search

mandiant / commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
https://www.mandiant.com/resources/blog/commando-vm-windows-offensive-distribution
Apache License 2.0
6.86k stars 1.28k forks source link

Resource Hacker hashing error #307

Closed sw1ndl3d closed 10 months ago

sw1ndl3d commented 11 months ago

Describe the bug and expected behavior When beginning the base install of commando, I specifically was receiving and error for the Resource Hacker package from chocolatey. At first glance, it says that it was a mismatch in hashes. While this may be true, I believe the issue stems from the package name that is being referenced somewhere? I tried looking through files on both VM-Packages and the commando-vm but wasn't successful in seeing where the error may have stemmed from.

To Reproduce Steps to reproduce the behavior:

  1. Base install of commando
  2. See error resource_hacker_error choco_reshack_install

Version

sw1ndl3d commented 11 months ago

Not sure if this is the issue, but the chocolateyInstall.ps1 that is provided for Resource Hacker includes a cmdlet that does not appear to exist by default? Perhaps this is breaking the install process because it isn't unzipping the zip file, resulting in no .exe being available to run? resource_hacker_choco_install

day1player commented 10 months ago

@sw1ndl3d This issue snuck by me here, sorry for the delay.. the source code for this package is located here: https://github.com/chocolatey-community/chocolatey-packages/tree/master/automatic/reshack

It is not maintained by us.

It looks like you maybe didnt run your install command in an admin prompt? I was not able to reproduce:

image

The Install-ChocolateyZipPackage function is a part of the Chocolatey suite: https://docs.chocolatey.org/en-us/create/functions/install-chocolateyzippackage#mainContent

I am going to close this issue since I am not able to reproduce. Please let me know if you need anymore help!