Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[x] There was an error creating your FUD rat with Powerstager . #391

Closed
IamSolos opened this issue Dec 4, 2019 · 25 comments
Closed

[x] There was an error creating your FUD rat with Powerstager . #391

IamSolos opened this issue Dec 4, 2019 · 25 comments

Comments

@IamSolos
Copy link

IamSolos commented Dec 4, 2019

Hi, I have a problem with Thefatrat, with Fudwin
Fudwin.log:

/usr/bin/x86_64-w64-mingw32-gcc
Traceback (most recent call last):
File "tools/power.py", line 15, in
import urllib.parse

ImportError: No module named parse

Thank you !

(sorry if what I say means nothing it’s just that I’m French and I use a translator!)

@peterpt
Copy link
Collaborator

peterpt commented Dec 5, 2019

inside your fatrat main folder write these commands in terminal .
cd tools && rm power.py && wget https://raw.githubusercontent.com/Screetsec/TheFatRat/master/tools/power.py && chmod +x power.py

then still inside "fatrat/tools" folder write this next command and tell me what was the output of it .

python power.py

@IamSolos
Copy link
Author

IamSolos commented Dec 6, 2019

Uh...
image

@peterpt
Copy link
Collaborator

peterpt commented Dec 6, 2019

Write in your terminal
pip install names

And run it again

@IamSolos
Copy link
Author

IamSolos commented Dec 6, 2019

mmmh...
image

@peterpt
Copy link
Collaborator

peterpt commented Dec 6, 2019

apt-get install python-pip && pip install names

@IamSolos
Copy link
Author

IamSolos commented Dec 6, 2019

uh... Fudwin.log :

/usr/bin/x86_64-w64-mingw32-gcc
�[38;5;160m ___ __ _ �[0m
�[38;5;161m / _ _____ _____ _ / \ | __ _ __ _ ___ _ __ �[0m
�[38;5;162m / /_)/ _ \ \ /\ / / _ \ '
\ | / _ |/ _ |/ _ \ '|�[0m
�[38;5;163m/ / () \ V V / __/ | \ \ || (| | (| | / | �[0m
�[38;5;164m/ _
/ _/_/ _
|| _/__,|_, |_|| �[0m
�[38;5;130m _ __ _ _ �[38;5;164m|
/�[38;5;130m �[0m
�[38;5;131m | '
| | | | �[0m
�[38;5;132m | |) | || | A payload stager using PowerShell �[0m
�[38;5;133m(
) ./ _, | Created by z0noxz �[0m
�[38;5;134m |
| |
_/ �[0m

Working...������������Traceback (most recent call last):
File "tools/power.py", line 2962, in
main(sys.argv[1:])
File "tools/power.py", line 2949, in main
compile_source()
File "tools/power.py", line 2694, in compile_source
Print.add_name_value("File signature", hashlib.md5(open(output, "rb").read()).hexdigest(), Print.info)
IOError: [Errno 2] No such file or directory: 'test'

image

@peterpt
Copy link
Collaborator

peterpt commented Dec 7, 2019

apt-get install python3 python3-setuptools binutils-mingw-w64-i686 binutils-mingw-w64-x86-64 gcc-mingw-w64-i686 gcc-mingw-w64-x86-64

@adada111
Copy link

image
i need help

@peterpt
Copy link
Collaborator

peterpt commented Dec 11, 2019

for those who have this issue i need to do a checkup first to get a notion of what may be the issue .

I need you all individually to open a terminal and run these commands :
i686-w64-mingw32-gcc --version
x86_64-w64-mingw32-gcc --version
i686-w64-mingw32-windres --version
x86_64-w64-mingw32-windres --version

To you all compare your versions with mine , i have these :
i686-w64-mingw32-gcc = 7.3-win32 20180506
x86_64-w64-mingw32-gcc = 7.3-win32 20180506
i686-w64-mingw32-windres = 2.30.90.20180627
x86_64-w64-mingw32-windres = 2.30.90.20180627

Then write in your terminal these commands and post here the outputs :
apt-cache policy gcc-mingw-w64-i686
apt-cache policy gcc-mingw-w64-x86-64
apt-cache policy binutils-mingw-w64-i686
apt-cache policy binutils-mingw-w64-x86-64

@adada111
Copy link

image

@adada111
Copy link

I have added the source, but I don't know which tools should be downgraded. can you tell me ?

@peterpt
Copy link
Collaborator

peterpt commented Dec 13, 2019

for powerstager are these :
i686-w64-mingw32-gcc
x86_64-w64-mingw32-gcc
i686-w64-mingw32-windres
x86_64-w64-mingw32-windres

you should downgrade using aptitude and not apt .

1st - you should check on each package witch lower version exists on sid , by writinf«g in terminal :

ex : apt-cache policy gcc-mingw-w64-i686

then look at the lowest version , witch should be sid repository , and then use aptitude like this :

aptitude install gcc-mingw-w64-i686="version number"

Like i told , this is a long shot , and i am not pretty sure why this error happens in some people here .
I remember i installed my fatrat using a repository that still had mingw32 , instead gcc-mingw-w64-i686 , witch is an emulated 32bit from 64bit gcc , but like i said , this is a long shot .
Try it to see if it solves anything .

