Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

payload generation error #2

Closed
k4nfr3 opened this issue Jun 5, 2020 · 1 comment
Closed

payload generation error #2

k4nfr3 opened this issue Jun 5, 2020 · 1 comment

Comments

@k4nfr3
Copy link

k4nfr3 commented Jun 5, 2020

Hi,

./shad0w beacon -p x64/windows/secure/static -H mysite.com -f exe -o beacon.exe
The secure payload makes heavy use of new windows features and ntdll api hooking.
This can make the payload a lot more resistant to EDR products but can also make it more unstable.
Its been tested on:
- x64 Windows 8.1, x64 Windows 10 (Pro & Enterprise)
- x64 Windows Server 2019
It may work on other systems as well.

Static payloads can be very large and much easier to detect.
For use in droppers, loaders, exploits etc staged payloads are recommended as they are much smaller, so easier to use.

ERROR: building module
Traceback (most recent call last):
File "./shad0w.py", line 182, in
shad0w.build()
File "./shad0w.py", line 113, in build
length = payload_format.create(self)
File "/root/shad0w/lib/payload_format.py", line 76, in create
return format_exe(builder)
File "/root/shad0w/lib/payload_format.py", line 30, in format_exe
with open("/root/shad0w/beacon/beacon.exe", 'rb') as file:
FileNotFoundError: [Errno 2] No such file or directory: '/root/shad0w/beacon/beacon.exe'

@k4nfr3
Copy link
Author

k4nfr3 commented Jun 5, 2020

my bad ./shad0w was the culprit instead of the shad0w command in /usr/bin
apologies

@k4nfr3 k4nfr3 closed this as completed Jun 5, 2020
bats3c pushed a commit that referenced this issue Jun 18, 2020
bats3c pushed a commit that referenced this issue Jan 18, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant