I'm using HackTheBox and I was struggling with an Evil-WInRM error, so I'll share it as a memo.




If an error occurs in Evil-WinRM
When I tried to use Evil-WinRM, I got an error saying, "An error of type HTTPClient::ReceiveTimeoutError happened, message is executed expired."
┌──(hack_lab㉿DESKTOP-O3RMU7H)-[~/HackTheBox] └─$ ruby ../HackTools/evil-winrm-master/evil-winrm.rb -i 10.129.120.32 -u Chase -p 'Q4)sJu\Y8qz*A3?d' Evil-WinRM shell v3.5 Warning: Remote path completions is disabled due to ruby limitation: quotation_detection_proc() function is unconfigured on this machine Data: For more information, check Evil-WinRM GitHub: https://github.com/Hackplayers/evil-winrm#Remote-path-completion Info: Establishing connection to remote endpoint Error: An error of type HTTPClient::ReceiveTimeoutError happened, message is execution expired Error: Exiting with code 1
After trying various things, I found that it would be possible to resolve the problem by changing the PROTOCOL of openVPN from "UDP1337" to "TCP 443".

I'm not sure if this was the direct cause, but I'm able to log in!
┌──(hack_lab㉿DESKTOP-O3RMU7H)-[~/HackTheBox] └─$ ruby ../HackTools/evil-winrm-master/evil-winrm.rb -i 10.129.96.157 -u Chase -p 'Q4)sJu\Y8qz*A3?d' Evil-WinRM shell v3.5 Warning: Remote path completions is disabled due to ruby limitation: quotation_detection_proc() function is unconfigured on this machine Data: For more information, check Evil-WinRM GitHub: https://github.com/Hackplayers/evil-winrm#Remote-path-completion Info: Establishing connection to remote endpoint *Evil-WinRM* PS C:\Users\Chase\Documents>
summary
OpenVPN has a lot of unexpected errors, so it may not progress very well. . .
Is this a learning experience too? (lol)
References and Sites
--