search

screetsec / TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
GNU General Public License v3.0
9.46k stars 2.26k forks source link

error create embeded backdoor factory (point 5) #57

Closed papahjahat closed 7 years ago

papahjahat commented 7 years ago 
     Author:    Joshua Pitts
     Email:     the.midnite.runr[-at ]gmail<d o-t>com
     Twitter:   @midnite_runr
     IRC:       freenode.net #BDFactory

     Version:   3.4.2

[] In the backdoor module [] Checking if binary is supported [] Gathering file info [] Reading win32 entry instructions [] Looking for and setting selected shellcode [] Creating win32 resume execution stub Traceback (most recent call last): File "/usr/share/backdoor-factory/backdoor.py", line 62, in class bdfMain(): File "/usr/share/backdoor-factory/backdoor.py", line 610, in bdfMain result = supported_file.run_this() File "/usr/share/backdoor-factory/pebin.py", line 168, in run_this return self.patch_pe() File "/usr/share/backdoor-factory/pebin.py", line 1799, in patchpe , self.flItms['resumeExe'] = targetFile.resume_execution_32() File "/usr/share/backdoor-factory/intel/intelCore.py", line 340, in resume_execution_32 CallValue = int(CallValue, 16) ValueError: invalid literal for int() with base 16: 'dword ptr [0x402000]' Shell Saved To /backdoored/output/ press any key to continue

peterpt commented 7 years ago

does that happen with every exe you try , or just a particular executable .

test it with putty.exe in PE folder of fatrat if you get the same issue . around here everything is working fine . https://s24.postimg.org/p8ihbmw9x/024.png https://s18.postimg.org/tyotlbit5/025.png

If you going to reply , then write all the steps and options you took until you get that error .

btw , option 5 does not use backdoor factory , only option 4 like in images before .