Skip to content

Linux arm64 implant (and probably openaev agent) don't work #5081

@impolitepanda

Description

@impolitepanda

Description

To downaload the implant on a linux system (for the agent as well, I believe, but needs checking), the download script uses uname -m to check for which architecture it needs to download the executable program.

In openaev, we only support two values for architectures, on all platforms : x86_64 and arm64.
Unfortunately, uname -m on an arm64 based linux will not return arm64, but mainly aarch64, and a list of other possibilities.

Therefore, we get an Unsupported architecture error on these systems

Environment

  1. OS (where OpenAEV server runs): Implant on arm64 based linux systems
  2. OpenAEV version: all versions
  3. OpenAEV client: implant
  4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Find a suitable arm64 linux machine
  2. Install any supported EDR on it
  3. Try to execute a payload

Expected Output

implant should run

Actual Output

Implant gives an Unsupported architecture error

Metadata

Metadata

Assignees

No one assigned

    Labels

    buguse for describing something not working as expectedsolvedThe issue has been solved

    Type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions