Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Crypto.Hash module import error #771

Open
sankethj opened this issue Dec 26, 2020 · 25 comments
Open

Crypto.Hash module import error #771

sankethj opened this issue Dec 26, 2020 · 25 comments

Comments

@sankethj
Copy link

root@kali:~/Desktop/tryhackme/vol_for# python /root/volatility/vol.py -f victim.raw --profile=Win7SP1x64 shellbags
Volatility Foundation Volatility Framework 2.6.1
*** Failed to import volatility.plugins.registry.shutdown (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.getservicesids (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.timeliner (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.malware.apihooks (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.malware.servicediff (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.userassist (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.getsids (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.shellbags (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.evtlogs (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.tcaudit (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.dumpregistry (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.lsadump (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.malware.threads (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.mac.apihooks_kernel (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.registry.amcache (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.mac.check_syscall_shadow (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.malware.svcscan (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.auditpol (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.ssdt (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.registry.registryapi (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.mac.apihooks (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.envars (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.shimcache (ImportError: No module named Crypto.Hash)
ERROR : volatility.debug : You must specify something to do (try -h)

root@kali:~/Desktop/tryhackme/vol_for# pip install pycrypto
Requirement already satisfied: pycrypto in /usr/lib/python3/dist-packages (2.6.1)

I also reinstalled modules but still same error goes.

@0x0ff
Copy link

0x0ff commented Jan 25, 2021

Same.

@zin-htet-aung
Copy link

Check this.
https://jaseit.com/forensics/how-to-install-volatility-2-6in-kali-2020-4/

@innxrmxst
Copy link

$ git clone https://github.com/gdabah/distorm.git
cd distorm3
python setup.py build
sudo python setup.py build install

sudo apt-get install yara -y
wge thttps://ftp.dlitz.net/pub/dlitz/crypto/pycrypto/pycrypto-2.6.1.tar.gz
tar -xvzf pycrypto-2.6.1.tar.gz
cd pycrypto-2.6.1
python setup.py build
sudo python setup.py build install

@Sayman369
Copy link

$ git clone https://github.com/gdabah/distorm.git
cd distorm3
python setup.py build
sudo python setup.py build install

sudo apt-get install yara -y
wge thttps://ftp.dlitz.net/pub/dlitz/crypto/pycrypto/pycrypto-2.6.1.tar.gz
tar -xvzf pycrypto-2.6.1.tar.gz
cd pycrypto-2.6.1
python setup.py build
sudo python setup.py build install

Thanks for your solution. Now with your solution "(ImportError: No module named Crypto.Hash)" had solved.
but this error not solved yet

kali@kali:~/volatility$ sudo python vol.py install
Volatility Foundation Volatility Framework 2.6.1
*** Failed to import volatility.plugins.malware.apihooks (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.malware.threads (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.mac.apihooks_kernel (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.mac.check_syscall_shadow (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.ssdt (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.mac.apihooks (ImportError: No module named distorm3)
ERROR : volatility.debug : You must specify something to do (try -h)

What should I do to run volatility without any problems?

@joncut99
Copy link

$ git clone https://github.com/gdabah/distorm.git
cd distorm3
python setup.py build
sudo python setup.py build install
sudo apt-get install yara -y
wge thttps://ftp.dlitz.net/pub/dlitz/crypto/pycrypto/pycrypto-2.6.1.tar.gz
tar -xvzf pycrypto-2.6.1.tar.gz
cd pycrypto-2.6.1
python setup.py build
sudo python setup.py build install

Thanks for your solution. Now with your solution "(ImportError: No module named Crypto.Hash)" had solved.
but this error not solved yet

kali@kali:~/volatility$ sudo python vol.py install
Volatility Foundation Volatility Framework 2.6.1
*** Failed to import volatility.plugins.malware.apihooks (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.malware.threads (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.mac.apihooks_kernel (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.mac.check_syscall_shadow (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.ssdt (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.mac.apihooks (ImportError: No module named distorm3)
ERROR : volatility.debug : You must specify something to do (try -h)

What should I do to run volatility without any problems?

