search

r00t-3xp10it / venom

venom - C2 shellcode generator/compiler/handler
1.79k stars 600 forks source link

unable to locate pywin,python,pyinstaller,winrar #22

Closed usama7628674 closed 6 years ago

usama7628674 commented 6 years ago

When I run setup.sh script I get this.

[✔] zenity............................[ found ] [✔] msfconsole........................[ found ] [✔] gcc compiler......................[ found ] [✔] mingw64 compiler..................[ found ] [✔] pyherion crypter..................[ found ] [✔] vbs-obfuscator....................[ found ] [✔] apache2 webserver.................[ found ] [!] Venom Domain name Configuration...[ skipp ] [✔] ettercap settings.................[ IPv4 ] [✔] wine64............................[ found ] [✔] wine folder.......................[ found ] [✔] arch sellected....................[ 64bit ] [x] WinRAR.exe [ not found ]

0009:fixme:heap:RtlSetHeapInformation 0x250000 0 0x23fd30 4 stub 0009:fixme:shell:SHAutoComplete stub 0009:fixme:ieframe:PersistStreamInit_InitNew (0x669e0) Could not load wine-gecko. HTML rendering will be disabled. 0009:err:mshtml:create_document_object Failed to init Gecko, returning CLASS_E_CLASSNOTAVAILABLE 0009:fixme:ole:CoCreateInstanceEx no instance created for interface {00000000-0000-0000-c000-000000000046} of class {25336920-03f9-11cf-8fd0-00aa00686f13}, hres is 0x80040111 0009:fixme:ieframe:handle_navigation_error Navigate to error page 0009:fixme:ieframe:bind_to_object BindToObject failed: 800c0010 0009:fixme:shell:BrsFolder_OnCreate flags BIF_NEWDIALOGSTYLE partially implemented 0009:fixme:ntdll:server_ioctl_file Unsupported ioctl 24000 (device=2 access=1 func=0 method=0) 0009:fixme:exec:SHELL_execute flags ignored: 0x00000180 0009:fixme:ieframe:OleInPlaceObject_UIDeactivate (0x669e0) 0009:fixme:ieframe:OleInPlaceObject_InPlaceDeactivate (0x669e0)

003e:fixme:heap:RtlSetHeapInformation 0x240000 0 0x23fd30 4 stub

WARNING: Unable to locate WinRAR
Please Download WinRAR to: venom-main/bin
https://github.com/r00t-3xp10it/venom/blob/master/bin/install_winrar_wine64.exe

[x] pyinstaller [ not found ] Copy to: /drive_c/pyinstaller-2.0 [x] pywin32-220 [ not found ]

Install: python-2.6.6.amd64.msi

002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 0054:fixme:ntdll:NtLockFile I/O completion on lock not implemented yet 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 0054:err:mscoree:LoadLibraryShim error reading registry key for installroot 0054:err:mscoree:LoadLibraryShim error reading registry key for installroot 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 0054:err:mscoree:LoadLibraryShim error reading registry key for installroot 0054:err:mscoree:LoadLibraryShim error reading registry key for installroot 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 0056:fixme:nstc:NSTC2_fnSetControlStyle2 mask & style (0x00000004) contains unsupported style(s): 0x00000004 0056:fixme:shell:IShellBrowser_fnSendControlMsg stub, 0x3d5a0 (2, 1026, a003, 0, 0x23ee30) 0056:fixme:shell:IShellBrowser_fnSendControlMsg stub, 0x3d5a0 (2, 1026, a004, 1, 0x23ee30) 0056:fixme:shell:IShellBrowser_fnSendControlMsg stub, 0x3d5a0 (2, 1025, a003, 1, 0x23ee30) 0056:fixme:shell:IShellBrowser_fnSendControlMsg stub, 0x3d5a0 (2, 1025, a004, 1, 0x23ee30) 0054:err:msi:ITERATE_Actions Execution halted, action L"MaintenanceTypeDlg" returned 1602

Install: pywin32-220.win-amd64-py2.6.exe

wine: Unhandled page fault on read access to 0x7f1128525320 at address 0x7f112aa1af97 (thread 002c), starting debugger... 0009:fixme:heap:RtlSetHeapInformation 0x250000 0 0x23fd30 4 stub

002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet! 002c:err:hid_report:process_hid_report Device reports coming in too fast, last report not read yet!

WARNING: Unable to locate pywin32-220 (x64)
Please Download/Install the follow packets
python-2.6.6.amd64.msi
pywin32-220.win-amd64-py2.6.exe

wine: Unhandled page fault on read access to 0x7fada7be4320 at address 0x7fadb6182f97 (thread 002c), starting debugger... 002c:err:seh:start_debugger Couldn't start debugger ("winedbg --auto 32 88") (1115) Read the Wine Developers Guide on how to set up winedbg or another debugger [✔] Rebuild toolkit settings file.....[ done ] sed: -e expression #1, char 0: no previous regular expression [✔] All checks completed..............[ done ]

Report-Bugs: https://github.com/r00t-3xp10it/venom/issues

Even though they are installed in wine/drive_c directory.I have also tried on live kali and parrot os but still no luck. Version 1.0.14 works fine though.

r00t-3xp10it commented 6 years ago

venom reads the configs from settings file

Also remmenber to config local variable arch


Config WINE_DRIVEC= variable sceenshot


agent 16 pyinstaller funtion

usama7628674 commented 6 years ago

@r00t-3xp10it You're using kali 32 bit.I'll try on kali 32 bit and see if it works or not.

usama7628674 commented 6 years ago

@r00t-3xp10it This time on live kali 32-bit (2018.1).Output of setup.sh is following.

OS:Linux DISTRO:Kali(x86) VERSION:1.0.15 [✔] zenity............................[ found ] [✔] msfconsole........................[ found ] [✔] gcc compiler......................[ found ] [✔] mingw32 compiler..................[ found ] [✔] pyherion crypter..................[ found ] [✔] vbs-obfuscator....................[ found ] [✔] apache2 webserver.................[ found ] [!] Venom Domain name Configuration...[ skipp ] [✔] ettercap settings.................[ IPv4 ] [✔] wine..............................[ found ] [✔] wine folder.......................[ found ] [✔] arch sellected....................[ 32bit ] [x] WinRAR.exe [ not found ]

Could not load wine-gecko. HTML rendering will be disabled. 0009:err:mshtml:create_document_object Failed to init Gecko, returning CLASS_E_CLASSNOTAVAILABLE

WARNING: Unable to locate WinRAR
Please Download WinRAR to: venom-main/bin
https://github.com/r00t-3xp10it/venom/blob/master/bin/install_winrar_wine32.exe

[x] pyinstaller [ not found ] Copy to: /drive_c/pyinstaller-2.0 [x] pywin32-220 [ not found ]

Install: python 2.6.6.msi

0040:err:mscoree:LoadLibraryShim error reading registry key for installroot 0040:err:mscoree:LoadLibraryShim error reading registry key for installroot 0040:err:mscoree:LoadLibraryShim error reading registry key for installroot 0040:err:mscoree:LoadLibraryShim error reading registry key for installroot

Install: pywin32-220.win32-py2.6.exe

wine: Unhandled page fault on read access to 0x7e448c30 at address 0x7ed0acf7 (thread 002f), starting debugger... 002f:err:seh:start_debugger Couldn't start debugger ("winedbg --auto 32 88") (1115) Read the Wine Developers Guide on how to set up winedbg or another debugger

WARNING: Unable to locate pywin32-220 (x86)
Please Download/Install the follow packets
python-2.6.6.msi
pywin32-220.win32-py2.6.exe

[✔] Rebuild toolkit settings file.....[ done ] sed: -e expression #1, char 0: no previous regular expression [✔] All checks completed..............[ done ]

Report-Bugs: https://github.com/r00t-3xp10it/venom/issues

screenshot from 2018-04-10 13-13-43

screenshot from 2018-04-10 13-13-57 Setup is not copying pyinstaller so I have to do it manually but still it could not locate winrar,python,pywin,pyinstaller.

screenshot from 2018-04-10 13-21-11

r00t-3xp10it commented 6 years ago

lets install all things manually (32bits systems)..







sceenshot


Final notes:

As you can see from your sceenshot, the WINE_DRIVEC= local var its not proper defined in settings file, and there for my main tool (venom.sh) can't find the rigth path to run the backend applications..

That msg should say: copy to: /root/.wine/drive_c/pyinstaller-2.0

screenshot

usama7628674 commented 6 years ago

@r00t-3xp10it Ok.I'll give it another shot.

usama7628674 commented 6 years ago

@r00t-3xp10it What should I put in the following box? wine box

Before running setup my settings file of WINE_DRIVEC

image

after running setup it automatically changes to image

problem still persists.

usama7628674 commented 6 years ago

@r00t-3xp10it So here's the story then setup still not locating... but this time I installed everything manually and then executed ./venom.sh and agent 16 is now working fine.

There is something wrong in setup but it doesn't matter now cuz problem is solved. Thanks for your time and helping me to resolve this issue.

r00t-3xp10it commented 6 years ago

1º - in the box "enter .wine folder path" you have left it empty .. wine box so my setup.sh can't find the path because it was not proper inputed, and in the end it only have added the /drive_c to WINE_DRIVEC= variable in the settings file, that configs venom.sh way of running

   (your fault - bad config inputed) IF your .wine folder its under /home/username/.wine
   thats the path we should be inputing, that setup.sh will add later the /drive_c to
   the string (example: /home/username/.wine/drive_c)

2º - if you are using pyinstaller ..then read this : pyinstaller needs hidden imports to work proper .. please read this issue

usama7628674 commented 6 years ago

@r00t-3xp10it I know about hidden imports but pyinstaller converted .py file to .exe without any error.

r00t-3xp10it commented 6 years ago

hey @usama7628674 do you want to help me debug setup.sh in 64bits systems ? after talking to you i have made some changes to setup.sh like:

box

box



Question:

Also i need to know whats the name of .wine folder under 64bits system.. if is .wine or .wine64 <-- i bet some errors came from me not knowing ..

[Debug] we can find the new version of setup.sh here

usama7628674 commented 6 years ago

@r00t-3xp10it I'm ready to help just let me know what you want me to test. Oh,and the name of folder is .wine under my kali 64bit system.

r00t-3xp10it commented 6 years ago

Valueble information (.wine folder name) thanks ..

tell me another thing ... and winrar installed in 64bits its on folder Program Files or Program Files(x86) ??

what i need you to test is:

P.S. here is your award for the help

usama7628674 commented 6 years ago

@r00t-3xp10it Winrar in Program files and I'll test it tomorrow. Thank you for your reward. screenshot from 2018-04-12 19-56-25

usama7628674 commented 6 years ago

@r00t-3xp10it The following output is from new setup after recent commits.

OS:Linux DISTRO:Kali(x64) VERSION:1.0.15 [✔] zenity............................[ found ] [✔] msfconsole........................[ found ] [✔] gcc compiler......................[ found ] [✔] mingw64 compiler..................[ found ] [✔] pyherion crypter..................[ found ] [✔] vbs-obfuscator....................[ found ] [✔] apache2 webserver.................[ found ] [!] Venom Domain name Configuration...[ skipp ] [✔] ettercap settings.................[ IPv4 ] [✔] wine64..............................[ found ] [✔] wine folder.......................[ found ] [✔] arch sellected....................[ 64bit ] [✔] WinRAR.exe........................[ found ] [✔] pyinstaller.......................[ found ] [✔] pywin32-220.......................[ found ] [✔] Rebuild toolkit settings file.....[ done ] sed: -e expression #1, char 0: no previous regular expression [✔] All checks completed..............[ done ]

Report-Bugs: https://github.com/r00t-3xp10it/venom/issues

screenshot from 2018-04-13 08-02-32 in this case yes

screenshot from 2018-04-13 08-04-37

r00t-3xp10it commented 6 years ago

sed: -e expression #1, char 0: no previous regular expression ??? can you check if settings file its proper config?

usama7628674 commented 6 years ago

@r00t-3xp10it screenshot from 2018-04-13 08-14-03

r00t-3xp10it commented 6 years ago

strange bug.. (sed -e) so ..setup.sh was correct config the settings file rigth? and venom ? works well with those configs ? (x64) ..


Offtopic:

box box

here you have it v1.0.15.1 (warning the setup.sh in this version its still the old one) we can find the new version of setup.sh here

iam going to sleep ..good nigth ..and thanks .. :+1:

usama7628674 commented 6 years ago

sleep well.Good bye