{"action":"created","issue":{"url":"https://api.github.com/repos/Genetic-Malware/Ebowla/issues/17","repository_url":"https://api.github.com/repos/Genetic-Malware/Ebowla","labels_url":"https://api.github.com/repos/Genetic-Malware/Ebowla/issues/17/labels{/name}","comments_url":"https://api.github.com/repos/Genetic-Malware/Ebowla/issues/17/comments","events_url":"https://api.github.com/repos/Genetic-Malware/Ebowla/issues/17/events","html_url":"https://github.com/Genetic-Malware/Ebowla/issues/17","id":215291420,"number":17,"title":"A couple os issues running powershell payload","user":{"login":"ubermanchego","id":6847856,"avatar_url":"https://avatars2.githubusercontent.com/u/6847856?v=3","gravatar_id":"","url":"https://api.github.com/users/ubermanchego","html_url":"https://github.com/ubermanchego","followers_url":"https://api.github.com/users/ubermanchego/followers","following_url":"https://api.github.com/users/ubermanchego/following{/other_user}","gists_url":"https://api.github.com/users/ubermanchego/gists{/gist_id}","starred_url":"https://api.github.com/users/ubermanchego/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ubermanchego/subscriptions","organizations_url":"https://api.github.com/users/ubermanchego/orgs","repos_url":"https://api.github.com/users/ubermanchego/repos","events_url":"https://api.github.com/users/ubermanchego/events{/privacy}","received_events_url":"https://api.github.com/users/ubermanchego/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-03-19T20:16:59Z","updated_at":"2017-03-19T23:03:37Z","closed_at":"2017-03-19T23:03:37Z","body":"Hi there,\r\nI'm testing you tool and loving it, but when running Ebowla with the powershell payload(Empire launcher) I got a couple of errors.\r\nWhen I try the generated ps1 script in the victim machine(Windows 10), I get the following error message every time:\r\n![captura de pantalla 2017-03-19 a las 21 05 47](https://cloud.githubusercontent.com/assets/6847856/24084302/e54a1ee8-0ce7-11e7-9826-a41d4269d3fd.png)\r\n\r\nAlthough I get the agent back all the same:\r\n\r\n![captura de pantalla 2017-03-19 a las 21 09 33](https://cloud.githubusercontent.com/assets/6847856/24084327/70cc6750-0ce8-11e7-9218-1b3dc995dfd2.png)\r\n\r\nThe other issue is when I try to set the clean_output to True, with the same payload, I get this error:\r\n\r\n**[*] Writing Powershell payload to: powershell_symmetric_launcher1.ps1.ps1\r\n[!] Error Selecting Type of File for Cleaning : powershell_symmetric_launcher1.ps1.ps1**\r\n\r\nRunning the script still gives me all the output, and the same error as before.\r\nI uploaded my config file to pastebin if it's of any help: https://pastebin.com/SvK7vBbE\r\n"},"comment":{"url":"https://api.github.com/repos/Genetic-Malware/Ebowla/issues/comments/287655626","html_url":"https://github.com/Genetic-Malware/Ebowla/issues/17#issuecomment-287655626","issue_url":"https://api.github.com/repos/Genetic-Malware/Ebowla/issues/17","id":287655626,"user":{"login":"secretsquirrel","id":1679850,"avatar_url":"https://avatars1.githubusercontent.com/u/1679850?v=3","gravatar_id":"","url":"https://api.github.com/users/secretsquirrel","html_url":"https://github.com/secretsquirrel","followers_url":"https://api.github.com/users/secretsquirrel/followers","following_url":"https://api.github.com/users/secretsquirrel/following{/other_user}","gists_url":"https://api.github.com/users/secretsquirrel/gists{/gist_id}","starred_url":"https://api.github.com/users/secretsquirrel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/secretsquirrel/subscriptions","organizations_url":"https://api.github.com/users/secretsquirrel/orgs","repos_url":"https://api.github.com/users/secretsquirrel/repos","events_url":"https://api.github.com/users/secretsquirrel/events{/privacy}","received_events_url":"https://api.github.com/users/secretsquirrel/received_events","type":"User","site_admin":false},"created_at":"2017-03-19T23:03:37Z","updated_at":"2017-03-19T23:03:37Z","body":"You are running your own provided code from what I can tell. \r\n\r\nThe error lies there.\r\n\r\nThere is no cleaning for powershell scripts yet.\r\n"}}
{"actor":{"display_login":"secretsquirrel"}}