View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0004164Kali LinuxKali Package Bugpublic2017-08-19 18:382018-02-21 09:42
Reporterheistrocker Assigned To 
PriorityhighSeverityminorReproducibilityalways
Status closedResolutionopen 
Product Versionkali-dev 
Summary0004164: Old version of ncat.exe in ncat-w32 incompatible SSL with current ncat 7.60
Description

When using the Kali provided ncat.exe binary to set up SSL encrypted connections, the Windows binary and Kali binary cannot negotiate an SSL connection.

The root cause is that the Windows binary can only connect using SSLv3, and the Kali binary does not support SSLv3 anymore.

This issue was encountered during the lab exercises for PWK. Please resolve this issue by packaging a newer version of ncat (preferably with a statically included DLL, see below) in ncat-w32.

Steps To Reproduce
  1. Install the latest packages wine32, ncat-w32 and nmap
  2. In one terminal, run:

    wine /usr/share/ncat-w32/ncat.exe -nlvp 4444 --ssl

  3. In another terminal run:

    ncat -nv 127.0.0.1 4444 --ssl

Expected result:
The connection succeeds

Actual result:
The connection is refused with the following errors:

Ncat: Version 5.59BETA1 ( http://nmap.org/ncat )
Ncat: Generating a temporary 1024-bit RSA key. Use --ssl-key and --ssl-cert to use a permanent one.
Ncat: SHA-1 fingerprint: FA7F B6B0 8617 52AA F8EC D1A3 2420 BFBA 67E7 703C
Ncat: Listening on 0.0.0.0:4444
Ncat: Connection from 127.0.0.1:40742.
Ncat: Failed SSL connection from 127.0.0.1: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

When connecting the Windows ncat to the Kali ncat, the errors are:

ncat -nvlp 4444 --ssl

Ncat: Version 7.60 ( https://nmap.org/ncat )
<snip>
Ncat: Failed SSL connection from 127.0.0.1: error:1417D18C:SSL routines:tls_process_client_hello:version too low

Please note that this can also be reproduced using a Windows to run the Windows executable. It is not a Wine issue.

Additional Information

A workaround for this issue is to download the latest version of Windows x86 nmap and using ncat 7.60 on Windows.

However, to run this version of ncat, MSVCR120.dll must be present on the Windows system (installed by Visual C++ Redistributable Packages for Visual Studio 2013). As such it would be best if Kali provides a package with a monolithic exe that contains all necessary dependencies if possible.

Activities

g0tmi1k

g0tmi1k

2018-02-21 09:42

administrator   ~0008761

Due to the age of the OS (Kali Moto [v1], Kali Safi [v2], Kali Rolling 2016.x/2017.1), these legacy versions are no longer supported.
We will be closing this ticket due to inactivity.

Please could you see if you are able to replicate this issue with the latest version of Kali Linux - https://www.kali.org/downloads/)?

If you are still facing the same problem, feel free to re-open the ticket. If you choose to do this, could you provide more information to the issue you are facing,and also give information about your setup?
For more information, please read: https://kali.training/topic/filing-a-good-bug-report/

Issue History

Date Modified Username Field Change
2017-08-19 18:38 heistrocker New Issue
2018-02-21 09:42 g0tmi1k Note Added: 0008761
2018-02-21 09:42 g0tmi1k Status new => closed