search

mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Apache License 2.0
6.35k stars 896 forks source link

Chocolateyinstall Script References Latest with Explicit SHA256 Hash Causing Mismatch #477

Closed tylerwhardy closed 1 year ago

tylerwhardy commented 1 year ago

In the chocolatey installation ps1 scripts, the latest version of several libraries are called. However, an explicit SHA256 check is performed using an outdated checksum. Either the sha256sum should be updated per the below or the install script include the --ignore-checksums flag

metasploitframework-latest.msi is referenced and fails checksum requirements. Current value is 3247D95D548455D3D59E4977AF48954A574CCE0CAB3C9634CBAD1ECE85668426 but expected value is 96a505d2e72ed2fbab63187c33bc694396649d0d88ae1fb54b2c01c3f583c06e

SysinternalsSuite.zip is downloaded from https://download.sysinternals.com/files/SysinternalsSuite.zip however, it has been updated since the last SHA256 publish to flare-vm. Current value is 1A07DC0F192EFCCCBF5DCE3294254D04D7C7F9A94752EE07D63606606EF9EBBF but expected value is 6ceac973bed6154015e1f82c573d464485461a433bd7849fe25d3312aae96b04

tylerwhardy commented 1 year ago

Moving this to the VM-Packages repo