Comments (4)
hi there, sorry for taking so long to answer, I don't really remember which commands I used to install the toolchain, all I can tell you is that I used Arch for most of the time and that all I did is simply google searches to know what to install. Best of luck!
from nanodump.
i have same problem.
`┌──(kali㉿kali)-[~/Desktop/Client/nanodump]
└─$ sudo make -f Makefile.mingw
[sudo] password for kali:
rm -f dist/*
RELEASE
x86_64-w64-mingw32-gcc source/spoof_callstack.c source/hw_breakpoint.c source/shtinkering.c source/dinvoke.c source/utils.c source/handle.c source/impersonate.c source/modules.c source/syscalls.c source/token_priv.c source/malseclogon.c source/nanodump.c source/werfault.c source/entry.c -o dist/nanodump.x64.exe -masm=intel -Wall -I include -Wl,--dynamicbase -DNANO -DEXE
x86_64-w64-mingw32-strip --strip-all dist/nanodump.x64.exe
i686-w64-mingw32-gcc source/spoof_callstack.c source/hw_breakpoint.c source/shtinkering.c source/dinvoke.c source/utils.c source/handle.c source/impersonate.c source/modules.c source/syscalls.c source/token_priv.c source/malseclogon.c source/nanodump.c source/werfault.c source/entry.c -o dist/nanodump.x86.exe -masm=intel -Wall -I include -Wl,--dynamicbase -DNANO -DEXE
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/utils.h:3,
from include/spoof_callstack.h:9,
from source/spoof_callstack.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/spoof_callstack.h:6:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/utils.h:3,
from include/dinvoke.h:6,
from include/hw_breakpoint.h:4,
from source/hw_breakpoint.c:2:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/dinvoke.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/utils.h:3,
from include/dinvoke.h:6,
from include/shtinkering.h:6,
from source/shtinkering.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/shtinkering.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/utils.h:3,
from include/dinvoke.h:6,
from source/dinvoke.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/dinvoke.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/utils.h:3,
from source/utils.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/nanodump.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/utils.h:3,
from source/handle.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/nanodump.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/utils.h:3,
from include/dinvoke.h:6,
from include/impersonate.h:6,
from source/impersonate.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/impersonate.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from source/modules.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from source/syscalls.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/nanodump.h:4,
from include/utils.h:3,
from include/syscalls.h:11:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
source/syscalls.c:2726:28: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
2726 | __declspec(naked) NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/utils.h:3,
from include/token_priv.h:6,
from source/token_priv.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/token_priv.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/malseclogon.h:6,
from source/malseclogon.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/malseclogon.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from source/nanodump.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/nanodump.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from include/utils.h:3,
from include/dinvoke.h:6,
from include/werfault.h:7,
from source/werfault.c:1:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/werfault.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/modules.h:7,
from include/nanodump.h:19,
from source/entry.c:6:
include/syscalls.h:528:19: error: conflicting types for ‘NtSetInformationThread’; have ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
528 | EXTERN_C NTSTATUS NtSetInformationThread(
| ^~~~~~~~~~~~~~~~~~~~~~
In file included from include/nanodump.h:4:
/usr/share/mingw-w64/include/winternl.h:1103:18: note: previous declaration of ‘NtSetInformationThread’ with type ‘NTSTATUS(void *, THREADINFOCLASS, void *, ULONG)’ {aka ‘long int(void *, THREADINFOCLASS, void *, long unsigned int)’}
1103 | NTSTATUS NTAPI NtSetInformationThread(HANDLE ThreadHandle,THREADINFOCLASS ThreadInformationClass,PVOID ThreadInformation,ULONG ThreadInformationLength);
| ^~~~~~~~~~~~~~~~~~~~~~
make: *** [Makefile.mingw:15: nanodump] Error 1
┌──(kali㉿kali)-[~/Desktop/Client/nanodump]
└─$ make -f Makefile.clang
rm -f dist/*
RELEASE
clang -target x86_64-w64-windows-gnu source/spoof_callstack.c source/hw_breakpoint.c source/shtinkering.c source/dinvoke.c source/utils.c source/handle.c source/impersonate.c source/modules.c source/syscalls.c source/token_priv.c source/malseclogon.c source/nanodump.c source/werfault.c source/entry.c -o dist/nanodump.x64.exe -Wall -I include -Xclang -DNANO -DEXE -g0
source/nanodump.c:422:11: warning: variable 'number_of_ranges' set but not used [-Wunused-but-set-variable]
DWORD number_of_ranges = 0;
^
1 warning generated.
/usr/bin/ld: cannot find -lgcc: No such file or directory
/usr/bin/ld: cannot find -lgcc_eh: No such file or directory
/usr/bin/ld: cannot find -lgcc: No such file or directory
/usr/bin/ld: cannot find -lgcc_eh: No such file or directory
clang: error: linker command failed with exit code 1 (use -v to see invocation)
make: *** [Makefile.clang:12: nanodump] Error 1
┌──(kali㉿kali)-[~/Desktop/Client/nanodump]
`
from nanodump.
Related Issues (20)
- can upload sln pro? please HOT 4
- NtReadVirtualMemory, error HOT 1
- Promblem DUMP_MAX_SIZE. HOT 1
- What Can I do if there is DUMP_MAX_SIZE warnning? HOT 2
- LSASS process not found HOT 9
- Get LSASS PID fails HOT 3
- source/utils.c(264): error C2065: 'ProcessInstrumentationCallback': undeclared identifier HOT 3
- Unresolved external in nanodump.x64.o HOT 2
- Maybe issue with nanodump -write HOT 2
- Nanodump does not run on Server 2012 R2 HOT 7
- dumpfile parse error HOT 5
- Werfault technique returns empty lsass dump HOT 6
- fix ppl exploit for Windows server 2012 HOT 1
- Make issue Makefile.mingw source/malseclogon.c HOT 3
- not lucky with BEST HOT 1
- sekurlsa::minidump from nanodump output file HOT 3
- malseclogon_trigger_lock leaks process and thread handles returned from CreateProcessWithTokenW/CreateProcessWithLogonW HOT 1
- tiny correctness bug in snapshot_process() HOT 3
- Issues when I run with CoffLoader HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nanodump.