This worked perfectly for me. Had to install the compiler for python.

@Sayman369
Copy link

$ git clone https://github.com/gdabah/distorm.git
cd distorm3
python setup.py build
sudo python setup.py build install
sudo apt-get install yara -y
wge thttps://ftp.dlitz.net/pub/dlitz/crypto/pycrypto/pycrypto-2.6.1.tar.gz
tar -xvzf pycrypto-2.6.1.tar.gz
cd pycrypto-2.6.1
python setup.py build
sudo python setup.py build install

Thanks for your solution. Now with your solution "(ImportError: No module named Crypto.Hash)" had solved.
but this error not solved yet
kali@kali:~/volatility$ sudo python vol.py install
Volatility Foundation Volatility Framework 2.6.1
*** Failed to import volatility.plugins.malware.apihooks (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.malware.threads (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.mac.apihooks_kernel (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.mac.check_syscall_shadow (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.ssdt (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.mac.apihooks (ImportError: No module named distorm3)
ERROR : volatility.debug : You must specify something to do (try -h)
What should I do to run volatility without any problems?

This worked perfectly for me. Had to install the compiler for python.

This happend when I try install distorm

kali@kali:/pyPackages/distorm$ python setup.py build
Traceback (most recent call last):
File "setup.py", line 6, in
from setuptools import Extension, setup
ImportError: No module named setuptools
kali@kali:
/pyPackages/distorm$ sudo python setup.py build install
Traceback (most recent call last):
File "setup.py", line 6, in
from setuptools import Extension, setup
ImportError: No module named setuptools

I have already downloaded setuptools

@notjustanyben
Copy link

$ git clone https://github.com/gdabah/distorm.git
cd distorm3
python setup.py build
sudo python setup.py build install

sudo apt-get install yara -y
wge thttps://ftp.dlitz.net/pub/dlitz/crypto/pycrypto/pycrypto-2.6.1.tar.gz
tar -xvzf pycrypto-2.6.1.tar.gz
cd pycrypto-2.6.1
python setup.py build
sudo python setup.py build install

Thanks, buddy!

@hack-phoenix
Copy link

$ git clone https://github.com/gdabah/distorm.git
cd distorm3
python setup.py build
sudo python setup.py build install

sudo apt-get install yara -y
wge thttps://ftp.dlitz.net/pub/dlitz/crypto/pycrypto/pycrypto-2.6.1.tar.gz
tar -xvzf pycrypto-2.6.1.tar.gz
cd pycrypto-2.6.1
python setup.py build
sudo python setup.py build install

ss

Hi I'm trying to install volatility for testing memory image but the setup was giving errors. When I tried your method I got this.
Please advise on how to proceed. Thanks :)

@sg-incognito
Copy link

@hack-phoenix use python3 not python2

@markasoftware
Copy link

You may need to install an older version of distorm3 for python 2

@ArjunaAcchaDipa
Copy link

ArjunaAcchaDipa commented Nov 13, 2021

Hi, I just found the solution yesterday. So try to run this in the terminal

1. pip install --upgrade setuptools
2. sudo apt-get install python2-dev
3. pip2 install pycrypto && pip install distorm3

I you're already done with the crypto.hash, then on the line 3, try to run the pip2 install distorm3. But if your pip2 giving you output error: invalid command 'egg_info'. Then try to download the pip2 using this

1. curl https://bootstrap.pypa.io/pip/2.7/get-pip.py --output /tmp/get-pip.py
2. sudo python2 /tmp/get-pip.py

