Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hello, error execution, help please #8

Open
ZLouUseR opened this issue Jan 14, 2025 · 2 comments
Open

Hello, error execution, help please #8

ZLouUseR opened this issue Jan 14, 2025 · 2 comments

Comments

@ZLouUseR
Copy link

python3 Boaz.py -f ~/Boaz_beta/notepad.exe -o ./alice_notepad.exe -t donut -obf -l 1 -c pluto -e uuid -g

Boaz mini-evasion framework is starting...

[+] Option 'input_file' is selected with argument: /home/zloyuser/Boaz_beta/notepad.exe
[+] Option 'output_file' is selected with argument: ./alice_notepad.exe
[+] Option 'loader' is selected with argument: 1
[+] Option 'god_speed' is selected with argument: True
[+] Option 'shellcode_type' is selected with argument: donut
[+] Option 'encoding' is selected with argument: uuid
[+] Option 'compiler' is selected with argument: pluto
[+] Option 'obfuscate' is selected with argument: True
[+] Option 'entropy' is selected with argument: 0
[+] Option 'watermark' is selected with argument: 1
Input file is not a raw shellcode ends with .bin

[ Suagr shellcode generator v1 (built Mar 9 2024 12:43:20)
[ Copyleft no signature!!!!

[ Instance type : Embedded
[ Module file : "/home/zloyuser/Boaz_beta/notepad.exe"
[ Entropy : Random names + Encryption
[ File type : EXE
[ Target CPU : x86+amd64
[ AMSI/WDLP/ETW : none
[ PE Headers : overwrite
[ Shellcode : "note_donut.bin"
[ Exit : Thread
[+] Shellcode type used: donut
[+] Shellcode saved to: note_donut
[+] Shellcode encoded with uuid and saved to: note_donut
Obfuscating the loader code...

Warning: Obfuscation step has some errors Command '['sudo', 'bash', './obfuscate/obfuscate_file.sh', 'loaders/loader1_modified.c']' returned non-zero exit status 1.. But do not worry, proceeding with the next steps.
Output file path: ./alice_notepad.exe
Using MinGW directory: /usr/lib/gcc/x86_64-w64-mingw32/13-win32

[+] NASM assembly compilation successful.
Traceback (most recent call last):
File "/home/zloyuser/Boaz_beta/Boaz.py", line 1390, in
main()
File "/home/zloyuser/Boaz_beta/Boaz.py", line 1281, in main
compile_output(obfuscated_loader_path, output_file_path, args.compiler, args.sleep, args.anti_emulation, args.junk_api, args.api_unhooking, args.mllvm, args.god_speed, args.encoding, args.loader, args.dream, args.etw, args.dll, args.cpl, args.self_deletion)
File "/home/zloyuser/Boaz_beta/Boaz.py", line 808, in compile_output
subprocess.run(compile_command, check=True)
File "/usr/lib/python3.12/subprocess.py", line 548, in run
with Popen(*popenargs, **kwargs) as process:
^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.12/subprocess.py", line 1026, in init
self._execute_child(args, executable, preexec_fn, close_fds,
File "/usr/lib/python3.12/subprocess.py", line 1955, in _execute_child
raise child_exception_type(errno_num, err_msg, err_filename)
FileNotFoundError: [Errno 2] No such file or directory: './llvm_obfuscator_pluto/bin/clang++'

@omi-22
Copy link

omi-22 commented Jan 15, 2025

This is probably because the requirements.sh contains a little error when downloading and building Pluto where it goes into the Pluto git file and pluto_build file which is is two directories inside from where you were. But then creates the llvm_obfuscator_pluto file three directories back, which means your llvm_obfuscator_pluto file is probably one directory back from where you installed the requirements.

@ZLouUseR
Copy link
Author

Thanks for the answer, I'll try to fix it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants