diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml index cbd6259..d0864aa 100644 --- a/.github/workflows/linux.yml +++ b/.github/workflows/linux.yml @@ -10,7 +10,7 @@ env: CARGO_TERM_COLOR: always jobs: - linux-builds: + linux-reverse-shell: runs-on: ubuntu-latest @@ -22,11 +22,29 @@ jobs: run: cargo update - name: Build reverse shell for Linux run: cargo build -p tcp_reverse_shell --verbose - - name: Clean - run: cargo clean + + linux-process-migration: + + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v2 + - name: Update rust + run: rustup update + - name: Update cargo + run: cargo update - name: Build process migration for Linux run: cargo build -p process_migration --verbose - - name: Clean again - run: cargo clean + + linux-all: + + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v2 + - name: Update rust + run: rustup update + - name: Update cargo + run: cargo update - name: Build all for Linux run: cargo build --verbose diff --git a/.github/workflows/shield_io_updater.yml b/.github/workflows/shield_io_updater.yml index e05e1e1..cd3b19a 100644 --- a/.github/workflows/shield_io_updater.yml +++ b/.github/workflows/shield_io_updater.yml @@ -7,7 +7,7 @@ on: branches: [ master ] jobs: - read-tomls: + update-reverse-shell: runs-on: ubuntu-latest @@ -25,6 +25,18 @@ jobs: file: '.custom_shields/tcp_reverse_shell.json' field: message value: ${{ steps.tcp_reverse_shell_ver.outputs.app_version }} + - uses: stefanzweifel/git-auto-commit-action@v4 + with: + commit_message: "Update reverse shell badge data via Github Action" + + update-process-migration: + + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v2 + with: + ref: ${{ github.head_ref }} - uses: dante-signal31/rust-app-version@v1.0.0 id: process_migration_ver with: @@ -37,4 +49,4 @@ jobs: value: ${{ steps.process_migration_ver.outputs.app_version }} - uses: stefanzweifel/git-auto-commit-action@v4 with: - commit_message: "Update shields data via Github Action" + commit_message: "Update process migration badge data via Github Action" diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index 19487d5..f50d639 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -10,27 +10,60 @@ env: CARGO_TERM_COLOR: always jobs: - windows-builds: + + windows-reverse-shell: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 - name: Update rust run: rustup update - - name: Update cargo - run: cargo update + - name: Apt update + run: sudo apt-get update - name: Install linker - run: sudo apt -y install mingw-w64 + run: sudo apt-get -y install mingw-w64 - name: Add Windows build target run: rustup target add x86_64-pc-windows-gnu + - uses: actions/checkout@v2 + - name: Update cargo + run: cargo update - name: Build reverse shell for Windows run: cargo build -p tcp_reverse_shell --target x86_64-pc-windows-gnu --verbose - - name: Clean - run: cargo clean + + windows-process-migration: + + runs-on: ubuntu-latest + + steps: + - name: Update rust + run: rustup update + - name: Apt update + run: sudo apt-get update + - name: Install linker + run: sudo apt-get -y install mingw-w64 + - name: Add Windows build target + run: rustup target add x86_64-pc-windows-gnu + - uses: actions/checkout@v2 + - name: Update cargo + run: cargo update - name: Build process migration for Windows run: cargo build -p process_migration --target x86_64-pc-windows-gnu --verbose - - name: Clean again - run: cargo clean + + windows-all: + + runs-on: ubuntu-latest + + steps: + - name: Update rust + run: rustup update + - name: Apt update + run: sudo apt-get update + - name: Install linker + run: sudo apt-get -y install mingw-w64 + - name: Add Windows build target + run: rustup target add x86_64-pc-windows-gnu + - uses: actions/checkout@v2 + - name: Update cargo + run: cargo update - name: Build all for Windows run: cargo build --target x86_64-pc-windows-gnu --verbose diff --git a/process_migration/README.md b/process_migration/README.md index fa880dd..040a377 100644 --- a/process_migration/README.md +++ b/process_migration/README.md @@ -32,3 +32,18 @@ and change the shellcode to the shellcode generated in step 1 ``` 4. Execute the payload on the victim machine +5. Return to the listener and enter desired commands for the victim machine to run + +![process_migration_linux](https://user-images.githubusercontent.com/14863147/151044951-5ee5b376-9f62-4e2e-a773-8c3b7a7d580e.gif) + +![process_migration_windows](https://user-images.githubusercontent.com/14863147/151059013-b053e9de-d75c-4470-97a7-a109c7f2ef55.gif) + +## Detection rates + +[Linux - 6 / 40](https://kleenscan.com/scan_result/81ac12b76a4be897145f1772b8c57d6c5330ee9bd574f480a825232bd846d113) + +![image](https://user-images.githubusercontent.com/14863147/151022870-a65ecbcc-7579-42c3-be6c-6c117c64bbd3.png) + +[Windows - 12 / 40](https://kleenscan.com/scan_result/402c207f8a1e53a0f9b9ed533c53b96077956bc91367520ac28289b2fc6cc511) + +![image](https://user-images.githubusercontent.com/14863147/151023019-735113d1-df25-41d7-8edc-b031320c7cea.png) diff --git a/tcp_reverse_shell/README.md b/tcp_reverse_shell/README.md index 44a6509..bc571e0 100644 --- a/tcp_reverse_shell/README.md +++ b/tcp_reverse_shell/README.md @@ -38,3 +38,17 @@ and change the IP address and port to match your attacking machine and listener, 4. Execute the payload on the victim machine 5. Return to the listener and enter desired commands for the victim machine to run + +![tcp_reverse_shell_linux](https://user-images.githubusercontent.com/14863147/151044738-72dbec76-73b1-47c5-831a-2e995673b559.gif) + +![tcp_reverse_shell_windows](https://user-images.githubusercontent.com/14863147/151058869-8e5e9f6e-3f7b-4a98-ab65-2ac5017a4e76.gif) + +## Detection rates + +[Linux - 0 / 40](https://kleenscan.com/scan_result/d185d1b1ba09f1a9133b72cb1bb12f177b32f3e65962baf7789b03c968ec8e47) + +![image](https://user-images.githubusercontent.com/14863147/151023219-84d7ab95-002e-4d20-89c7-264894d72683.png) + +[Windows - 0 / 40](https://kleenscan.com/scan_result/e9ffcf8fffd390b68a4cbc9d506571f0618e473732015be748e1960300bc6a85) + +![image](https://user-images.githubusercontent.com/14863147/151023325-d917df57-18ce-4e99-b059-968a479b65ce.png)