I can't run script

[sysavenger]

I'm new in python.What should I do next?
Thank you

[BigNerd95]

You have to install pwntools
https://pypi.python.org/pypi/pwntools/3.12.0b0

[sysavenger]

I have to install PySquashfsImage right?
Where is it?
Thank you so much.

[BigNerd95]

sudo pip3 install PySquashfsImage

[sysavenger]

IT'S WORK.:)
Thank you.

[BigNerd95]

💪

[sysavenger]

Do you have any plan to develop dynamically exploit for MIPS or TILES??

[BigNerd95]

I dont have a CCR to debug TILE
I'll update the mips exploit next weeks

[BigNerd95]

Almost done!

[sysavenger]

What should I do next?.

[BigNerd95]

It looks like ropper isnt working
I cant offer support about this

[BigNerd95]

Try reinstalling capstone

[PyrrhaNDie]

Try to use linux, windows has sth wrong

[Ramos-dev]

I've solved this problem.you can search and "cp libcapstone.so /user/local/lib/python3.5/dist-package/capstone/"
@sysavenger

[superlep]

i've this error: IOError: [Errno 2] No such file or directory: 'www_binary' .

[Student992]

@superlep

You need to run this

./tools/getROSbin.py {version number} {architecture} /nova/bin/www www_binary

And then try again

[superlep]

@Student992

perfect. thank you. but anyway with the RouterOS v6.41.1 version it does not seem to work.

[BigNerd95]

...
What does it mean "README"?
Repeat with me: "read" "me"
Again: "r e a d" "m e"

[superlep]

ok. I found a version 6.30.2 i send the exploit and receive this:

Building ROP chain ...
[+] Binary loaded
[+] Loading gadgets, please wait ...
[+] Gadgets loaded!
The ROP chain is 932 bytes long (32768 bytes available)
Opening 2 sockets
Connected
Connected
Stack clash ...
Sent
Sent
Sent
Sending payload
Sent
Starting exploit
Done!

but the file index on the remote machine is this:

1048286330 682858 roteros.dll 6.30.2
1350842837 36391 advtool.dll 6.30.2
4051285026 41895 dhcp.dll 6.30.2
351987088 44477 hotspot.dll 6.30.2
4107262520 44396 mpls.dll 6.30.2
3517454718 47522 ppp.dll 6.30.2
2638975934 60579 roting4.dll 6.30.2
3917752738 49129 secure.dll 6.30.2
2611968186 2542 system.dll 6.30.2
2503533293 71379 wlan5.dll 6.30.2

[BigNerd95]

May be it is not x86

[Student992]

@superlep

Bro, you should try mipsbe as it’s the most used board architecture. So you should try mipsbe first and then x86 if it doesn’t work. And I bet with you, by my tests, it works perfect. Big nerd done a awesome work with it.

The only thing I want to improve on it, is the https (port 443) support, as it doesn’t work yet.

[superlep]

@ ALL

work perfect. is a mips .

but now if i want create a backdoor how can it?

[BigNerd95]

We cant do all the work for you
You have all the necessary to do that
You can run code at each boot using /etc/rc.d/run.d (see the pdf) and you can upload binaries (like complete busybox) using the command described in readme

Good luck

[BigNerd95]

@superlep I added automatic backdoor installation to readme

[superlep]

@BigNerd95 i write email in PVT. Thanks