@peterpt
Copy link
Collaborator

peterpt commented Dec 14, 2019

i will create a VM using latest kali linux to test

@adada111
Copy link

thanks

@peterpt
Copy link
Collaborator

peterpt commented Dec 14, 2019

Ok , finally i installed latest kali in a VM and tryed power.py from fatrat and got the issue you got now .
This is good news , because after this point since i get same error i will try to figure out why is happening and then explain it to you how to fix it .

@peterpt
Copy link
Collaborator

peterpt commented Dec 14, 2019

ok , fixed the issue .
The problem is in mingw version in kali .
mingw

you must add debian jessie repositories to your sources.list .

deb http://deb.debian.org/debian/ oldoldstable main contrib non-free
deb-src http://deb.debian.org/debian/ oldoldstable main contrib non-free

deb http://deb.debian.org/debian/ oldoldstable-updates main contrib non-free
deb-src http://deb.debian.org/debian/ oldoldstable-updates main contrib non-free

and put an "#" behind kali repository link

then write in terminal : apt-get clean && apt-get clean cahe

then you should remove all these packages :
apt-get remove --purge gcc-mingw-w64-i686 gcc-mingw-w64-x86-64 binutils-mingw-w64-i686 binutils-mingw-w64-x86-64 && apt-get autoremove -y

then to finish , you should do "still with # behind kali repository link in sources.list"
apt-get update && apt-get install gcc-mingw-w64-i686 gcc-mingw-w64-x86-64 binutils-mingw-w64-i686 binutils-mingw-w64-x86-64

Resuming : The person who build powerstager did not upgraded his script to the new versions of gcc , by this it means that some commands in gcc probably was changed , and powerstager still uses the old commands , so when the script tries to compile the exe gives an error , but then the script ahead prompts the error you see because the file was not created .

To finish : Fixing these gcc versions will fix also the same problem you have in fatrat because the problem is the same thing .

@adada111
Copy link

i will try again, thanks

@adada111
Copy link

it is OK! thank you very much!

Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from wowlooser Dec 15, 2019
Repository owner deleted a comment from IamSolos Dec 15, 2019
Repository owner deleted a comment from adada111 Dec 15, 2019
@peterpt peterpt closed this as completed Dec 15, 2019
@peterpt peterpt mentioned this issue Apr 25, 2020
Closed
@SLKsky
Copy link

SLKsky commented Sep 16, 2021

bonjours, y'a moyen de m'expliquer ?

@sagarpritam
Copy link

Incorrect 64Bit Version for Fudwin in Fatrat which version is required

@jakhongirav
Copy link

image
again this problem on my ubuntu

@jakhongirav
Copy link

ok , fixed the issue . The problem is in mingw version in kali . mingw

you must add debian jessie repositories to your sources.list .

deb http://deb.debian.org/debian/ oldoldstable main contrib non-free deb-src http://deb.debian.org/debian/ oldoldstable main contrib non-free

deb http://deb.debian.org/debian/ oldoldstable-updates main contrib non-free deb-src http://deb.debian.org/debian/ oldoldstable-updates main contrib non-free

and put an "#" behind kali repository link

then write in terminal : apt-get clean && apt-get clean cahe

then you should remove all these packages : apt-get remove --purge gcc-mingw-w64-i686 gcc-mingw-w64-x86-64 binutils-mingw-w64-i686 binutils-mingw-w64-x86-64 && apt-get autoremove -y

then to finish , you should do "still with # behind kali repository link in sources.list" apt-get update && apt-get install gcc-mingw-w64-i686 gcc-mingw-w64-x86-64 binutils-mingw-w64-i686 binutils-mingw-w64-x86-64

Resuming : The person who build powerstager did not upgraded his script to the new versions of gcc , by this it means that some commands in gcc probably was changed , and powerstager still uses the old commands , so when the script tries to compile the exe gives an error , but then the script ahead prompts the error you see because the file was not created .

To finish : Fixing these gcc versions will fix also the same problem you have in fatrat because the problem is the same thing .

Can you help me?

@pinkf-loyd
Copy link

Hi,
Issue 1: Incorrect Mingw-W64 Versions in FatRat

When you run the chk_tools tool in FatRat, it reports that the Mingw-W64 versions are incorrect for Fudwin in FatRat. You attempted to resolve this issue by removing existing Mingw-W64 packages and reinstalling them from the Kali Linux repository, but this caused conflicts with Metasploit Framework.

Issue 2: Unintentional Removal of Metasploit Framework

When you tried to address the problem with Mingw-W64 packages, Metasploit Framework was unintentionally uninstalled due to unsatisfied dependencies.

Issue 3: Failure to Add Debian Jessie Repository

You tried to add the Debian Jessie repositories to obtain the correct Mingw-W64 versions, but you encountered a 404 error when updating packages.

Issue 4: Failure to Install Correct Mingw-W64 Versions

When attempting to install the correct Mingw-W64 versions from the Kali Linux repository, you received a message indicating that the packages are already up to date, even though the FatRat tool still reports incorrect versions.

These issues can be confusing as they appear to be related to dependency conflicts between Metasploit Framework and the Mingw-W64 versions required for FatRat.
CAN YOU HELP ME PLEASE???

@pinkf-loyd
Copy link

??????

@mekbau
Copy link

mekbau commented Nov 12, 2024

Screenshot at 2024-11-12 20-40-22
help mee guide me step by step :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

8 participants