S.E.T Error - unpack requires a string argument of length 8

Quote:

---

Originally Posted by corrupt

Having the same issue. I changed UPX_PATH in /pentest/exploits/set/config/set_config

to

UPX_PATH=/pentest/web/scanners/sqlmap/lib/contrib/upx/linux/upx

and I still get the following error in SET:
[*] UPX packer not found in the pathname specified in config. Disabling UPX packing for executable!

/pentest/web/scanners/sqlmap/lib/contrib/upx/linux/upx appears to be the correct path - so I'm stumped.

Running BT5_GNOME-VM-32 image.

Also - I can verify that setting DIGITAL_SIGNATURE_STEAL to OFF fixes the UPX issue... definitely something odd going on with config has both set.

---

I don't think the DIGITAL_SIGNATURE_STEAL is an issue per se. If you read the release notes for s.e.t. 1.4, you can see what is being done there.

The thing about set_config is that is allows you to change variables within an attack vector, based on the results you're trying to achieve.

Hey guys, the problem was how the checksums were being created on x64 based platforms. It worked fine on 32 bit. I also fixed the relative path to UPX, all should be working fine now. I had to redo how the checksum calculations were being done for the peheaders for the digital signature stealing. It uses disitools by Didier, so it required a bit of modification (and actually downgrading to 0.1) which isn't a big deal. Everything is working like a champ now, shouldn't be getting any of those errors. Sorry about that. -ReL

Confirmed as working.

Just ran the same scenario as in the original post after updating SET and no error at all. I am running KDE 64-bit in a VM.