After that try to re-run the first 3 command to install pycrypto and distorm3

@resteex0
Copy link

i have same issue

Volatility Foundation Volatility Framework 2.6.1
*** Failed to import volatility.plugins.registry.shutdown (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.getservicesids (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.timeliner (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.malware.apihooks (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.malware.servicediff (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.userassist (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.getsids (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.shellbags (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.evtlogs (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.shimcache (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.tcaudit (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.dumpregistry (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.lsadump (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.malware.threads (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.mac.apihooks_kernel (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.registry.amcache (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.mac.check_syscall_shadow (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.malware.svcscan (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.auditpol (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.ssdt (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.registry.registryapi (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.mac.apihooks (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.envars (ImportError: No module named Crypto.Hash)

@ArjunaAcchaDipa
Copy link

i have same issue

Volatility Foundation Volatility Framework 2.6.1 *** Failed to import volatility.plugins.registry.shutdown (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.getservicesids (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.timeliner (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.malware.apihooks (NameError: name 'distorm3' is not defined) *** Failed to import volatility.plugins.malware.servicediff (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.registry.userassist (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.getsids (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.registry.shellbags (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.evtlogs (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.registry.shimcache (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.tcaudit (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.registry.dumpregistry (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.registry.lsadump (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.malware.threads (NameError: name 'distorm3' is not defined) *** Failed to import volatility.plugins.mac.apihooks_kernel (ImportError: No module named distorm3) *** Failed to import volatility.plugins.registry.amcache (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.mac.check_syscall_shadow (ImportError: No module named distorm3) *** Failed to import volatility.plugins.malware.svcscan (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.registry.auditpol (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.ssdt (NameError: name 'distorm3' is not defined) *** Failed to import volatility.plugins.registry.registryapi (ImportError: No module named Crypto.Hash) *** Failed to import volatility.plugins.mac.apihooks (ImportError: No module named distorm3) *** Failed to import volatility.plugins.envars (ImportError: No module named Crypto.Hash)

Have you tried any of the solutions here?

@Stevefourier
Copy link

I have the same issue but with a windows machine.
C:\Users\Stephen\Downloads\volatility-master\volatility-master>C:\Python27\vol.py .\git clone https://github.com/volatilityfoundation/volatility.git
Volatility Foundation Volatility Framework 2.6.1
*** Failed to import volatility.plugins.registry.shutdown (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.getservicesids (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.timeliner (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.malware.apihooks (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.malware.servicediff (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.userassist (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.getsids (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.shellbags (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.evtlogs (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.tcaudit (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.dumpregistry (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.lsadump (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.malware.threads (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.mac.apihooks_kernel (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.registry.amcache (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.mac.check_syscall_shadow (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.malware.svcscan (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.auditpol (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.ssdt (NameError: name 'distorm3' is not defined)
*** Failed to import volatility.plugins.registry.registryapi (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.mac.apihooks (ImportError: No module named distorm3)
*** Failed to import volatility.plugins.envars (ImportError: No module named Crypto.Hash)
*** Failed to import volatility.plugins.registry.shimcache (ImportError: No module named Crypto.Hash)
ERROR : volatility.debug : You must specify something to do (try -h)

How do i fix this please?

@secure-77
Copy link

secure-77 commented Dec 4, 2021

This works for me to fix all the errors

Install system dependencies

sudo apt install -y build-essential git libdistorm3-dev yara libraw1394-11 libcapstone-dev capstone-tool tzdata

Install pip for Python 2

sudo apt install -y python2 python2.7-dev libpython2-dev
curl https://bootstrap.pypa.io/pip/2.7/get-pip.py --output get-pip.py
sudo python2 get-pip.py
sudo python2 -m pip install -U setuptools wheel

Install Volatility 2 and its Python dependencies

python2 -m pip install -U distorm3 yara pycrypto pillow openpyxl ujson pytz ipython capstone
sudo python2 -m pip install yara
sudo ln -s /usr/local/lib/python2.7/dist-packages/usr/lib/libyara.so /usr/lib/libyara.so
python2 -m pip install -U git+https://github.com/volatilityfoundation/volatility.git

from: https://seanthegeek.net/1172/how-to-install-volatility-2-and-volatility-3-on-debian-ubuntu-or-kali-linux/

