]HackingTeam[ KnowledgeBase Product
Search:     Advanced search

Offline infection requirements

Article ID: 223
Last updated: 10 Jun, 2015

Details

Mentioned below are the operating systems that you can infect offline; however you must also consider the backdoor requirements that will later be installed on the machine.

Requirements/Conditions/Restraints:

You can infect only the following operating systems:

  • Windows XP, Vista, 7, 8, 8.1;
  • OS X 10.5, 10.6, 10.7, 10.8, 10.9 e 10.10;
  • Linux Debian, Ubuntu, Mint, CentOS, Fedora, OpenSuse e Mageia.
     

General advice

Although we never encountered problems during lab tests, please follow some general advice:

  • DVD infection - burn the ISO to a Imation DVD, at a speed not exceeding 4x (with other CD/DVD brands some customers have encountered boot problems);
  • USB infection - copy the ZIP contents on a USB Key at least as big as 2 GB (see this article for more details about the creation of a bootable USB key).

BIOS configuration

Some BIOS settings may create problems, to prevent them you can:

  1. enter the BIOS;
  2. set hard disk mode to IDE;
  3. change the boot sequence so that the machine boots from CD/DVD or USB first (depending on the infection vector used);
  4. restart the computer and run the offline boot from CD/DVD or USB;
  5. at the end of the infection, restart the computer and restore the previous BIOS configuration (restoring the original hard disk mode and boot sequence);
  6. restart the computer and try to load the operating system installed on the PC.

!!! ⇒ The type of agent installed on the target is chosen automatically based on the configuration of the target system. You can not force the installation of a particular agent type.


Article ID: 223
Last updated: 10 Jun, 2015
Revision: 3
document Public
Views: 3
Comments: 0
This article was:   Helpful | Not helpful
Prev   Next
Error related to offline infection (Config marker not found:...     Scout: how does it work?