Win10XPE - Build Your Own Rescue Media [2]

APT38 · 12 Sep 2022

Xenithar said:

First, is the directory "MyPlugins" or "MoPlugins"? I ask because I have a "MyPlugins" directory but no "MoPlugins" directory. I can create the directory structure for "MoPlugins", but that has GOT to be a typo. If not, that's my issue.

MoPlugins is the correct folder name for dir - used for new apps not in the original distro

If you run the "XPE OPTIONAL ADD-ON BASE PACKAGE" from the Utilities\Mega Optional Application Download app the structure is created with all the sub dir's - or just manually create them, no probs

Xenithar · 12 Sep 2022

I see. Then that's my problem. I have always assumed that was a typo since I never saw in the directions anything about a "MoPlugin" directory. I'll get it straightened out. Thank you for pointing me in the correct direction, I do appreciate your time.

APT38 · 12 Sep 2022

let's hope everything OK now

tho not sure it will be!

I think the name came from Members Optional Plugins - hence MoPlugins, been there a long time ,
- since the original 'The Oven' forum

Xenithar · 12 Sep 2022

That makes sense. It also means that I have been doing it incorrectly all this time and it worked. I also did a PE Windows 7 back in the day from The Oven. Before that I used Hiren's PE XP. Only way to defragment page files, swap files, hibernation files, registry files, and Windows system files is offline, with one of these PE environments. Of course, SSD/NVME is making that a moot point since fragmentation doesn't matter.

Kyhi · 12 Sep 2022

As long as both files are in the same Directory - MoPlugins or MyPlugins - does not matter....
Applications with same name in MoPlugins override Applications in MyPlugins in the Selection Pane

GammaP · 13 Sep 2022

TLDR : Program works perfect. Service runs fine. But service can't call the program.

Hello Kyhi, APT38 and experts!

I am able to ssh into the Win10XPE using OpenSSH Server for x64. Link : https://github.com/PowerShell/Win32-...nSSH-Win64.zip

However, I am unable to use sshd as a service. I created and ran the service successfully, but login attempt is stuck. I am running my Win10XPE-x64 from a flatboot VHD in a virtual machine and it's a persistent boot.

Here is my long story.

--- Story starts ---

1. I installed the OpenSSH Server for x64. Link : https://github.com/PowerShell/Win32-...nSSH-Win64.zip

2. I rebooted into 'system' account and created the service. The service owner is "Local Service" which is the default. Command : sc create sshd binpath= "X:\Program Files\OpenSSH-Win64\sshd.exe" start= auto DisplayName= "OpenSSH Server for WinPE"

Arrenged for the public key in X:\ProgramData\ssh\administrators_authorized_keys

Amended the X:\ProgramData\ssh\sshd_config for public keypath and logging details.

Then I started the service : net start sshd

The service sshd was ready to accept incoming connections, as seen in the logfile X:\ProgramData\ssh\logs\sshd.log .

3. I started the client : system@<ip-address> -i priv-key-file

But the sshd.exe could not spawn a child process. I guess 'system' is not a proper user. So I rebooted into Administrator account ( name : nimda )

4. I then recreated and reran the sshd service as described in step 2 above.

5. I started the client : administrator@<ip-address> -i priv-key-file

Still no joy. So I tried : nimda@<ip-address> -i priv-key-file

6. As a final attempt I stopped the sshd service and ran sshd.exe from command line. When I started the client under nimda@<ip-address>, it got connected.

7. In the log, I found that sshd.exe was declaring itself as running under nimda : get_user_token - i am running as nimda, returning process token

After a few lines I saw the success message : spawning "C:\\windows\\System32\\OpenSSH\\sshd.exe" -z

--- Story ends ---

A possible workaround is switching to built-in administrator account nimda and starting sshd.exe in the logon script ( pecmd? ). But that's not the cleanest option. What if it crashes?

Has someone came across a similar problem in running a program as a service in Win10XPE? I think I am missing something vital and obvious. Please guide me.

Thank you!

-Gamma

TLDR : Program works perfect. Service runs fine. But service can't call the program. I guess because of user issues.

Xenithar · 13 Sep 2022

I just did as instructed and holy cow there is a lot of software available when you do it correctly. However, HFS+ fails to work.

