Comments (5)
lambdafu
commented on July 22, 2024
Hi, unfortunately there are still a couple of glitches when building from scratch, but we are working on it and will keep you updated. Thanks for reporting!
from alpaca-code.
Unline
commented on July 22, 2024
thank you for your response
please keep us informed of any updates
from alpaca-code.
nmurilo
commented on July 22, 2024
I had the same issue. In my case, it was related to the certificate files shared folder.
After I fixed the path (I'm running it on MacOS), the vsftp docker stayed up
from alpaca-code.
nmurilo
commented on July 22, 2024
The last stage of the attack is failing " in "d" (RETR payload.html") command, any hints?
Sat Jun 26 23:20:25 2021 [pid 27] FTP command: Client "172.21.0.1", "CONTENT-LENGTH: 631"
Sat Jun 26 23:20:25 2021 [pid 27] FTP response: Client "172.21.0.1", "530 Please login with USER and PASS."
Sat Jun 26 23:20:25 2021 [pid 27] FTP command: Client "172.21.0.1", "ORIGIN: https://attacker.com"
Sat Jun 26 23:20:25 2021 [pid 27] FTP response: Client "172.21.0.1", "530 Please login with USER and PASS."
Sat Jun 26 23:20:25 2021 [pid 27] FTP command: Client "172.21.0.1", "CONNECTION: keep-alive"
Sat Jun 26 23:20:25 2021 [pid 27] FTP response: Client "172.21.0.1", "530 Please login with USER and PASS."
Sat Jun 26 23:20:25 2021 [pid 27] FTP command: Client "172.21.0.1", "REFERER: https://attacker.com/"
Sat Jun 26 23:20:25 2021 [pid 27] FTP response: Client "172.21.0.1", "530 Please login with USER and PASS."
Sat Jun 26 23:20:25 2021 [pid 27] FTP command: Client "172.21.0.1"
Sat Jun 26 23:20:25 2021 [pid 27] FTP command: Client "172.21.0.1", "-----------------------------2612896099323396617250757643"
Sat Jun 26 23:20:25 2021 [pid 27] FTP response: Client "172.21.0.1", "530 Please login with USER and PASS."
Sat Jun 26 23:20:25 2021 [pid 27] FTP command: Client "172.21.0.1", "CONTENT-DISPOSITION: form-data; name="a""
Sat Jun 26 23:20:25 2021 [pid 27] FTP response: Client "172.21.0.1", "530 Please login with USER and PASS."
Sat Jun 26 23:20:25 2021 [pid 27] FTP command: Client "172.21.0.1"
Sat Jun 26 23:20:25 2021 [pid 27] FTP command: Client "172.21.0.1", "USER bob"
Sat Jun 26 23:20:25 2021 [pid 27] [bob] FTP response: Client "172.21.0.1", "331 Please specify the password."
Sat Jun 26 23:20:25 2021 [pid 27] [bob] FTP command: Client "172.21.0.1", "-----------------------------2612896099323396617250757643"
Sat Jun 26 23:20:25 2021 [pid 27] [bob] FTP response: Client "172.21.0.1", "530 Please login with USER and PASS."
Sat Jun 26 23:20:25 2021 [pid 27] [bob] FTP command: Client "172.21.0.1", "CONTENT-DISPOSITION: form-data; name="b""
Sat Jun 26 23:20:25 2021 [pid 27] [bob] FTP response: Client "172.21.0.1", "530 Please login with USER and PASS."
Sat Jun 26 23:20:25 2021 [pid 27] [bob] FTP command: Client "172.21.0.1"
Sat Jun 26 23:20:25 2021 [pid 27] [bob] FTP command: Client "172.21.0.1", "PASS "
Sat Jun 26 23:20:25 2021 [pid 26] [bob] OK LOGIN: Client "172.21.0.1"
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP response: Client "172.21.0.1", "230 Login successful."
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP command: Client "172.21.0.1", "-----------------------------2612896099323396617250757643"
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP response: Client "172.21.0.1", "500 Unknown command."
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP command: Client "172.21.0.1", "CONTENT-DISPOSITION: form-data; name="b""
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP response: Client "172.21.0.1", "500 Unknown command."
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP command: Client "172.21.0.1"
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP command: Client "172.21.0.1", "TYPE I"
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP response: Client "172.21.0.1", "200 Switching to Binary mode."
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP command: Client "172.21.0.1", "-----------------------------2612896099323396617250757643"
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP response: Client "172.21.0.1", "500 Unknown command."
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP command: Client "172.21.0.1", "CONTENT-DISPOSITION: form-data; name="c""
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP response: Client "172.21.0.1", "500 Unknown command."
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP command: Client "172.21.0.1"
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP command: Client "172.21.0.1", "PASV"
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP response: Client "172.21.0.1", "227 Entering Passive Mode (172,21,0,1,39,108)."
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP command: Client "172.21.0.1", "-----------------------------2612896099323396617250757643"
Sat Jun 26 23:20:25 2021 [pid 28] [bob] FTP response: Client "172.21.0.1", "500 Unknown command."
I got these errors in mitmproxy as well:
6.06.2021 19:23 mitmproxy.main INFO [127.0.0.2] Connection from 127.0.0.2:63741
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] [RUN] Data Leakage
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10090
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10091
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10092
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10093
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10094
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10095
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10096
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10097
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10098
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10099
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] Try to port 127.0.0.1:10100
26.06.2021 19:23 mitmproxy.leak INFO [127.0.0.2] ConnectionRefusedError
26.06.2021 19:23 mitmproxy.leak ERROR Cound not find open passive port
from alpaca-code.
lambdafu
commented on July 22, 2024
I can reproduce intermittent failures of mitmproxy which causes a hang. Restarting mitmproxy and trying again lead to success for me after a couple of attempts, but it is very unreliable. Not all data is forwarded and then the FTP server does not see the RETR request, which then means the passive port can not be found. We will investigate further.
from alpaca-code.
Related Issues (3)
- Typo HOT 1
- Connection timed out.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from alpaca-code.