{"action":"created","issue":{"url":"https://api.github.com/repos/zerosum0x0/koadic/issues/60","repository_url":"https://api.github.com/repos/zerosum0x0/koadic","labels_url":"https://api.github.com/repos/zerosum0x0/koadic/issues/60/labels{/name}","comments_url":"https://api.github.com/repos/zerosum0x0/koadic/issues/60/comments","events_url":"https://api.github.com/repos/zerosum0x0/koadic/issues/60/events","html_url":"https://github.com/zerosum0x0/koadic/issues/60","id":371280559,"node_id":"MDU6SXNzdWUzNzEyODA1NTk=","number":60,"title":"Why does the zombies command display a zombie with no IP address?","user":{"login":"Calson23","id":44244859,"node_id":"MDQ6VXNlcjQ0MjQ0ODU5","avatar_url":"https://avatars3.githubusercontent.com/u/44244859?v=4","gravatar_id":"","url":"https://api.github.com/users/Calson23","html_url":"https://github.com/Calson23","followers_url":"https://api.github.com/users/Calson23/followers","following_url":"https://api.github.com/users/Calson23/following{/other_user}","gists_url":"https://api.github.com/users/Calson23/gists{/gist_id}","starred_url":"https://api.github.com/users/Calson23/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Calson23/subscriptions","organizations_url":"https://api.github.com/users/Calson23/orgs","repos_url":"https://api.github.com/users/Calson23/repos","events_url":"https://api.github.com/users/Calson23/events{/privacy}","received_events_url":"https://api.github.com/users/Calson23/received_events","type":"User","site_admin":false},"labels":[{"id":650603565,"node_id":"MDU6TGFiZWw2NTA2MDM1NjU=","url":"https://api.github.com/repos/zerosum0x0/koadic/labels/bug","name":"bug","color":"ee0701","default":true},{"id":650603570,"node_id":"MDU6TGFiZWw2NTA2MDM1NzA=","url":"https://api.github.com/repos/zerosum0x0/koadic/labels/question","name":"question","color":"cc317c","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":23,"created_at":"2018-10-17T21:48:35Z","updated_at":"2018-10-18T02:15:56Z","closed_at":"2018-10-18T02:15:56Z","author_association":"NONE","body":"Hello,\r\nI am using the Koadic program to display the idea of botnets and their effect on computer on a network for a Final project. However, I am having an issue in regards to testing the Koadic program on a virtual environment I created using Proxmox. I setup the environment to use an attacking VM called KaliAttack (using Kali Linux), a router VM (using CentOS 7), two Windows VMs (both Using Windows 7). The Kali attack VM is setup on the outside (external interface) of the Router VM and both of the Windows VMs are setup on the inside (internal interface) of the Router VM. The router VM has two port forwards on port 9998 on the external interface to the internal interface to each Windows VM through the Router VM. I then went into the Koadic program using \"./koadic\" command inside the home directory of koadic then used the use then used the \"verbose 1\" command to turn on verbose info mode. The i used the \"use stager/js/mshta\" to select the stager that i want to use for the zombies to connect to. i then use the \"info\" command to see the populated values for the stager. I made the stager use the following values:\r\nSRVHOST = 172.16.242.82\r\nSRVPORT = 9998\r\nEXPIRES = \r\nKEYPATH =\r\nCERTPATH =\r\nMODULE =\r\nThe next thing i did was used the \"run\" command to run the mshta module and it gave me this:\r\n![image](https://user-images.githubusercontent.com/44244859/47117524-9a140080-d232-11e8-8642-4cf9a4e849a1.png)\r\nThen I used the \"zombies\" command to check to make sure there are no zombies in the module from past failed attempts. It shown the following:\r\n![image](https://user-images.githubusercontent.com/44244859/47117719-2d4d3600-d233-11e8-9e0a-8e7ff5f0e2af.png)\r\nI then go to my first Windows VM and go into command prompt and use the command after the denoted \"[>]\" prefix in the first screenshot. The following is the result in the koadic program after the command mentioned previously was entered into the command prompt of the Windows VM:\r\n![image](https://user-images.githubusercontent.com/44244859/47118073-37bbff80-d234-11e8-9943-8a476dcd29b8.png)\r\nHowever, when I use the \"zombies\" command it shows the following as a result:\r\n![image](https://user-images.githubusercontent.com/44244859/47118152-76ea5080-d234-11e8-9f7a-d0129b969f0e.png)\r\nI even went and tried seeing the info of the zombie in greater detail using the \"zombies 0\" command which gives me the following result:\r\n![image](https://user-images.githubusercontent.com/44244859/47118260-c16bcd00-d234-11e8-8a0c-aafa81481996.png)\r\nIt's not supplying the IP address of the zombie that I connected. I'm not sure what is wrong. Please help me.\r\n\r\nThank you,\r\n\r\nCalson"},"comment":{"url":"https://api.github.com/repos/zerosum0x0/koadic/issues/comments/430851651","html_url":"https://github.com/zerosum0x0/koadic/issues/60#issuecomment-430851651","issue_url":"https://api.github.com/repos/zerosum0x0/koadic/issues/60","id":430851651,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMDg1MTY1MQ==","user":{"login":"TheNaterz","id":2198138,"node_id":"MDQ6VXNlcjIxOTgxMzg=","avatar_url":"https://avatars1.githubusercontent.com/u/2198138?v=4","gravatar_id":"","url":"https://api.github.com/users/TheNaterz","html_url":"https://github.com/TheNaterz","followers_url":"https://api.github.com/users/TheNaterz/followers","following_url":"https://api.github.com/users/TheNaterz/following{/other_user}","gists_url":"https://api.github.com/users/TheNaterz/gists{/gist_id}","starred_url":"https://api.github.com/users/TheNaterz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheNaterz/subscriptions","organizations_url":"https://api.github.com/users/TheNaterz/orgs","repos_url":"https://api.github.com/users/TheNaterz/repos","events_url":"https://api.github.com/users/TheNaterz/events{/privacy}","received_events_url":"https://api.github.com/users/TheNaterz/received_events","type":"User","site_admin":false},"created_at":"2018-10-18T02:15:56Z","updated_at":"2018-10-18T02:15:56Z","author_association":"COLLABORATOR","body":"Psych, we're just parsing ipconfig now. Way less of a hassle and more reliable. If there are still issues, idk just fix it and make a pull.\r\n\r\nYOLO"}}
{"actor":{"display_login":"TheNaterz"}}