Code:

 [Info] File [%BaseDir%\Projects\MoPlugins\Apps\File Tasks\HFS+ for Windows_XPE.Script] Version[1]
  
 [Info] Processing HFS+ for Windows...
 [Ignore] IF - File exists: [%BaseDir%\Projects\MoPlugins\Apps\File Tasks\HFS+ for Windows_XPE_File.Script] evaluated string: [If,Not,ExistFile,%FileContainer%,Exit,"%FileContainer% Container File Not Found"]
 [Ignore] IF - [x64true] is not equal to: [x64false] evaluated string: [If,%Architecture%%WoW64Support%,Equal,x64False,EchoExtended,"You Need To Enable WoW64 Basic To Run %ProgramTitle% In A 64-Bit Build",,,Message,2,Exit]
 [Success] IF - [run from ram] is equal to: [run from ram] evaluated string: [If,%RunFromWhere_ScrollBox%,Equal,"Run From RAM",RunFromRAM]
 Run - Processing section: [MRunFromRAM] From file: [%BaseDir%\Projects\Win10XPE\Macro.script]
       [Info] [//---------- BEGIN RunFromRAM Macro ------------------------------]
       [Success] SetVar - Sucessfuly changed the value of [%Target_Prog%] to: [%BaseDir%\Target\Program Files]
       [Success] SetVar - Sucessfuly changed the value of [%PE_Programs%] to: [X:\Program Files]
       [Info] [//---------- END RunFromRAM Macro ------------------------------]
 Run - Processed section [MRunFromRAM] in file: [%BaseDir%\Projects\Win10XPE\Macro.script]
 [Info] [//--]
 Run - Processing section: [Extract] From file: [%BaseDir%\Projects\MoPlugins\Apps\File Tasks\HFS+ for Windows_XPE.Script]
       [Success] SetVar - Sucessfuly changed the value of [%SetupContainerSize%] to: []
       [Success] IniRead - [%BaseDir%\Projects\MoPlugins\Apps\File Tasks\HFS+ for Windows_XPE_File.Script] Section [Folder] Key [hfs_win_trial.msi] to variable: [%SetupContainerSize%] with value [26919154,35892206]
       [Ignore] IF - [26919154,35892206-] is not equal to: [-] evaluated string: [If,%SetupContainerSize%-,Equal,-,Run,%ScriptFile%,Update_Container]
       [Info] [//--]
       [Info] Extracting HFS+ for Windows Setup File...
       [Ignore] IF - Directory does not exist: [%BaseDir%\Temp\HFS+ for Windows] evaluated string: [If,ExistDir,%GTemp%\%ProgramFolder%,DirDeleteQ,%GTemp%\%ProgramFolder%]
       [Success] DirMake - Created directory: [%BaseDir%\Temp\HFS+ for Windows]
       [Success] ExtractFile - [hfs_win_trial.msi] to: [%BaseDir%\Temp\HFS+ for Windows]
       [Success] ShellExecute: [Hide] using: [%BaseDir%\Projects\Tools\7z.exe] with parameters: [x "%BaseDir%\Temp\HFS+ for Windows\hfs_win_trial.msi" -y -o"%BaseDir%\Temp\HFS+ for Windows\HFS+ for Windows"]
       [Success] ShellExecute: [Hide] using: [%BaseDir%\Projects\Tools\7z.exe] with parameters: [x "%BaseDir%\Temp\HFS+ for Windows\HFS+ for Windows\cab1.cab" -y -o"%BaseDir%\Temp\HFS+ for Windows\HFS+ for Windows\HFS+ for Windows"]
       [Success] ExtractAllFiles - [%BaseDir%\Projects\MoPlugins\Apps\File Tasks\HFS+ for Windows_XPE.Script] Section [Folder] to: [%BaseDir%\Temp\HFS+ for Windows]
 Run - Processed section [Extract] in file: [%BaseDir%\Projects\MoPlugins\Apps\File Tasks\HFS+ for Windows_XPE.Script]
 [Info] [//--]
 [Ignore] IF - Directory does not exist: [%BaseDir%\Target\Program Files\HFS+ for Windows] evaluated string: [If,ExistDir,%Target_Prog%\%ProgramFolder%,DirDeleteQ,%Target_Prog%\%ProgramFolder%]
 [Success] IF - Directory does not exist: [%BaseDir%\Target\Program Files\HFS+ for Windows] evaluated string: [If,Not,ExistDir,%Target_Prog%\%ProgramFolder%,DirMake,%Target_Prog%\%ProgramFolder%]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Program Files\HFS+ for Windows]
 [Info] [//--]
 [Success] SetVar - Sucessfuly changed the value of [%Sapp%] to: [%BaseDir%\Temp\HFS+ for Windows\HFS+ for Windows\HFS+ for Windows]
 [Success] SetVar - Sucessfuly changed the value of [%Tapp%] to: [%BaseDir%\Target\Program Files\HFS+ for Windows]
