optiv / ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.
2.71k stars 503 forks source link

Update Utils.go to fix garble download and execution issues on Windows #79

Closed byinarie closed 11 months ago

byinarie commented 1 year ago

This code was forked from https://github.com/HopHouse/Freeze/blob/main/Utils/Utils.go#L34

This was tested on both Windows 10 (latest) and Mac (latest)

The issue on Windows was garble not downloading into .\lib and would throw errors. @HopHouse fixed this for Freeze and currently has a PR https://github.com/optiv/Freeze/pull/9/commits/165b5df03f0eed96c736a76b068f2c3dc6d3fae2#diff-2edc8f2e379b1ad6976f5ef3eb193a0eb95f9795a62e43abc4ac592d86a90141

The same issue is happening with ScareCrow on Windows

byinarie commented 1 year ago

Before fix: image

After fix: image