Giters

mandiant / commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

Home Page:https://www.mandiant.com/resources/blog/commando-vm-windows-offensive-distribution

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

3.0 Bugs

nos3curity opened this issue · comments

commented

This issue exists to keep track of packages that are currently failing to install with the dev branch of Commando and of bugs that currently need fixing prior to a public release.

Broken packages:

  • putty.vm - seems like an upstream issue. choco install throws an error about invalid xml structure.
  • metasploit.vm - checksum mismatch due to rolling installers. need to find a stable build link.
  • hashcat.vm - fails on AMD processors. need to add compatibility.
  • lockhunter - upstream issue with the chocolatey package. won't fix.
  • SublimeText3.PackageControl - upstream issue with the choco package. won't fix.
  • Add metapackages that remove shortcuts for some programs:
    • Google Chrome
    • Firefox
    • Obsidian
    • VSCode
    • VLC
    • Acrobat
    • Tor Browser (metapackage exists, needs a fix)

Bugs:

  • Disable QuickEdit and Insert PowerShell modes to avoid the install freezing until a keypress
  • Pin a shortcut to PsExec to Lateral Movement from Sysinternals
  • Standardize PowerShell tool shortcuts (.lnk, not ps1.lnk) (see PR in VM-Packages)
  • Abort installation if the checks window is closed
  • Remove the disk space requirement message for the custom profile
  • Fix the profile manager erroring when continuing without a custom profile present

Categories that require more packages (solicit requests and add):

  • Privilege Escalation
  • Lateral Movement
  • Persistence
commented

Closing due to a migration to a kanban internally