 [Info] [//--]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Program Files\HFS+ for Windows\apmwin]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Program Files\HFS+ for Windows\csvol]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Program Files\HFS+ for Windows\gpt_loader]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Program Files\HFS+ for Windows\hfsplus]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Program Files\HFS+ for Windows\hfsplusrec]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Program Files\HFS+ for Windows\mounthlp]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Program Files\HFS+ for Windows\platforms]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Program Files\HFS+ for Windows\utils]
 [Ignore] DirMake - Directory already exists, ignoring: [%BaseDir%\Target\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}]
 [Ignore] IF - Directory exists: [%BaseDir%\Target\Windows\System32\Drivers] evaluated string: [If,Not,ExistDir,%GTarget_Sys%\Drivers,DirMake,%GTarget_Sys%\Drivers]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Windows\System32\DRVSTORE\apmwin_8EA531049C0E8EE7DE10DAABA3B949CE96D17F52]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Windows\System32\DRVSTORE\gpt_loader_75BEDD61C7AE6DC7DB3F0B6CFB2B86D55F59F84F]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Windows\System32\DRVSTORE\mounthlp_E956C9EC991411F84A4D411CF1DE78C001BB1802]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Windows\System32\DRVSTORE\csvol_E5666BDEC4D6A59383951E5ECC2810A491164EF9]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Windows\System32\DRVSTORE\hfsplus_6E5229AC49DE47D990A3DE8B57DD0B41AA6B5BB2]
 [Success] DirMake - Created directory: [%BaseDir%\Target\Windows\System32\DRVSTORE\hfsplusrec_8572449A94F16FFB4734275E3B0F33204D91206E]
 [Ignore] DirMake - Directory already exists, ignoring: [%BaseDir%\Target\Windows\System32\wbem\AutoRecover]
 [Ignore] DirMake - Directory already exists, ignoring: [%BaseDir%\Target\Windows\System32\wbem\repository]
 [Info] [//--]
 [Ignore] IF - [x64] is not equal to: [x86] evaluated string: [If,%Architecture%,Equal,x86,Run,%ScriptFile%,Filesx86]
 [Success] IF - [x64] is equal to: [x64] evaluated string: [If,%Architecture%,Equal,x64,Run,%ScriptFile%,Filesx64]
 Run - Processing section: [Filesx64] From file: [%BaseDir%\Projects\MoPlugins\Apps\File Tasks\HFS+ for Windows_XPE.Script]
       [Info] Copying HFS+ for Windows Program Files...
       [Success] FileCopy - Copied [%BaseDir%\Temp\HFS+ for Windows\HFS+ for Windows\HFS+ for Windows\apmwin.cat.x64.w10] to: [%BaseDir%\Target\Program Files\HFS+ for Windows\apmwin\apmwin.cat]
       [Success] FileCopy - Copied [%BaseDir%\Temp\HFS+ for Windows\HFS+ for Windows\HFS+ for Windows\apmwin.inf.x64.w10] to: [%BaseDir%\Target\Program Files\HFS+ for Windows\apmwin\apmwin.inf]
       [Success] FileCopy - Copied [%BaseDir%\Temp\HFS+ for Windows\HFS+ for Windows\HFS+ for Windows\apmwin.sys.x64.w10] to: [%BaseDir%\Target\Program Files\HFS+ for Windows\apmwin\apmwin.sys]
       [Success] FileCopy - Copied [%BaseDir%\Temp\HFS+ for Windows\HFS+ for Windows\HFS+ for Windows\apmwinsrv.exe.x86] to: [%BaseDir%\Target\Program Files\HFS+ for Windows\apmwinsrv.exe]
      [Failed] FileCopy - Failed to copy [%BaseDir%\Temp\HFS+ for Windows\HFS+ for Windows\HFS+ for Windows\chkhfs.exe] to: [%BaseDir%\Target\Program Files\HFS+ for Windows\utils\chkhfs.exe]: The system cannot find the file specified.
      [Warning] Halt
 Run - Processed section [Filesx64] in file: [%BaseDir%\Projects\MoPlugins\Apps\File Tasks\HFS+ for Windows_XPE.Script]
 [Clock] Script time: 2 seconds and 641 milliseconds

 [Done] Finished processing script: HFS+ for Windows

Not sure why, I followed the instructions to the T. Guess it's time to find out what wants to act up.

