Add garbageman.vm

Closes #343. fixed installer
mandiant · May 26, 2023 · 42b9bf3 · 42b9bf3
1 parent 297f991
commit 42b9bf3
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 0 deletions.
diff --git a/packages/garbageman.vm/garbageman.vm.nuspec b/packages/garbageman.vm/garbageman.vm.nuspec
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
+  <metadata>
+    <id>garbageman.vm</id>
+    <version>0.2.4</version>
+    <authors>alphillips-lab</authors>
+    <description>A set of tools designed for .NET heap analysis. These tools offer the following benefits for malware researchers: Ability to extract clear-text; payload (PE Images etc.) from .NET heaps quickly; Easy analysis of encrypted network protocols, signs of data exfiltration, and similar; Ability to overcome malware anti-dumping techniques (psnotify)</description>
+    <dependencies>
+      <dependency id="common.vm" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/packages/garbageman.vm/tools/chocolateyinstall.ps1 b/packages/garbageman.vm/tools/chocolateyinstall.ps1
@@ -0,0 +1,10 @@
+$ErrorActionPreference = 'Stop'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'GarbageMan'
+$category = 'dotNet'
+
+$zipUrl = 'https://github.com/WithSecureLabs/GarbageMan/releases/download/v0.2.4/GarbageMan-0.2.4.zip'
+$zipSha256 = '84007e73a21c491e9517ff70955fc8ff02b0a4a0d562d3e21521b6169b21004e'
+
+VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -innerFolder $true
diff --git a/packages/garbageman.vm/tools/chocolateyuninstall.ps1 b/packages/garbageman.vm/tools/chocolateyuninstall.ps1
@@ -0,0 +1,7 @@
+$ErrorActionPreference = 'Continue'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'GarbageMan'
+$category = 'dotNet'
+
+VM-Uninstall $toolName $category