Jump to content

Hak5 C2 Service Running, but Server Connection and TLS Handshake Errors

cr38g

By cr38g
in Hak5 Cloud C²

 Share
Go to solution Solved by cr38g,

Recommended Posts

cr38g Contributor

cr38g

Posted
Posted

Hak5 C2 Service is running, but I am getting this server connection error, and TLS handshake error. Every command was entered correctly, but don't know what it means.

*** System restart required ***
Last login: Mon Oct 23 18:42:02 2023 from 72.21.217.109
ubuntu@ip-XX.XXX.XXX.XXX:~$ sudo systemctl status hak5.service
● hak5.service - Hak5 C2
     Loaded: loaded (/etc/systemd/system/hak5.service; enabled; vendor preset: enabled)
     Active: active (running) since Mon 2023-10-23 02:07:40 UTC; 16h ago
   Main PID: 45391 (c2-3.3.0_amd64_)
      Tasks: 18 (limit: 1134)
     Memory: 26.7M
     CGroup: /system.slice/hak5.service
             ├─45391 /usr/local/bin/c2-3.3.0_amd64_linux -hostname website.com -https -db /var/hak5c2/c2.db
             └─45400 /usr/local/bin/c2-3.3.0_amd64_linux -hostname website.com -https -db /var/hak5c2/c2.db

Oct 23 18:57:09 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 18:57:09 http2: server connection error from XX.XXX.XXX.XXX:53119: connection error: PROTOCOL_ERROR
Oct 23 18:57:09 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 18:57:09 http2: server connection error from XX.XXX.XXX.XXX:53119: connection error: PROTOCOL_ERROR
Oct 23 18:57:09 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 18:57:09 http2: server connection error from XX.XXX.XXX.XXX:53119: connection error: PROTOCOL_ERROR
Oct 23 18:57:09 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 18:57:09 http2: server connection error from XX.XXX.XXX.XXX:53119: connection error: PROTOCOL_ERROR
Oct 23 18:58:29 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 18:58:29 http: TLS handshake error from XX.XXX.XXX.XXX:47059: acme/autocert: missing server name
Oct 23 18:59:09 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 18:59:09 http2: server connection error from XX.XXX.XXX.XXX:53219: connection error: PROTOCOL_ERROR
Oct 23 18:59:09 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 18:59:09 http2: server connection error from XX.XXX.XXX.XXX:53219: connection error: PROTOCOL_ERROR
Oct 23 18:59:09 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 18:59:09 http2: server connection error from XX.XXX.XXX.XXX:53219: connection error: PROTOCOL_ERROR
Oct 23 18:59:09 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 18:59:09 http2: server connection error from XX.XXX.XXX.XXX:53219: connection error: PROTOCOL_ERROR
Oct 23 19:03:37 ip-XX.XXX.XXX.XXX c2-3.3.0_amd64_linux[45400]: 2023/10/23 19:03:37 http: TLS handshake error from XX.XXX.XXX.XXX:50470: acme/autocert: host "XX.XXX.XXX.XXX" not co>

 

Link to comment
Share on other sites
dark_pyrro Grand Master

dark_pyrro

Posted
Posted

no problem, if you open a web browser and load your C2 server web interface in the browser (in simple terms "visiting your C2 server using a browser"), can you see your visit in the service status output, i.e.

1) Open your C2 server URL in your browser (note the time)

2) check the C2 server service status using the same command that you displayed in your first post

Are there error message entries (http2) in the status output that correlates with your attempts to load the C2 user interface in your web browser?

Link to comment
Share on other sites
cr38g Contributor

cr38g

Posted
  • Author
Posted

You are correct. I thought it should read the same time as mine, but I just realize the server is in another State. So, why are I am getting now a Dependency After=hak5.service dropped? Is this another problem additional from the handshake error?

Link to comment
Share on other sites
cr38g Contributor

cr38g

Posted
  • Author
Posted (edited)

I just noticed that when I go to my Public static IP address from the Amazon AWS server, it does not connect to my website, even though my website is attached to the Amazon AWS Public static IP. I think this is the culprit.

When I go to my website, it shows the Cloud C2 login page. I can login, but it show offline from my Mark VII.

What you think?

Edited by cr38g
Link to comment
Share on other sites
cr38g Contributor

cr38g

Posted
  • Author
Posted (edited)

When I login into my Cloud C2 page, it list my Mark VII device, it shows the device is offline. Somehow my server is not seeing my device.

So I believe the way that it should work is...

1. DNS (my website) sees my...

2. Amazon AWS server which sees my...

3. Cloud C2 Login page, and then I can access my...

4. Mark VII

Am I right or not?

Edited by cr38g
Link to comment
Share on other sites
cr38g Contributor

cr38g

Posted
  • Author
Posted

When I type my website, it shows me the Cloud C2 login page. When I logged in, it showed me the device, in my case the Pineapple Mark VII, but it shows offline. The communication between my AWS server and my website service is there. Somehow the communication between my Amazon AWS server and my Pineapple Mark VII is not there. I'm scratching my head.  😞

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...