*UPDATE*

Tried again. Many things failed to download, such as PassMark, FurMark, and GSmartControl. Tor still errors despite being in the correct spot now.

Code:

 [Info] File [%BaseDir%\Projects\MoPlugins\Apps\Network\TorBrowser_x64_XPE.Script] Version[1]
  
 [Info] Processing Tor Browser x64...
 [Ignore] IF - File exists: [%BaseDir%\Projects\MoPlugins\Apps\Network\TorBrowser_x64_XPE_File.7z] evaluated string: [If,Not,ExistFile,%SetupFile%,Exit,"%SetupFile% File Container Not Found"]
 [Ignore] IF - [x64] is not equal to: [x86] evaluated string: [If,%Architecture%,Equal,x86,EchoExtended,"%ProgramTitle% In A 64-Bit Application Only",,,Message,2,Exit]
 [Ignore] IF - [run from usb] is not equal to: [run from ram] evaluated string: [If,%RunFromWhere_ScrollBox%,Equal,"Run From RAM",RunFromRAM]
 [Info] [//--]
 Run - Processing section: [Extract] From file: [%BaseDir%\Projects\MoPlugins\Apps\Network\TorBrowser_x64_XPE.Script]
       [Info] Extracting Tor Browser x64 Setup File...
       [Ignore] IF - Directory does not exist: [%BaseDir%\Temp\TorBrowser_x64] evaluated string: [If,ExistDir,%GTemp%\%ProgramFolder%,DirDeleteQ,%GTemp%\%ProgramFolder%]
       [Success] DirMake - Created directory: [%BaseDir%\Temp\TorBrowser_x64]
       [Success] ShellExecute: [Hide] using: [%BaseDir%\Projects\Tools\7z.exe] with parameters: [x "%BaseDir%\Projects\MoPlugins\Apps\Network\TorBrowser_x64_XPE_File.7z" -pWin10XPE -y -o"%BaseDir%\Temp\TorBrowser_x64"]
 Run - Processed section [Extract] in file: [%BaseDir%\Projects\MoPlugins\Apps\Network\TorBrowser_x64_XPE.Script]
 [Info] [//--]
 [Ignore] IF - Directory does not exist: [%BaseDir%\ISO\Programs\TorBrowser_x64] evaluated string: [If,ExistDir,%Target_Prog%\%ProgramFolder%,DirDeleteQ,%Target_Prog%\%ProgramFolder%]
 [Ignore] IF - Directory exists: [%BaseDir%\ISO\Programs] evaluated string: [If,Not,ExistDir,%Target_Prog%,DirMake,%Target_Prog%]
[Failed] DirCopy - Failed to copy directory [%BaseDir%\Temp\TorBrowser_x64] to: [%BaseDir%\ISO\Programs]: Unknown error
[Warning] Halt
 [Clock] Script time: 3 seconds and 875 milliseconds

 [Done] Finished processing script: Tor Browser x64

*UPDATE*

Magical Jellybean failed (it worked when I was doing it wrong) but I believe it's a script error. Look at the source for copy. It is copying Temp\Magical Jellybean\Magical Jellybean. The second "Magical Jellybean" is wrong. It should not be there. I have Temp\Magical Jellybean which contains the setup file as it should.

Code:

[Info] File [%BaseDir%\Projects\MoPlugins\Apps\Security\Magical_JellyBean_KeyFinder_XPE.Script] Version[1]
  
