SubGlitch1 / OSRipper

AV evading OSX Backdoor and Crypter Framework
https://subglitch1.github.io/OSRipper/
MIT License
274 stars 46 forks source link

Error no such file or directory /dist/oc_or #7

Closed Trusthoodies closed 2 years ago

Trusthoodies commented 2 years ago

Discussed in https://github.com/SubGlitch1/OSRipper/discussions/6

Originally posted by **Trusthoodies** April 2, 2022 I get the error on different linux systems. The error is: No such file or directory: /Home/OSRipper/ocr_or

i cloned the github in my linux system

SubGlitch1 commented 2 years ago

can you please tell me which options you used and copy+paste the exact error. Thank you

Trusthoodies commented 2 years ago

Thanks for the reply! I got the same error as psycho2712. He also started a discussion 5 daya ago. It doesnt matter wich option i choose.

Trusthoodies commented 2 years ago

image

Trusthoodies commented 2 years ago

afbeelding

SubGlitch1 commented 2 years ago

hey, thank you for your detailed report. this seems to be the same issue as this https://github.com/SubGlitch1/OSRipper/issues/3

this error arises because originally i have made this program to be run on macOS which has a different way of compiling than linux. I have fixed it i think it should work not. Please clone again and let me know

Trusthoodies commented 2 years ago

It worked! thank you very much!.

Trusthoodies commented 2 years ago

Now i have another problem, i filled in the right ip address and port but i don't see anything if i run it on my other laptop in the same network. Do you know what this can be? and does it support nrok?

SubGlitch1 commented 2 years ago

u must have selected the replication and trojanisation option. That is only available for macos machines for now. Please deselect that option, generate a new one and let me know how it goes

Trusthoodies commented 2 years ago

Do you mean the obfuscate option? i didnt select that, im using a windows machine for the target. im using option 4 the encrypted tcp. it doesnt work

SubGlitch1 commented 2 years ago

Do you mean the obfuscate option? i didnt select that, im using a windows machine for the target. im using option 4 the encrypted tcp. it doesnt work

hahahahah i understand now. I have recently added a antivm detector which lowers the vt score. it seems to detect your windows machine as a vm (which is propably is) i will disable this for now and make it optional later.

Trusthoodies commented 2 years ago

Thank you!

SubGlitch1 commented 2 years ago

https://github.com/SubGlitch1/OSRipper/commit/7de8867c083bd52124f737f1054151c9b92d6786

here u got brother. Let me know how it goes

Trusthoodies commented 2 years ago

Thank you for the fast reply! unfortunately he doesn't yet. I have not selected the obfuscate option. I also wanted to test the bind option and it doesn't work either.

SubGlitch1 commented 2 years ago

This is very strange as it works for me. I will setup a virtual windows machine and test.

Trusthoodies commented 2 years ago

Thanks! Did you test it on a vm?

Trusthoodies commented 2 years ago

It still doesnt work for me

Trusthoodies commented 2 years ago

Do you maybe have discord or something?

SubGlitch1 commented 2 years ago

Thanks! Did you test it on a vm?

i am busy with a project for university right now which is due tomorow. After tomorow however i plan on heavily developing this so do not worry

Trusthoodies commented 2 years ago

Thanks! Goodluck with your project!

SubGlitch1 commented 2 years ago

hey brother. I have just properly thought about this. If you generate on linux that means that you cannot compile an .exe so that means u must be running it on python on the windows host. That machine probably does not have the dependencies and the program is therefore not running. If you choose to compile it the dependencies will be in the backdoor itself.

Trusthoodies commented 2 years ago

So you tink i need to run this on a Windows machine and then it will work?

SubGlitch1 commented 2 years ago

yeah just compile it. You can also try it on linux. But obv you have yo compile it on the same OS as the target system

Trusthoodies commented 2 years ago

Thanks i will give it a try!

SubGlitch1 commented 2 years ago

Thanks i will give it a try!

pls let me know. Also to answer your question no, I have stopped using discord after getting banned 6 times in a row.

Trusthoodies commented 2 years ago

The obfuscate funtion doesnt work on windows, i got the error OSRipper-0.2.1/dist/ocr_or doesnt exist

SubGlitch1 commented 2 years ago

hey bro thank you for ur patience. I have partitioned my PC and am now running a windows instance. I will make fix this and notify you here when it is done. Thank you for your help. i do appreciate it

SubGlitch1 commented 2 years ago

The obfuscate funtion doesnt work on windows, i got the error OSRipper-0.2.1/dist/ocr_or doesnt exist

this commit might have fixed it brother

Trusthoodies commented 2 years ago

I tested it this morning on my Windows pc but i got this error: afbeelding

SubGlitch1 commented 2 years ago

it says it in the description you need metasploit for the handling

Trusthoodies commented 2 years ago

Thanks! i will test it today! Is the OSRipper also compitable with NROK?

SubGlitch1 commented 2 years ago

Thanks! i will test it today! Is the OSRipper also compitable with NROK?

i am developing version 2.3 rn. I will probably integrate tor hidden services because it is more anonymous and it does not require port forwarding

Trusthoodies commented 2 years ago

That sounds good!

Btw i installed metasploit and i have it on the same path as the OSRipper-main but it still doenst open do you know why?

SubGlitch1 commented 2 years ago

you need to add it to path. https://www.architectryan.com/2018/03/17/add-to-the-path-on-windows-10/ just put the metasploit directory here

Trusthoodies commented 2 years ago

Hello, Thanks for you help! i came alot further. But now when i open it on my other Windows client i get the following "Error" I made the .py file to exe with auto-py-to-exe afbeelding

The file opens on my other client but then close after that and somethimes it says the following: afbeelding

Trusthoodies commented 2 years ago

EDIT: i created a new payload file, after opening the file. The file closes immediatly and the listeners gives and error that the session has died. and this is the Error on my victims side: :12: DeprecationWarning: ssl.wrap_socket() is deprecated, use SSLContext.wrap_socket()

SubGlitch1 commented 2 years ago

why are you compiling it manually?

SubGlitch1 commented 2 years ago

osripper has a option for that you need to use that.

Trusthoodies commented 2 years ago

Which option is that? I dont see thst option, im sorry if i sound dumb but i can t see that option.

SubGlitch1 commented 2 years ago

dont worry my friend it happens to the best of us. this is the option 'Do you want to compile the script into a binary' Just choose y here

SubGlitch1 commented 2 years ago

this should have solved your issue i will close now