Empire icon indicating copy to clipboard operation
Empire copied to clipboard

Set sys.argv from the macho template

Open OJ opened this issue 5 years ago • 0 comments

When running an agent in a macho binary, we have an issue where any modules that make use of sys.argv (directly or indirectly through dependencies) fail because sys.argv hasn't been set. We get the following error:

image

If this same module is run from a python one-liner the error doesn't appear.

This PR attempts to fix this problem by changing the template so that argc and argv are passed to Python before the agent is run. From here, any references to sys.argv should not result in failure.

Note: I have not compiled this code (no current access to OSX), but I think it should just work out of the box.

OJ avatar Sep 26 '19 23:09 OJ