@phamleduy04
Copy link

Hi, I just found the solution yesterday. So try to run this in the terminal

1. pip install --upgrade setuptools
2. sudo apt-get install python2-dev
3. pip2 install pycrypto && pip install distorm3

I you're already done with the crypto.hash, then on the line 3, try to run the pip2 install distorm3. But if your pip2 giving you output error: invalid command 'egg_info'. Then try to download the pip2 using this

1. curl https://bootstrap.pypa.io/pip/2.7/get-pip.py --output /tmp/get-pip.py
2. sudo python2 /tmp/get-pip.py

After that try to re-run the first 3 command to install pycrypto and distorm3

thank you <3

@XKaguya
Copy link

XKaguya commented Aug 21, 2022

This works for me to fix all the errors

Install system dependencies

sudo apt install -y build-essential git libdistorm3-dev yara libraw1394-11 libcapstone-dev capstone-tool tzdata

Install pip for Python 2

sudo apt install -y python2 python2.7-dev libpython2-dev
curl https://bootstrap.pypa.io/pip/2.7/get-pip.py --output get-pip.py
sudo python2 get-pip.py
sudo python2 -m pip install -U setuptools wheel

Install Volatility 2 and its Python dependencies

python2 -m pip install -U distorm3 yara pycrypto pillow openpyxl ujson pytz ipython capstone
sudo python2 -m pip install yara
sudo ln -s /usr/local/lib/python2.7/dist-packages/usr/lib/libyara.so /usr/lib/libyara.so
python2 -m pip install -U git+https://github.com/volatilityfoundation/volatility.git

from: https://seanthegeek.net/1172/how-to-install-volatility-2-and-volatility-3-on-debian-ubuntu-or-kali-linux/

Thank you :) its worked for me too

@cell13
Copy link

cell13 commented Aug 30, 2022

Hi, I just found the solution yesterday. So try to run this in the terminal

1. pip install --upgrade setuptools
2. sudo apt-get install python2-dev
3. pip2 install pycrypto && pip install distorm3

I you're already done with the crypto.hash, then on the line 3, try to run the pip2 install distorm3. But if your pip2 giving you output error: invalid command 'egg_info'. Then try to download the pip2 using this

1. curl https://bootstrap.pypa.io/pip/2.7/get-pip.py --output /tmp/get-pip.py
2. sudo python2 /tmp/get-pip.py

After that try to re-run the first 3 command to install pycrypto and distorm3

thank you <3

thanks

@felpostorm
Copy link

This works for me to fix all the errors

Install system dependencies

sudo apt install -y build-essential git libdistorm3-dev yara libraw1394-11 libcapstone-dev capstone-tool tzdata

Install pip for Python 2

sudo apt install -y python2 python2.7-dev libpython2-dev
curl https://bootstrap.pypa.io/pip/2.7/get-pip.py --output get-pip.py
sudo python2 get-pip.py
sudo python2 -m pip install -U setuptools wheel

Install Volatility 2 and its Python dependencies

python2 -m pip install -U distorm3 yara pycrypto pillow openpyxl ujson pytz ipython capstone
sudo python2 -m pip install yara
sudo ln -s /usr/local/lib/python2.7/dist-packages/usr/lib/libyara.so /usr/lib/libyara.so
python2 -m pip install -U git+https://github.com/volatilityfoundation/volatility.git

from: https://seanthegeek.net/1172/how-to-install-volatility-2-and-volatility-3-on-debian-ubuntu-or-kali-linux/

Worked for me!

@arm72
Copy link

arm72 commented Mar 14, 2023

thank you got it working thanks to you both: ArjunaAcchaDipa & secure-77 !!!!!!

