diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc index 55e6954..1ab6900 100644 --- a/CHANGELOG.adoc +++ b/CHANGELOG.adoc @@ -9,6 +9,7 @@ For a detailed view of what has changed, refer to the {uri-repo}/commits/master[ == Enhancements:: +* New tools: Ghidra, x64dbg, ollydbg, dnSpy, Detect It Easy (die), HxD, PE-Sieve, PE-Bear ({uri-issue}9[#9], {uri-issue}125[#125]) * Using VirtualBox's linked clones by default now. Creating a new spin of an existing template is now instant. ({uri-issue}126[#126]) * Enabling UAC so the default account can use Edge without requiring changes ({uri-issue}93[#93]) diff --git a/malboxes/config-example.js b/malboxes/config-example.js index 9757720..d48ce0e 100644 --- a/malboxes/config-example.js +++ b/malboxes/config-example.js @@ -56,7 +56,7 @@ // Chocolatey packages to install on the VM // TODO re-add dependencywalker and regshot once upstream choco package provides a checksum // TODO: Re-add processhacker when its fixed for win7_64 - "choco_packages": "sysinternals windbg 7zip putty wireshark winpcap", + "choco_packages": "ghidra x64dbg.portable dnspy ollydbg sysinternals hxd windbg die pesieve pebear 7zip putty wireshark winpcap", // Setting the IDA Path will copy the IDA remote debugging tools into the guest //"ida_path": "/path/to/your/ida", diff --git a/malboxes/templates/snippets/provision_powershell.json b/malboxes/templates/snippets/provision_powershell.json index 7944ef1..4927eff 100644 --- a/malboxes/templates/snippets/provision_powershell.json +++ b/malboxes/templates/snippets/provision_powershell.json @@ -18,6 +18,7 @@ "inline": [ "choco install {{ choco_packages }} -y" ], - "valid_exit_codes": [ 0, 404 ] + {# 404 is broken download, 3010 is a .Net reboot required #} + "valid_exit_codes": [ 0, 404, 3010 ] } {% endif %} diff --git a/malboxes/templates/snippets/provision_powershell_win7.json b/malboxes/templates/snippets/provision_powershell_win7.json index dcdc747..908f0c3 100644 --- a/malboxes/templates/snippets/provision_powershell_win7.json +++ b/malboxes/templates/snippets/provision_powershell_win7.json @@ -37,6 +37,7 @@ "choco install npcap --package-parameters '/winpcap_mode=yes' -y", "choco install {{ choco_packages }} -y" ], - "valid_exit_codes": [ 0, 404 ] + {# 404 is broken download, 3010 is a .Net reboot required #} + "valid_exit_codes": [ 0, 404, 3010 ] } {% endif %}