hasherezade / process_ghosting

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
MIT License
631 stars 113 forks source link

build error #1

Open ghost opened 3 years ago

ghost commented 3 years ago

when i try to build the solution i get this any help please

Severity Code Description Project File Line Suppression State Error LNK2019 unresolved external symbol "bool cdecl buffer_remote_peb(void ,struct _PROCESS_BASIC_INFORMATION &,struct _PEB &)" (?buffer_remote_peb@@YA_NPAXAAU_PROCESS_BASIC_INFORMATION@@AAU_PEB@@@Z) referenced in function "bool __cdecl process_ghost(wchar_t ,unsigned char *,unsigned long)" (?process_ghost@@YA_NPA_WPAEK@Z) WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\WindowsProject4.obj 1
Error LNK2019 unresolved external symbol "bool
cdecl setup_process_parameters(void ,struct _PROCESS_BASIC_INFORMATION &,wchar_t )" (?setup_process_parameters@@YA_NPAXAAU_PROCESS_BASIC_INFORMATION@@PA_W@Z) referenced in function "bool cdecl process_ghost(wchar_t ,unsigned char ,unsigned long)" (?process_ghost@@YA_NPA_WPAEK@Z) WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\WindowsProject4.obj 1
Error LNK2019 unresolved external symbol "unsigned long cdecl get_entry_point_rva(unsigned char const *)" (?get_entry_point_rva@@YAKPBE@Z) referenced in function "bool cdecl process_ghost(wchar_t ,unsigned char ,unsigned long)" (?process_ghost@@YA_NPA_WPAEK@Z) WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\WindowsProject4.obj 1
Error LNK2019 unresolved external symbol "unsigned char *
cdecl buffer_payload(wchar_t ,unsigned int &)" (?buffer_payload@@YAPAEPA_WAAI@Z) referenced in function _wmain WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\WindowsProject4.obj 1
Error LNK2019 unresolved external symbol "void __cdecl free_buffer(unsigned char
,unsigned int)" (?free_buffer@@YAXPAEI@Z) referenced in function _wmain WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\WindowsProject4.obj 1
Error LNK2019 unresolved external symbol "bool cdecl get_calc_path(wchar_t ,unsigned long,bool)" (?get_calc_path@@YA_NPA_WK_N@Z) referenced in function _wmain WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\WindowsProject4.obj 1
Error LNK2019 unresolved external symbol "bool cdecl init_ntdll_func(void)" (?init_ntdll_func@@YA_NXZ) referenced in function _wmain WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\WindowsProject4.obj 1
Error LNK2001 unresolved external symbol "long (
stdcall
NtCreateProcessEx)(void ,unsigned long,struct _OBJECT_ATTRIBUTES ,void ,unsigned long,void ,void ,void ,unsigned char)" (?NtCreateProcessEx@@3P6GJPAPAXKPAU_OBJECT_ATTRIBUTES@@PAXK222E@ZA) WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\WindowsProject4.obj 1
Error LNK2001 unresolved external symbol "long (__stdcall
NtCreateThreadEx)(void ,unsigned long,struct _OBJECT_ATTRIBUTES ,void ,void ,void ,unsigned long,unsigned long,unsigned long,unsigned long,void *)" (?NtCreateThreadEx@@3P6GJPAPAXKPAU_OBJECT_ATTRIBUTES@@PAX22KKKK2@ZA) WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\WindowsProject4.obj 1
Error LNK2019 unresolved external symbol _WinMain@16 referenced in function "int
cdecl invoke_main(void)" (?invoke_main@@YAHXZ) WindowsProject4 C:\Users\aliendell\source\repos\gho\WindowsProject4\MSVCRTD.lib(exe_winmain.obj) 1
Error LNK1120 10 unresolved externals WindowsProject4 C:\Users\aliendell\source\repos\gho\Debug\WindowsProject4.exe 1

hasherezade commented 3 years ago

how do you build it? did you generate the Visual Studio project from the CMake? you need to do is similar to demonstrated here.

also, if you just want to test, you don't need to build by yourself, just download the ready-made builds from the AppVeyor server ("Artifacts" tab), i.e. https://ci.appveyor.com/project/hasherezade/process-ghosting/build/job/cwjgs59gt6k0wk1e/artifacts

ghost commented 3 years ago

ok thanks for helping ...good share by the way

hasherezade commented 3 years ago

did you manage to get it build?

YellowBlueBuzz commented 3 years ago

how do you build it? did you generate the Visual Studio project from the CMake? you need to do is similar to demonstrated here.

also, if you just want to test, you don't need to build by yourself, just download the ready-made builds from the AppVeyor server ("Artifacts" tab), i.e. https://ci.appveyor.com/project/hasherezade/process-ghosting/build/job/cwjgs59gt6k0wk1e/artifacts

thank you for being noob friendly Miss Beautiful Aleksandra Doniec 😍😍😍

zuchuanchengxuyuan commented 3 years ago
  1. mkdir build
  2. cd build
  3. cmake.exe .. -A x64
  4. cmake.exe -DCMAKE_INSTALL_PREFIX:PATH=%APPVEYOR_BUILD_FOLDER%/%APPVEYOR_REPO_COMMIT% ..
  5. cmake.exe --build . --config %CONFIGURATION% --target install 如果报错 就用 visual studio 2019编译