search

hatching / vmcloak

Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
483 stars 120 forks source link

Request: Improve VMCloak logging #55

Open lab313ru opened 8 years ago

lab313ru commented 8 years ago

Trying to install adobe9: just python.exe empty window is visible in VirtualBox window. There is no any Adobe processes created in VM, there is no something non-standard processes too.

jbremer commented 8 years ago

I have personally not really tested the 32-bit Windows 7 stuff yet.

lab313ru commented 8 years ago

Could you, please?

razuz commented 8 years ago

I'll take a run with that latest tomorrow ... lets see if I can reproduce that

razuz commented 8 years ago

just tested and it works fine on 32bit. @lab313ru Can you retry ? does this happen all the time you do "vmcloak install" and with any of packages ?

razuz commented 8 years ago

one thing you can try is to click "Ctrl+C" on the python window if that makes any difference

lab313ru commented 8 years ago

Ctrl+C just closes python.exe window. And I cannot install any package with install option.

razuz commented 8 years ago

are you running on latest code from master ?

lab313ru commented 8 years ago

Latest at the day of creating this issue. Host machine is Linux Mint.

razuz commented 8 years ago

sort of running out of ideas :) can vboxnet0 interface and vm see each other ? maybe some iptables rules are killing the comms ?

lab313ru commented 8 years ago

How to check it (ping is working)?

razuz commented 8 years ago

ping is one thing but you can also try to telnet to port 8000 against vm IP from mint side

lab313ru commented 8 years ago

But when installing Windows, it installs Python, so it works, doesn't it?

razuz commented 8 years ago

yes it should ... I'm quite impressed that it cannot install packages there and gets stuck

lab313ru commented 8 years ago

Could you make some log system for vmcloak, so we may find step, when it stucks?

razuz commented 8 years ago

we could do that ... but not this week

p3i0t commented 8 years ago

I got the same problem. I've created a win7 (x64) virtual machine with vmcloak (not fully automatically, I still need to manually click). When I ran "vmcloak install seven0 adobe9", I can see the virtual machine seven0 is running, but doing nothing.

razuz commented 8 years ago

are you running latest version ?

BR, razu

On 02 Jul 2016, at 21:52, wxfighting notifications@github.com wrote:

I got the same problem. I've created a win7 (x64) virtual machine with vmcloak (not fully automatically, I still need to manually click). When I ran "vmcloak install seven0 adobe9", I can see the virtual machine seven0 is running, but doing nothing.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

p3i0t commented 8 years ago

Yes, I am running the latest version. The problem seems solved after I changed another window ISO file. It will be great if you can improve the logging. Anyway, vmcloack is and will be a great tool.

razuz commented 8 years ago

cool :) apart from couple other things I'm working to improve logging ... PR should be upcoming soon

razuz commented 8 years ago

it's just a wild guess, but I think this issue can be closed :) --debug flag has become quite verbose and points out possible issues nicely if there are any specific requests then I'd be happy to hear about them