Giter Club home page Giter Club logo

beaconeye's People

Contributors

ccob avatar rasta-mouse avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

beaconeye's Issues

Unhandled Exception: NtApiDotNet.NtException: (0x8000000D) - {Partial Copy}

Any ideas on how to fix this?
It's an x86 version from releases.

[+] Scanning for beacon processess...
NotSpecified: (:String) [], RemoteException
    + CategoryInfo          : NotSpecified: (:String) [], RemoteException
    + FullyQualifiedErrorId : NativeCommandError
    + PSComputerName        : pc

Unhandled Exception: NtApiDotNet.NtException: (0x8000000D) - {Partial Copy}
Due to protection conflicts not all the requested bytes could be copied.
   at NtApiDotNet.NtObjectUtils.ToNtException(NtStatus status, Boolean throw_on_error)
   at NtApiDotNet.NtVirtualMemory.ReadMemory[T](SafeKernelObjectHandle process, Int64 base_address)
   at BeaconEye.NtProcessReader.ReadMemory[T](UInt64 address)
   at BeaconEye.ProcessReader.get_Heaps()
   at BeaconEye.BeaconEye.ProcessHasConfig(ProcessReader process)
   at BeaconEye.BeaconEye.IsBeaconProcess(ProcessReader process, Boolean monitor)
   at BeaconEye.BeaconEye.Main(String[] args)

Build error: error CS0246: The type or namespace name 'libyaraNET' could not be found

From a fresh git clone today, I get the following:

1>c:\_OpenSourceProjects\BeaconEye\BeaconEye.cs(3,7,3,17): error CS0246: The type or namespace name 'libyaraNET' could not be found (are you missing a using directive or an assembly reference?)
1>c:\_OpenSourceProjects\BeaconEye\BeaconEye.cs(66,16,66,21): error CS0246: The type or namespace name 'Rules' could not be found (are you missing a using directive or an assembly reference?)
========== Build: 0 succeeded, 1 failed,

Visual Studio says I have libyaraNET installed via NuGet but the "using libyaraNET;" statement is not recognizing it.

Unhandled Exception: System.ArgumentOutOfRangeException

Trying to analyze a process memory dump of a known Cobalt Strike process throws the following error. Same issue was found when compiling and using the x86 version of the project as well as when using the "--dump=C:\dump" variant of the command line argument. Only file file in the target directory is a .dmp file generated using Procdump on a Windows x64 machine.

x64\Release>BeaconEye.exe -v -d C:\dump
BeconEye by @EthicalChaos
CobaltStrike beacon hunter and command monitoring tool x86_64

[+] Scanning for beacon processess...

Unhandled Exception: System.ArgumentOutOfRangeException: Specified argument was out of the range of valid values.
at BeaconEye.MiniDumpReader.ReadMemory(UInt64 address, Int32 len)
at BeaconEye.MiniDumpReader.ReadMemory[T](UInt64 address)
at BeaconEye.MiniDumpReader..ctor(Stream source)
at BeaconEye.Reader.MiniDumpProcessEnumerator.GetProcesses()
at BeaconEye.BeaconEye.Main(String[] args)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.