diff --git a/packages/hollowshunter.vm/hollowshunter.vm.nuspec b/packages/hollowshunter.vm/hollowshunter.vm.nuspec index 729e2f770..b756d2314 100644 --- a/packages/hollowshunter.vm/hollowshunter.vm.nuspec +++ b/packages/hollowshunter.vm/hollowshunter.vm.nuspec @@ -2,7 +2,7 @@ hollowshunter.vm - 0.3.6 + 0.3.8 hasherezade Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches). diff --git a/packages/hollowshunter.vm/tools/chocolateyinstall.ps1 b/packages/hollowshunter.vm/tools/chocolateyinstall.ps1 index aa749d27e..2fc2c3bc5 100644 --- a/packages/hollowshunter.vm/tools/chocolateyinstall.ps1 +++ b/packages/hollowshunter.vm/tools/chocolateyinstall.ps1 @@ -4,10 +4,10 @@ Import-Module vm.common -Force -DisableNameChecking $toolName = 'hollows_hunter' $category = 'PE' -$zipUrl = 'https://github.com/hasherezade/hollows_hunter/releases/download/v0.3.6/hollows_hunter32.zip' -$zipSha256 = 'b7a34de50fa8b7b289496c25cd96ecb79ca11dcc4a53586fdcd1a69ea32cb417' -$zipUrl_64 = 'https://github.com/hasherezade/hollows_hunter/releases/download/v0.3.6/hollows_hunter64.zip' -$zipSha256_64 = '3b5eadd70b44857db57328da8792e29d5b09e3e8561e609f389dd42b7747ef47' +$zipUrl = 'https://github.com/hasherezade/hollows_hunter/releases/download/v0.3.8/hollows_hunter32.zip' +$zipSha256 = 'f94758e6dfd6a3abb036d538d4532762566134cd48b00a22db54cb02003f348b' +$zipUrl_64 = 'https://github.com/hasherezade/hollows_hunter/releases/download/v0.3.8/hollows_hunter64.zip' +$zipSha256_64 = 'f316ecdfc8f5df76dac81473158b4a40564f7e1630c55f9be99667e87aebfddd' VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -zipUrl_64 $zipUrl_64 -zipSha256_64 $zipSha256_64 -consoleApp $true diff --git a/packages/netcat.vm/netcat.vm.nuspec b/packages/netcat.vm/netcat.vm.nuspec index 446a569d0..1109a4b2e 100644 --- a/packages/netcat.vm/netcat.vm.nuspec +++ b/packages/netcat.vm/netcat.vm.nuspec @@ -2,12 +2,12 @@ netcat.vm - 1.12 + 1.12.0 Hobbit Netcat is a networking utility for reading from and writing to network connections using TCP or UDP. - + diff --git a/packages/pesieve.vm/pesieve.vm.nuspec b/packages/pesieve.vm/pesieve.vm.nuspec index 22a16154a..67b708f17 100644 --- a/packages/pesieve.vm/pesieve.vm.nuspec +++ b/packages/pesieve.vm/pesieve.vm.nuspec @@ -2,12 +2,12 @@ pesieve.vm - 0.3.6 + 0.3.8 hasherezade pe-sieve recognizes and dumps variety of implants within the scanned process. - + diff --git a/packages/pestudio.vm/pestudio.vm.nuspec b/packages/pestudio.vm/pestudio.vm.nuspec index 15ece23bd..26252db83 100644 --- a/packages/pestudio.vm/pestudio.vm.nuspec +++ b/packages/pestudio.vm/pestudio.vm.nuspec @@ -2,7 +2,7 @@ pestudio.vm - 9.55 + 9.56 Marc Ochsenmeier The goal of pestudio is to spot artifacts of executable files in order to ease and accelerate Malware Initial Assessment. diff --git a/packages/pestudio.vm/tools/chocolateyinstall.ps1 b/packages/pestudio.vm/tools/chocolateyinstall.ps1 index 06322bacc..370590e98 100644 --- a/packages/pestudio.vm/tools/chocolateyinstall.ps1 +++ b/packages/pestudio.vm/tools/chocolateyinstall.ps1 @@ -4,7 +4,7 @@ Import-Module vm.common -Force -DisableNameChecking $toolName = 'pestudio' $category = 'PE' -$zipUrl = 'https://www.winitor.com/tools/pestudio/current/pestudio-9.55.zip' -$zipSha256 = '16c80b5afdeafec3120c9bcf93014dc08291d0840069a926f2728e1881674ca1' +$zipUrl = 'https://www.winitor.com/tools/pestudio/current/pestudio-9.56.zip' +$zipSha256 = '57f55e9e6c0db64dc28517efacc919e53dc6afef91ea1e6aa1fbd7be1ec35cbd' VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -innerFolder $true diff --git a/packages/snaffler.vm/snaffler.vm.nuspec b/packages/snaffler.vm/snaffler.vm.nuspec index 51149c7de..31e3a1e16 100644 --- a/packages/snaffler.vm/snaffler.vm.nuspec +++ b/packages/snaffler.vm/snaffler.vm.nuspec @@ -2,7 +2,7 @@ snaffler.vm - 1.0.135 + 1.0.140 l0ss, Sh3r4 Snaffler is a tool for enumerating accessible SMB shares in an Active Directory environment. diff --git a/packages/snaffler.vm/tools/chocolateyinstall.ps1 b/packages/snaffler.vm/tools/chocolateyinstall.ps1 index 589c361e1..4dfa36d6c 100644 --- a/packages/snaffler.vm/tools/chocolateyinstall.ps1 +++ b/packages/snaffler.vm/tools/chocolateyinstall.ps1 @@ -4,7 +4,7 @@ Import-Module vm.common -Force -DisableNameChecking $toolName = 'Snaffler' $category = 'Reconnaissance' -$exeUrl = 'https://github.com/SnaffCon/Snaffler/releases/download/1.0.135/Snaffler.exe' -$exeSha256 = 'c3777df8af97479419aaff9bbb113ddeb1aef7515a91fc683f8c62133466a137' +$exeUrl = 'https://github.com/SnaffCon/Snaffler/releases/download/1.0.140/Snaffler.exe' +$exeSha256 = '71bb8b15b1fbab1ebe7cd7898397d8a8a627af06dc510437f25887aa0aa0e4e1' VM-Install-Single-Exe $toolName $category $exeUrl -exeSha256 $exeSha256 -consoleApp $true diff --git a/packages/sysinternals.vm/sysinternals.vm.nuspec b/packages/sysinternals.vm/sysinternals.vm.nuspec index 544836971..302ffd96c 100644 --- a/packages/sysinternals.vm/sysinternals.vm.nuspec +++ b/packages/sysinternals.vm/sysinternals.vm.nuspec @@ -2,12 +2,12 @@ sysinternals.vm - 2023.10.18 + 2023.11.9 Mark Russinovich, Bryce Cogswell Sysinternals suite of troubleshooting tools. - + \ No newline at end of file