@Clementi11
Copy link

This works for me to fix all the errors

Install system dependencies

sudo apt install -y build-essential git libdistorm3-dev yara libraw1394-11 libcapstone-dev capstone-tool tzdata

Install pip for Python 2

sudo apt install -y python2 python2.7-dev libpython2-dev
curl https://bootstrap.pypa.io/pip/2.7/get-pip.py --output get-pip.py
sudo python2 get-pip.py
sudo python2 -m pip install -U setuptools wheel

Install Volatility 2 and its Python dependencies

python2 -m pip install -U distorm3 yara pycrypto pillow openpyxl ujson pytz ipython capstone
sudo python2 -m pip install yara
sudo ln -s /usr/local/lib/python2.7/dist-packages/usr/lib/libyara.so /usr/lib/libyara.so
python2 -m pip install -U git+https://github.com/volatilityfoundation/volatility.git

from: https://seanthegeek.net/1172/how-to-install-volatility-2-and-volatility-3-on-debian-ubuntu-or-kali-linux/

listen to me! you! are! my! god!!!

@05t3
Copy link

05t3 commented Jul 20, 2023

Hey.

After consolidating all those solutions above, I built an error-free docker image to resolve all issues.

You can find the image on docker hub : oste/volatility2

Simply run:

docker run --rm oste/volatility2 volatility -h

If you care to build the image yourself, you can use the attached Dockerfile.

FROM ubuntu:22.10

RUN apt-get update \
    && DEBIAN_FRONTEND=noninteractive apt-get install -y git curl nano vim python2.7 wget pcregrep libpcre++-dev python2-dev build-essential libdistorm3-dev yara libraw1394-11 libcapstone-dev capstone-tool tzdata \
    && curl https://bootstrap.pypa.io/pip/2.7/get-pip.py -o get-pip.py \
    && python2 get-pip.py \
    && pip2 install pycrypto distorm3 \
    && echo 'alias volatility="python2 /opt/volatility/vol.py"' >> /root/.bashrc \
    && git clone https://github.com/volatilityfoundation/volatility.git /opt/volatility

WORKDIR /opt/volatility

ENTRYPOINT ["python2", "vol.py"]

Enjoy 😉

@epaphrasmakoko
Copy link

Hey.

After consolidating all those solutions above, I built an error-free docker image to resolve all issues.

You can find the image on docker hub : oste/volatility2

Simply run:

docker run --rm oste/volatility2 volatility -h

If you care to build the image yourself, you can use the attached Dockerfile.

FROM ubuntu:22.10

RUN apt-get update \
    && DEBIAN_FRONTEND=noninteractive apt-get install -y git curl nano vim python2.7 wget pcregrep libpcre++-dev python2-dev build-essential libdistorm3-dev yara libraw1394-11 libcapstone-dev capstone-tool tzdata \
    && curl https://bootstrap.pypa.io/pip/2.7/get-pip.py -o get-pip.py \
    && python2 get-pip.py \
    && pip2 install pycrypto distorm3 \
    && echo 'alias volatility="python2 /opt/volatility/vol.py"' >> /root/.bashrc \
    && git clone https://github.com/volatilityfoundation/volatility.git /opt/volatility

WORKDIR /opt/volatility

ENTRYPOINT ["python2", "vol.py"]

Enjoy 😉

let me look it around

@Randark-JMT
Copy link

pycryptodome might be a better choice

@AhmedHosniFahmi
Copy link

Hi, I just found the solution yesterday. So try to run this in the terminal

1. pip install --upgrade setuptools
2. sudo apt-get install python2-dev
3. pip2 install pycrypto && pip install distorm3

I you're already done with the crypto.hash, then on the line 3, try to run the pip2 install distorm3. But if your pip2 giving you output error: invalid command 'egg_info'. Then try to download the pip2 using this

1. curl https://bootstrap.pypa.io/pip/2.7/get-pip.py --output /tmp/get-pip.py
2. sudo python2 /tmp/get-pip.py

After that try to re-run the first 3 command to install pycrypto and distorm3

TY!!!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests