mandiant / commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
https://www.mandiant.com/resources/blog/commando-vm-windows-offensive-distribution
Apache License 2.0
6.88k stars 1.28k forks source link

commando-vm installation doesn't seem to complete #193

Closed fzrGit closed 3 years ago

fzrGit commented 3 years ago

Hello

I am filling in using google translate.

I'm using win10 with virtualBox. The commando-vm installation doesn't seem to complete. Fill in the log for "C: \ Users \ IEUser \ AppData \ Local \ Boxstarter \ Boxstarter.log".

Also, even if I execute "cinst -y commandovm.win10.config.fireeye -f", the wallpaper will be restored when I restart.

Thank you. boxstarter.log

day1player commented 3 years ago

Thank you for translating. Could you describe in more detail what you mean? Did you restart the machine? What version of Windows 10 are you using?

fzrGit commented 3 years ago

Hello

1 Rebooted. 2 After restarting, the command prompt will start every time you log in automatically. 3 win10 is "17763.r5 release.180914-1434".

Thank you.

day1player commented 3 years ago

it sounds like boxstarter is caught in a loop, what happens when you let it finish?

fzrGit commented 3 years ago

Hello

The command prompt that appears after a reboot will close automatically. When you reboot, the command prompt will be displayed and it will close automatically. It looks like the installation is running every time because the installation ends with an error.

Thank you.

day1player commented 3 years ago

@fzrGit I would recommend running the .\install.ps1 script again and letting it run through to completion again. You will probably see some errors along the install but I think that will clear the auto login from boxstarter

fzrGit commented 3 years ago

Hello

I ran install.ps with administrator privileges and rebooted, but the command prompt continues to appear after the reboot. I will attach the log.

Thank you. boxstarter.log PowerShell_transcript.COMMANDO.2h0MI+S1.20210211133300.txt PowerShell_transcript.COMMANDO.5alScMGb.20210211133342.txt PowerShell_transcript.COMMANDO.65IOVEUz.20210211133437.txt PowerShell_transcript.COMMANDO.AK5u1r1e.20210211133440.txt PowerShell_transcript.COMMANDO.BXLoJGES.20210211133336.txt

day1player commented 3 years ago

@fzrGit you shouldnt have to manually reboot.. Please run the install script again as administrator and let it run through to completion.

Looking through the log it looks like the auto run was not removed from the registry. Boxstarter will do that automatically if you let the install script complete

fzrGit commented 3 years ago

Hello

I waited for about an hour without restarting manually, but it doesn't seem to go beyond the screenshot screen.

Thank you. screenshot

fzrGit commented 3 years ago

Hello

I tried running cinst-y commandovm.win10.config.fireeye--force with boxstarter-post-restart.bat disabled. The background changes to the commando-vm background, but it will be restored on reboot. Also, when I run cinst-y commandovm.win10.config.fireeye--force, the operation stops at the screenshot screen.

Thank you very much.

2 1

day1player commented 3 years ago

@fzrGit can you try running the following command using PowerShell?

C:\ProgramData\Boxstarter\Boxstarter.Bootstrapper\Cleanup-Boxstarter.ps1; Cleanup-Boxstarter

You will probably also have to use regedit to change the following key/value from 1 to 0:

HKLM:\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon

This looks to be a boxstarter problem, but this should fix it temporarily.. Please let me know if the issues continue

fzrGit commented 3 years ago

Hello

I did the method you taught me and restarted. After restarting, it became as follows. 1 You can no longer log in automatically. 2 The command prompt is no longer displayed.

After rebooting, I installed with install.ps1. It became as follows. 1 You will not be logged in automatically. 2 The command prompt is not displayed. 3 The wallpaper remains the attached image.

Thank you. screenshot boxstarter.log

day1player commented 3 years ago

@fzrGit can you run this command?

cinst -y commandovm.win10.config.fireeye -f
day1player commented 3 years ago

If that doesnt work I would assume your trial has expired and you can run slrmgr /rearm and then run the above command again

fzrGit commented 3 years ago

Hello

1 The reboot will be completed automatically. The background changed after the reboot, but after about a minute it returned to the original background.

2 slmgr / rearm completed successfully.

3 I'm trying to reinstall.

fzrGit commented 3 years ago

Hello

I reinstalled it. 1 The command execution window was not displayed after installation. 2 The background has not changed.

It seems that it can be used. Thank you very much.