 [Info] Processing Magical Jelly Bean Keyfinder...
 [Ignore] IF - File exists: [%BaseDir%\Projects\MoPlugins\Apps\Security\Magical_JellyBean_KeyFinder_XPE_File.Script] evaluated string: [If,Not,ExistFile,%FileContainer%,Exit,"%FileContainer% Not Found"]
 [Ignore] IF - [x64true] is not equal to: [x64false] evaluated string: [If,%Architecture%%WoW64Support%,Equal,x64False,EchoExtended,"You Need To Enable WoW64 Basic To Run %ProgramTitle% In A 64-Bit Build",,,Message,2,Exit]
 [Ignore] IF - [run from usb] is not equal to: [run from ram] evaluated string: [If,%RunFromWhere_ScrollBox%,Equal,"Run From RAM",RunFromRAM]
 [Info] [//--]
 Run - Processing section: [Extract] From file: [%BaseDir%\Projects\MoPlugins\Apps\Security\Magical_JellyBean_KeyFinder_XPE.Script]
       [Success] SetVar - Sucessfuly changed the value of [%SetupContainerSize%] to: []
       [Success] IniRead - [%BaseDir%\Projects\MoPlugins\Apps\Security\Magical_JellyBean_KeyFinder_XPE_File.Script] Section [Folder] Key [KeyFinderInstaller.exe] to variable: [%SetupContainerSize%] with value [9443095,12590794]
       [Ignore] IF - [9443095,12590794-] is not equal to: [-] evaluated string: [If,%SetupContainerSize%-,Equal,-,Run,%ScriptFile%,Update_Container]
       [Info] [//--]
       [Info] Extracting Magical Jelly Bean Keyfinder Setup File...
       [Ignore] IF - Directory does not exist: [%BaseDir%\Temp\Magical JellyBean] evaluated string: [If,ExistDir,%GTemp%\%ProgramFolder%,DirDeleteQ,%GTemp%\%ProgramFolder%]
       [Success] DirMake - Created directory: [%BaseDir%\Temp\Magical JellyBean]
       [Info] [//--]
       [Success] ExtractFile - [KeyFinderInstaller.exe] to: [%BaseDir%\Temp\Magical JellyBean]
       [Success] ShellExecute: [Hide] using: [cmd.exe] with parameters: [/c %BaseDir%\Projects\Tools\innounp.exe -x -b -a -d"%BaseDir%\Temp\Magical JellyBean" "%BaseDir%\Temp\Magical JellyBean\KeyFinderInstaller.exe"]
       [Success] ShellExecute: [Hide] using: [cmd.exe] with parameters: [/C ren "%BaseDir%\Temp\Magical JellyBean\{app}" "Magical JellyBean"]
 Run - Processed section [Extract] in file: [%BaseDir%\Projects\MoPlugins\Apps\Security\Magical_JellyBean_KeyFinder_XPE.Script]
 [Info] [//--]
 [Ignore] IF - Directory does not exist: [%BaseDir%\ISO\Programs\Magical JellyBean] evaluated string: [If,ExistDir,%Target_Prog%\%ProgramFolder%,DirDeleteQ,%Target_Prog%\%ProgramFolder%]
 [Success] DirMake - Created directory: [%BaseDir%\ISO\Programs\Magical JellyBean]
[Failed] DirCopy - Failed to copy directory [%BaseDir%\Temp\Magical JellyBean\Magical JellyBean] to: [%BaseDir%\ISO\Programs]: Unknown error
[Warning] Halt
 [Clock] Script time: 731 milliseconds

 [Done] Finished processing script: Magical Jelly Bean Keyfinder

Kyhi · 14 Sep 2022

I have Temp\Magical Jellybean which contains the setup file as it should.

Code:

"H:\Win10XPE\Temp\Magical JellyBean\Magical JellyBean"
"H:\Win10XPE\Temp\Magical JellyBean\install_script.iss"
"H:\Win10XPE\Temp\Magical JellyBean\KeyFinderInstaller.exe"

Then that setup file is extracted by innoup into Temp\Magical Jellybean\Magical Jellybean

Code:

"H:\Win10XPE\Temp\Magical JellyBean\Magical JellyBean\keyfinder.cfg"
"H:\Win10XPE\Temp\Magical JellyBean\Magical JellyBean\keyfinder.exe"

I am not sure why these Applications keep failing on your PC - but it is not the scripts, they have been around to long...

So you have to start following the folder locations, it appears it is during the extraction process, either not extracting or the "Extract To" folder could not be created....

And I would like to see the whole build LOG file, not just the failed application.... As I can not see the system variables.....
As it appears you are running single applications via the small green interface button...

APT38 · 14 Sep 2022

@Kyhi
magic jellybean d/l changed from a exe to a zip, which is why i put a modded script up on post#4

Kyhi · 14 Sep 2022

So that why that one failing - as his script has not been updated - thus it is trying to download the Old EXE file - rather then the New Zip file

APT, I have looked at your updates - you keep failing to hide container file... And our version/history/date do not match or follow each other... so I gave up on that..

Win10XPE - Build Your Own Rescue Media [2]

Runnng program as a service