Demonstration of the research study "Extract Me If You Can" based on DECAF

[aleff]

Does anyone know if there is a technical demonstration of the paper Extract Me If You Can by Carmony, C., Hu, X., Yin, H., Bhaskar, A.V., & Zhang, M. (2016)?

I am trying to set DECAF correctly using the wiki presents on the github repository but without success.
Could anyone tell me how to properly start a virtual machine created with VirtualBox with iso Windows SP3 XP?

I tried the following commands in sequents:

1. sudo apt-get install qemu sudo apt-get build-dep qemu

2. sudo apt-get install binutils-dev

3. sudo apt-get install libboost-all-dev

4. ./configure make

5. VBoxManage clonehd --format RAW Windows-SP3-XP-NS-Project.vdi img.raw qemu-img convert -f raw win.img -O qcow2 win.qcow

6. not having DECAF/trunk/i386-softmmu i used the qemu-system-i386 command of

   sudo apt-get install -y qemu-system-i386

I tried to follow the DECAF++ instruction but the configure command doesn't work in DECAF/decaf directory.
I'm trying to run it with docker but i don't understand what I should do in the step "Copy the guest image to docker volume decafvolume".

I'm using Ubuntu 22.

 

[Old Tom Bombadil]

I tried to follow the DECAF++ instruction but the configure command doesn't work in DECAF/decaf directory.

I'm sorry, but I have no idea what you're doing overall. But your Step 4 may explain some of your trouble. The ./configure and make are separate commands and need to run separately -- ./configure first, then make. These are commonly used to compile programs from source code, but I cannot tell if they will properly prepare you for your Step 5.

Hopefully someone else will be able to help further. Good luck!

 

[aleff]

I'm sorry, but I have no idea what you're doing overall. But your Step 4 may explain some of your trouble. The ./configure and make are separate commands and need to run separately -- ./configure first, then make. These are commonly used to compile programs from source code, but I cannot tell if they will properly prepare you for your Step 5.

Hopefully someone else will be able to help further. Good luck!

I tried to use ./configure command previous make command but i have an error in libtsk.so library, for you what can be the problem?

 

[Old Tom Bombadil]

Again, I have no idea what you're doing, so I will not be much help. But another thing I've noticed is your Step 1 is wrong too. You have 2 commands joined together like you did in Step 4.

The first part should work:

sudo apt-get install qemu

It's the 2nd part that looks wrong to me. It may need to be:

sudo apt-get install build-dep

Whatever it is, I think you need to review your sources and be really sure you are following the instructions exactly. Complicated stuff like this will not tolerate simple mistakes like you're showing us.

 

[KGIII]

Complicated stuff like this will not tolerate simple mistakes like you're showing us.

I want to touch on this...

The terminal is powerful, useful, and entirely unforgiving.

If you don't know what you're doing, copy/pasting commands you find on the 'net can be frustrating - and have unforeseen consequences. Take care to use only trusted sites and it's always best to know exactly what a command is going to do before pressing the enter key.