search

improsec / calderaToAttire

7 stars 3 forks source link

Error when running script. I've tried removing the agent output. Same error #3

Open cochraj2 opened 1 year ago

cochraj2 commented 1 year ago

lab@Lab-VECTR:~/Desktop/calderaToAttire-main$ python3 CalderaToAttire.py ThreatHunting_Collection_full-report.json Traceback (most recent call last): File "/home/lab/Desktop/calderaToAttire-main/CalderaToAttire.py", line 116, in main(sys.argv[1]) File "/home/lab/Desktop/calderaToAttire-main/CalderaToAttire.py", line 109, in main outputAgent(data, agentDict[agent], agent) File "/home/lab/Desktop/calderaToAttire-main/CalderaToAttire.py", line 96, in outputAgent out = outputJson(fulldata, agentDict, agent) File "/home/lab/Desktop/calderaToAttire-main/CalderaToAttire.py", line 91, in outputJson output['procedures'].append(procs(ability, index)) File "/home/lab/Desktop/calderaToAttire-main/CalderaToAttire.py", line 80, in procs procDict['steps'] = steps(step, index) File "/home/lab/Desktop/calderaToAttire-main/CalderaToAttire.py", line 46, in steps stepDict['command'] = base64.b64decode(step['command']).decode('utf-8') UnicodeDecodeError: 'utf-8' codec can't decode byte 0xeb in position 1: invalid continuation byte lab@Lab-VECTR:~/Desktop/calderaToAttire-main$

improg00n commented 1 year ago

Hi,

I'm unsure if the strikethrough means that you managed to solve it yourself. If not, could you please provide a sample output I can test with?

cochraj2 commented 1 year ago

I'm not sure why the strikethrough happened. I have attached the output that I'm having the issue with. ThreatHunting_Collection_full-report 2.json.zip

cochraj2 commented 1 year ago

Any update? Any help would be very helpful!

improg00n commented 1 year ago

Unfortunately, I do not currently have the time needed to look into this.

q-a-z commented 6 months ago

edit line 67 to output = step['output']['stdout'] + step['output']['stderr']