@Lucaman said:
An example of a non-staged? I tried running the bash script and it didn’t work, I tried almost any payload for linux and it’s also not working, same error. (Also tried a simple reverse shell)
On staged vs stageless: Deep Dive Into Stageless Meterpreter Payloads | Rapid7 Blog
But to be clear, I never got MSF to work here. The bash script is much better.
The bash script is not a reverse shell, it is an RCE. Don’t be fooled by this, it is all that you need to get a foothold and find a user account. You dont need to generate the hassle of a reverse shell which will die every time someone resets the machine.
If the script and msf are generating the same error, the problem is likely to be how you are invoking it. I cant imagine the bash script is saying it cant send a stager though.
With the script, for example, you have to tell it where to look. See this from a few lines up OpenAdmin - #694 by TazWake - Machines - Hack The Box :: Forums