Skip to content

Download OpenBAS implant with correct architecture for CS agent #2868

@damgouj

Description

@damgouj

Context

When we add CS hosts in OpenBAS, the architecture x64 is set by default because the host architecture isn't known by Crowdstrike.

Use case

I launch a payload with a Crowdstrike agent but I don't know if it's going to work on my host because the implant x64 is always downloaded.

Proposed Solution

Adapt the script to download the implant for a Crowdstrike payload by checking the architecture in the script:

  • If the host arch is x64 -> download the implant x64,
  • If the host arch is arm64 -> download the implant arm64,
  • If the host arch is another arch -> curl OpenBAS to set a trace "Architecture not compatible with OpenBAS"

Add the compatible architecture in the docs and in the installation stepper for Crowdstrike.

If the feature request is approved, would you be willing to submit a PR?

Yes

Metadata

Metadata

Assignees

Labels

featureuse for describing a new feature to developsolvedThe issue has been solved

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions