x41x41x90
commented
9 years ago Hey Robert, hopefully I can lend a hand. :)
It looks like you may have ssdeep installed, however you'll need the python implementation of it. Try this here:
https://pypi.python.org/pypi/ssdeep/2.9-0.3
or just "pip install ssdeep" to see if you can get ssdeep to import.
If that doesn't work and you're not able to get ssdeep working, change this line:
tSsdeep = ssdeep.hash(each)#hashlib.sha256(each).hexdigest()
ssdeep.hash(each)
to this:
tSsdeep = hashlib.sha256(each).hexdigest() #ssdeep.hash(each)
This will save sha256 hash as ssdeep, but it should be enough to get it working for you. Let me know how it works, and glad you liked the presentation!
Regards,
--Ronnie @iHeartMalware
On Tue, Nov 11, 2014 at 4:56 PM, oasec1 notifications@github.com wrote:
I got this error while attempting to run the sample;
robert@ubuntu:/opt/pm_shredder$ sudo cat YO\ this\ is\ BAD\ !\ \ \ FW-\ Voice\ Message.eml | ./shredder.py Traceback (most recent call last): File "./shredder.py", line 27, in import ssdeep # for fuzzy hashes // TEMPORARILY REMOVED ImportError: No module named ssdeep
After commenting that line out in the shredder.py file i got this error;
robert@ubuntu:/opt/pm_shredder$ sudo cat YO\ this\ is\ BAD\ !\ \ \ FW-\ Voice\ Message.eml | ./shredder.py Traceback (most recent call last): File "./shredder.py", line 204, in parse_the_email(my_email) # Does the magic, calls def parse_the_email(email) File "./shredder.py", line 167, in parse_the_email tSsdeep = ssdeep.hash(each)#hashlib.sha256(each).hexdigest()
ssdeep.hash(each)
NameError: global name 'ssdeep' is not defined
SSDeep is installed see here;
robert@ubuntu:/opt$ sudo apt-get install ssdeep Reading package lists... Done Building dependency tree Reading state information... Done ssdeep is already the newest version. 0 upgraded, 0 newly installed, 0 to remove and 5 not upgraded. robert@ubuntu:/opt$
I loved your presentation,Enjoyed All Your Metadatas Are Belong To Me: Reverse Engineering Emails on an Enterprise?
Thanks for sharing this concept. Robert
— Reply to this email directly or view it on GitHub https://github.com/x41x41x90/pm_shredder/issues/1.
oasec1
I got this error while attempting to run the sample;
robert@ubuntu:/opt/pm_shredder$ sudo cat YO\ this\ is\ BAD\ !\ \ \ FW-\ Voice\ Message.eml | ./shredder.py Traceback (most recent call last): File "./shredder.py", line 27, in
import ssdeep # for fuzzy hashes // TEMPORARILY REMOVED
ImportError: No module named ssdeep
After commenting that line out in the shredder.py file i got this error;
robert@ubuntu:/opt/pm_shredder$ sudo cat YO\ this\ is\ BAD\ !\ \ \ FW-\ Voice\ Message.eml | ./shredder.py Traceback (most recent call last): File "./shredder.py", line 204, in
parse_the_email(my_email) # Does the magic, calls def parse_the_email(email)
File "./shredder.py", line 167, in parse_the_email
tSsdeep = ssdeep.hash(each)#hashlib.sha256(each).hexdigest() #ssdeep.hash(each)
NameError: global name 'ssdeep' is not defined
SSDeep is installed see here;
robert@ubuntu:/opt$ sudo apt-get install ssdeep Reading package lists... Done Building dependency tree Reading state information... Done ssdeep is already the newest version. 0 upgraded, 0 newly installed, 0 to remove and 5 not upgraded. robert@ubuntu:/opt$
I loved your presentation,Enjoyed All Your Metadatas Are Belong To Me: Reverse Engineering Emails on an Enterprise?
Thanks for sharing this concept. Robert