Skip to content

Troubleshooting

freefirex edited this page Jan 19, 2024 · 1 revision

Cannot queue up module tasks?

Have you approved the agent and has it been fully onboarded?

Getting an error on the Outlook Client related to ActiveX

Sometimes the Internet Explorer zone settings has been hardened and preventing scripts from running. This will break Specula and usage of Outlook homepage. If it is in a lab, attempt to reset the IE zones back to default.

A task is not finishing

If you are seeing a task not finishing after repeated checkins, the module could be doing something wrong or something is preventing it from finishing. To fix this you can use qdel inside the interact menu to delete the one task that is not finishing or you can use qdel * to remove the entire queue.

I have hooked an agent, but I am not getting callbacks

Most issue common is that Outlook needs to be fully closed (double check in process explorer/task manager) and started after the registry key is initially set. If you are doing this on an engagement and someone successfully got hooked, you most likely need to wait until the user either restarts Outlook or the computer for it to start working.

I could not find the answer to my questions here

We have setup a discord channel on the TrustedSec Discord server, where you can ask questions. The channel name is Specula. TrustedSec Discord Server