N0ur5/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/N0ur5/subscriptions","organizations_url":"https://api.github.com/users/N0ur5/orgs","repos_url":"https://api.github.com/users/N0ur5/repos","events_url":"https://api.github.com/users/N0ur5/events{/privacy}","received_events_url":"https://api.github.com/users/N0ur5/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":19,"created_at":"2018-02-26T21:32:51Z","updated_at":"2018-03-10T13:01:05Z","closed_at":null,"author_association":"NONE","body":"Hello,\r\n\r\nI am new to GitHub with minimal development/\"programming\" experience, so my apologies if this is not the correct approach to getting help with this.\r\n\r\nI can't seem to get a meterpreter shell or get a callback to netcat(nc), using the notes you provided with this exploit/POC. \r\n\r\nI downloaded and installed the firmware for Mikrotik 6.37.5 onto a virtual machine. I have ensured port 80 is open on the device. I am also running Kali on another virtual machine. The devices can ping each other. \r\n\r\nI have tried mips and x86 exploits and although the results in the terminal tell me that the exploit was complete, and payload delivered, I do not get a callback to either metasploit handler or netcat. I have tried both python 2.7 as well as 3.6. When I use TCPdump from Kali to get some additional information when running the exploit, I see my machine reach out to the Mikrotik and at one point a HTTP 200 OK message. So I know the initial conversation between the machines opens up. Not long after the payload is sent I see two responses from the Mikrotik. One is a HTTP 400 bad request, and the other is HTTP 500 internal server error. \r\n\r\nI seem to be stuck. Is there any guidance or advice you can provide? Is this version perhaps not vulnerable dispite the release notes saying versions up to 3.38.4 are vulnerable? Or maybe I'm doing something wrong? I can provide more information if needed as well. I just would appreciate help as I love researching things in the cybersecurity, pentesting, and hacking. \r\n\r\nThank you very much for your time,\r\nN0ur5"},"comment":{"url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/comments/372028082","html_url":"https://github.com/BigNerd95/Chimay-Red/issues/25#issuecomment-372028082","issue_url":"https://api.github.com/repos/BigNerd95/Chimay-Red/issues/25","id":372028082,"user":{"login":"BigNerd95","id":4818299,"avatar_url":"https://avatars3.githubusercontent.com/u/4818299?v=4","gravatar_id":"","url":"https://api.github.com/users/BigNerd95","html_url":"https://github.com/BigNerd95","followers_url":"https://api.github.com/users/BigNerd95/followers","following_url":"https://api.github.com/users/BigNerd95/following{/other_user}","gists_url":"https://api.github.com/users/BigNerd95/gists{/gist_id}","starred_url":"https://api.github.com/users/BigNerd95/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/BigNerd95/subscriptions","organizations_url":"https://api.github.com/users/BigNerd95/orgs","repos_url":"https://api.github.com/users/BigNerd95/repos","events_url":"https://api.github.com/users/BigNerd95/events{/privacy}","received_events_url":"https://api.github.com/users/BigNerd95/received_events","type":"User","site_admin":false},"created_at":"2018-03-10T13:01:05Z","updated_at":"2018-03-10T13:01:05Z","author_association":"OWNER","body":"@N0ur5 I tried 6.37.2 and 6.37.3 and it is working.\r\nI tested 6.37.5 and it is NOT working..\r\nMaybe 6.37.5 is not working because it is a bugfix version (maybe there is something different in the code)\r\nI'll investigate"}}
{"actor":{"display_login":"BigNerd95"}}