s0lst1c3/dropengine

DropEngine provides a malleable framework for creating shellcode runners, allowing operators to choose from a selection of components and combine them to create highly sophisticated payloads within seconds.

dropengine's Issues

Shellcode not getting selected

I generated a raw shellcode using msfvenom and saved it as shell.bin. When I run python dropengine.py with the general configuration as per the Quick Start Guide I do not get an output file. Here is the command I ran:

python dropengine.py --interface csharp_runner_interface
--crypter crypter_aes
--decrypter decrypter_csharp_rijndael_aes
--ekey ekey_static
--runner msbuild_csharp_runner
--dkey dkey_csharp_static
--executor executor_csharp_virtual_alloc_thread
--mutator mutator_random_string
--shellcode shell.bin
-o payload.csproj

I ran it with debug mode as well and noticed that shellcode shows as null:

python dropengine.py --interface csharp_runner_interface --crypter crypter_aes --decrypter decrypter_csharp_rijndael_aes --ekey ekey_static --runner msbuild_csharp_runner --dkey dkey_csharp_static --executor executor_csharp_virtual_alloc_thread --mutator mutator_random_string --shellcode /home/Tools/Active\ Directory/dropengine/shell.bin -o payload.csproj --debug
{
"crypter": {},
"decrypter": {},
"dkeys": [],
"ekeys": [],
"executor": {},
"interface": {},
"master": {
"build": false,
"compatible": false,
"crypter": "crypter_aes",
"debug": true,
"decrypter": "decrypter_csharp_rijndael_aes",
"dkeys": [
"dkey_csharp_static"
],
"ekeys": [
"ekey_static"
],
"executor": "executor_csharp_virtual_alloc_thread",
"interface": "csharp_runner_interface",
"list": null,
"mutator": "mutator_random_string",
"output_file": "payload.csproj",
"postmodules": [],
"premodules": [],
"print_help": false,
"runner": "msbuild_csharp_runner",
"shellcode": null,
"validate_modules": false
},
"mutator": {},
"postmodules": [],
"premodules": [],
"runner": {}
}

Fails to build

Getting the following errors while trying to build

python3 dropengine.py --build --interface csharp_runner_interface --runner msbuild_csharp_runner --crypter crypter_aes --decrypter decrypter_csharp_rijndael_aes --ekey ekey_static --dkey dkey_csharp_static --executor executor_csharp_virtual_alloc_thread --mutator mutator_random_string --input-file shell.bin --output-file shell.csproj
executor
runner
decrypter
Traceback (most recent call last):
  File "dropengine.py", line 19, in <module>
    payload = interface.create_payload()
  File "/root/test/dropengine/base/interfaces/runner_interface.py", line 74, in create_payload
    self.merge_keys()
  File "/root/test/dropengine/base/interfaces/runner_interface.py", line 84, in merge_keys
    ekey_data['val_array'] = self.shellcode_format.render(ekey_data['val'])
  File "/root/test/dropengine/modules/shellcode/csharp_bytes.py", line 14, in render
    return self._render_helper(text)
  File "/root/test/dropengine/modules/shellcode/csharp_bytes.py", line 19, in _render_helper
    split_chars = text.hex(' ').split()
TypeError: hex() takes no arguments (1 given)

msbuild system.accessviolationexception

H s0lst1c3,
I ran this command python dropengine.py --build
--interface csharp_runner_interface
--crypter crypter_aes
--decrypter decrypter_csharp_rijndael_aes
--ekey ekey_static
--runner msbuild_csharp_runner
--dkey dkey_csharp_static
--executor executor_csharp_virtual_alloc_thread
--mutator mutator_random_string
--shellcode shell.bin
--o example.csproj

Here shell.bin is a cobalt strike raw shellcode. After running I get this error in windows Version 10.0.19041 Build 19041
64 bit..

Module loading did not work.

This may be because I am using python 3.8.5 instead of 3.7 (not for lack of trying as I was unable to get a virtual environment setup with any earlier versions of python) but i keep getting the following error when i try to run dropengine.py with any or no arguments

Crypter modules requires attribute: self.compatible_decrypter
ERROR:root:Module loading did not work
Crypter modules requires attribute: self.compatible_decrypter
ERROR:root:Module loading did not work
[!] Error: module MDKey must have attribute: self.compatible_ekeys

perhaps you could point me in the right direction as to what this error is from or verify if the python version is the issue or not.
I really am eager to try the tool out. It looked pretty interesting in the defcon presentation.
Thanks in advanced.