Connection Shark Jack - C2

[s0u1sb4n3]

As per the instructions i downloaded the device config and used scp to put in /etc folder

The additional instruction was to manually start it.

/etc/init.d/c2 start

I placed this at the bottom of the pre installed payload and nothing happened. 

It did the nmap and made the loot file internally but did not make a connection. 

I verified the c2 domain was active the whole time.

Please let me know what I'm doing wrong. 

 

 

 

[s0u1sb4n3]

6 minutes ago, s0u1sb4n3 said:

As per the instructions i downloaded the device config and used scp to put in /etc folder

The additional instruction was to manually start it.

/etc/init.d/c2 start

I placed this at the bottom of the pre installed payload and nothing happened. 

It did the nmap and made the loot file internally but did not make a connection. 

I verified the c2 domain was active the whole time.

Please let me know what I'm doing wrong. 

 

 

 

-ps this was out of the box, I may have to flash to new firmware. I will test again and post my findings soon.

[s0u1sb4n3]

Looking it up. There is only the firmware 1.0 released and no upgrade instructions. 

There is no c2 folder in the init.d 

Any assistance getting this connected to c2 cloud is appreciated. 

[Altrez]

Hello,

I do not think the new Firmware is ready yet. The out of the box shark jack does not support c2.

[s0u1sb4n3]

thank you, i'll wait for an update.
the documentations states the need to enable it manually with command above and the Cloud C2 gives you the device.config file for it, but there isn't a connector in the device that i can see from the cli. 

[s0u1sb4n3]

@Darren Kitchen 
would you mind letting us know when the Shark Jack will be Cloud C2 ready ? 

[Irukandji]

That won't be happening for while now! 

He was hit by a car today.

[Darren Kitchen]

Sorry for the delay in responding. Been focused on recovery. Wear helmets folks!

We have a firmware 1.0.1 for the Shark Jack that includes C2CONNECT, C2DISCONNECT and C2EXFIL - however a last minute bug was discovered and squashed before release. I expect this to drop now on Monday. 

[s0u1sb4n3]

Thank you sir, I appreciate all your hard work and look forward to the update. I have  access to a sandboxed network at my college and have been given permission to test any equipment I purchased from Hak5 there. 

[P.Six]

Where did you find the instructions to connect the Shark Jack to c2? I'm having a few issues.

 

[InfoSecREDD]

On 12/21/2019 at 3:27 PM, P.Six said:

Where did you find the instructions to connect the Shark Jack to c2? I'm having a few issues.

 

Follow the Set-up instructions Video on the SharkJack Hak5 Forum section to update to newest Firmware to be able to connect to C2 with the C2CONNECT command.

[P.Six]

I updated my firmware but still wasn't able to get it to connect to C2...

 

[s0u1sb4n3]

You need to run c2, create a profile for your device, then download the connection file from c2 and ssh into shark Jack and copy it to the location specified in the documentation. 

[flipchart]

About the documentation:

You find the "documentation" in your C2 webinterface:

1. Click on the 3 dots in the top right corner
2. Help
3. Adding Devices

Quote

1. From the device listing tab, click the (+) Add Device button
2. Name the device and select the device type that applies to the device you wish to add
3. Click the newly added device from the device listing tab to open it
4. Click the setup button to download the device.config provisioning file
5. Copy the device.config provisioning file to the device

WiFi Pineapple NANO & TETRA
scp device.config root@172.16.42.1:/etc/
LAN Turtle
scp device.config root@172.16.84.1:/etc/
Packet Squirrel
scp device.config root@172.16.32.1:/etc/
Signal Owl
scp device.config root@172.16.56.1:/etc/
Shark Jack
scp device.config root@172.16.24.1:/etc/
Screen Crab
Copy the device.config to the Screen Crab's SD Card.

 

Deploy the device with Internet access as per usual and upon bootup the device will connect to this Cloud C² instance. On the Shark Jack, you must start the C² Client manually with

C2CONNECT

 

Further on you need to make sure that your Shark Jack is not halting at the end of your payload, otherwise you wont see it online for longer than a couple of seconds...