mufeedvh / moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.
MIT License
1.35k stars 123 forks source link

Error: Os { code: 2, kind: NotFound, message: "No such file or directory" } #10

Open w3xsense opened 2 years ago

w3xsense commented 2 years ago

hello.. it seem moonwalk get is broken

$ ./moonwalk start
[INFO] Found /dev/shm/.MOONWALK as world writable. [INFO] Set /dev/shm/.MOONWALK as the logging directory [SKIPPED] Logging /var/log/messages requires sudo privileges. [SKIPPED] Logging /var/log/auth.log requires sudo privileges. [SKIPPED] Logging /var/log/kern.log requires sudo privileges. [SKIPPED] Logging /var/log/boot.log requires sudo privileges. [SKIPPED] Logging /var/log/lighttpd requires sudo privileges. [SUCCESS] Saved the current log states.

$ /tmp/moon  ./moonwalk get nolog.txt

[>] To restore the access/modify timestamp of this file, use command ↓

$ touch -a -d '2022-10-08 12:33:26.379565377 +0800' -m -d '2022-10-08 12:33:26.379565377 +0800' nolog.txt

$ /tmp/moon  ./moonwalk finish
Error: Os { code: 2, kind: NotFound, message: "No such file or directory" }

mufeedvh commented 2 years ago

Hey @w3xsense, can you please try now, please try again with a fresh install. If it still isn't working, I will look into it in detail next week. Thanks!

w3xsense commented 2 years ago

hey @mufeedvh, already did fresh install with $ cargo install --git https://github.com/mufeedvh/moonwalk.git,

genevera commented 1 year ago

This is happening for me as well on linux. I think the way a world-writable directory is found needs to be altered a bit.