New tools: ghidra, x64dbg, dnspy, ollydbg and more

CHANGELOG.adoc

@@ -9,6 +9,7 @@ For a detailed view of what has changed, refer to the {uri-repo}/commits/master[
 == <next release>
 
 Enhancements::
+* New tools: Ghidra, x64dbg, ollydbg, dnSpy, Detect It Easy (die), HxD, PE-Sieve, PE-Bear ({uri-issue}9[#9], {uri-issue}125[#125])
 * Using VirtualBox's linked clones by default now.
   Creating a new spin of an existing template is now instant. ({uri-issue}126[#126])
 * Enabling UAC so the default account can use Edge without requiring changes ({uri-issue}93[#93])

malboxes/config-example.js

@@ -56,7 +56,7 @@
 	// Chocolatey packages to install on the VM
 	// TODO re-add dependencywalker and regshot once upstream choco package provides a checksum
 	// TODO: Re-add processhacker when its fixed for win7_64
-	"choco_packages": "sysinternals windbg 7zip putty wireshark winpcap",
+	"choco_packages": "ghidra x64dbg.portable dnspy ollydbg sysinternals hxd windbg die pesieve pebear 7zip putty wireshark winpcap",
 
 	// Setting the IDA Path will copy the IDA remote debugging tools into the guest
 	//"ida_path": "/path/to/your/ida",

malboxes/templates/snippets/provision_powershell.json

@@ -18,6 +18,7 @@
 		"inline": [
 			"choco install {{ choco_packages }} -y"
 		],
-		"valid_exit_codes": [ 0, 404 ]
+		{# 404 is broken download, 3010 is a .Net reboot required #}
+		"valid_exit_codes": [ 0, 404, 3010 ]
 	}
 {% endif %}

malboxes/templates/snippets/provision_powershell_win7.json

@@ -37,6 +37,7 @@
 			"choco install npcap --package-parameters '/winpcap_mode=yes' -y",
 			"choco install {{ choco_packages }} -y"
 		],
-		"valid_exit_codes": [ 0, 404 ]
+		{# 404 is broken download, 3010 is a .Net reboot required #}
+		"valid_exit_codes": [ 0, 404, 3010 ]
 	}
 {% endif %}