SIFT workstation : fix rip.pl error 'Global symbol "$plugindir" requires explicit package name'

Sep 20, 2023 by Thibault Debatty | 610 views

Forensics

https://cylab.be/blog/287/sift-workstation-fix-rippl-error-global-symbol-plugindir-requires-explicit-package-name

If you are using the current version of the SIFT workstation, the installed version of RegRipper has a bug that shows the following error message: 'Global symbol "$plugindir" requires explicit package name'. Luckily this bug is easy to fix. Here is how...

First, make a backup of rip.pl, you never know...

sudo cp /usr/share/regripper/rip.pl \
    /usr/share/regripper/rip.pl.back

Then edit rip.pl:

sudo nano -c /usr/share/regripper/rip.pl

And add the following block at line 66:

# Define $plugindir
# https://cylab.be/blog/287/sift-workstation-fix-rippl-error-global-symbol
my $plugindir = File::Spec->catfile($scriptdir, "plugins");

rip.pl-bugfix.png

Now rip.pl should run as expected...

rip.pl.png

This blog post is licensed under CC BY-SA 4.0

Velociraptor : hunt malwares as a pack
Velociraptor is a digital forensic and incident response tool that allows to collect information on multiple endpoints at once, and easily analyze the collected data using Notebooks and a query language (called Velociraptor Query Language, VQL), which is very similar to SQL. This makes Velociraptor a valuable tool for threat hunting over a large network.
Nov 22, 2023 | 588 views
Explore the SAM hive with Regedit (and Sysinternals)
The Windows Registry is a kind of database that stores a lot of important configuration parameters for Windows and installed applications. The specific of this database is that the data is actually stored in different files called hives. One of these is the SAM (Security Account Manager) hive, which stores, among others, user passwords. Let's explore this hive a little..
Nov 21, 2023 | 643 views
Install Sysinternals
Sysinternals is a collection of powerful utilities for Windows. They can be used by system administrators to perform local or remote system administration, and also by analysts to perform some forensics tasks. The tools were originally developed by Mark Russinovich, and are now maintained by Microsoft. Here is how to install them...
Nov 21, 2023 | 386 views
This website uses cookies. More information about the use of cookies is available in the cookies policy.
Accept