Stage-Listener: Unsupported staging protocol: http

[Indigo-10]

After downloading sliver from source, changing the donut.go file to disable AMSI Bypass, and compiling the binaries. When trying to start an HTTP stage-listener, I am unable to, and am faced with the error Unsupported staging protocol: http

Steps to reproduce the behavior:

1. Clone the repository
2. Head to sliver/server/generate/donut.go
3. Change Bypass: 3 -> 1. // 1=skip, 2=abort on fail, 3=continue on fail.
4. Compile binary using make
5. ./sliver-server
6. mtls
7. profiles new beacon --http http://IP:80 --debug --format shellcode win-shellcode
8. stage-listener --profile win-shellcode --url http://IP:80 --aes-encrypt-key 'D(G+KbPeShVmYq3t' --aes-encrypt-iv '8y/B?E(G+KbPeShV'
9. See Error

Expected behavior
Expected stage-listener to serve shellcode without donut AMSI bypass.

Screenshots

Desktop (please complete the following information):

• OS: Kali

[Indigo-10]

@rkervella if you don’t mind taking a peek

[TimBF]

that's expected we've changed the way http staging works in the master branch. There's a tutorial here https://sliver.sh/tutorials?name=4+-+HTTP+Payload+staging

[TimBF]

the documentation is still a work in progress, for shellcode you'll want to encode your stage, otherwise it will mess up the http response

[Indigo-10]

UPDATE: I am a bit empty in the brain, but I figured out how to serve the shellcode using a stage listener WITHOUT AES encryption or encoding as you were saying @TimBF (see below)

However, the issue lies in trying to serve the shellcode using AES encryption. (See below)

1. When curling the endpoint I am returned a 32 byte string, where the first 16 bytes are the IV, my script accounts for this due to issue Stager doesn't work as expected #1079 , but I still believe I am supposed to be returned more data than what I am given.
2. Whenever decrypting the shellcode, the hex contents are only repeating one's and zero's, nothing else
3. Please note, I was able to decrypt shellcode using AES encryption before this version.

Any help is appreciated.

[Indigo-10]

I got it to work, but only if compressed by deflate9, gzip, or such not standalone AES encryption