Empire
Empire copied to clipboard
[BUG] Invoke-ReflectivePEInjection unable to run python-PE's
Empire Version
- 3.5.2
OS Information (Linux flavor, Python version)
- OS: Microsoft Windows [Version 10.0.18363.1139]
- Python:
Describe the bug
Invoke-ReflectivePEInjection is not able to run python-PE's
To Reproduce
- Create a simple Hello World python program. I used pyinstaller -F to compile it. It should work when you run it normally.
-
. ./Invoke-ReflectivePEInjection
-
Invoke-ReflectivePEInjection -PEPath .\HelloWorld.exe
- Now, the following error should occur:
[4972] Cannot open self C:\WINDOWS\system32\WindowsPowerShell\v1.0\PowerShell.exe or archive C:\WINDOWS\system32\WindowsPowerShell\v1.0\PowerShell.pkg
Expected behavior
The python program should be started normally
Screenshots
Additional context
No additional context
Just so we know what to test later this week. Can you update this to include the version of Empire and Windows (including build)? Thanks.
Done :).