From ea80b82d20a496a92257cd8cf24b30c8afdbda23 Mon Sep 17 00:00:00 2001 From: kmanc Date: Tue, 25 Jan 2022 13:42:28 -0800 Subject: [PATCH] Upgrades (#19) * first official detection rates! need to reorg readmes, add screenshots, and do gifs another day * separate build categories into jobs so its easier to read * also separate into jobs for clarity / it seems to make sense * Update README.md * Update README.md * Update README.md * Update README.md * Update README.md * Update README.md * mingw issue * still working on fixing * Update windows.yml * does this work? * Update windows.yml * Update windows.yml * Update README.md --- .github/workflows/linux.yml | 28 +++++++++++--- .github/workflows/shield_io_updater.yml | 16 +++++++- .github/workflows/windows.yml | 51 ++++++++++++++++++++----- process_migration/README.md | 15 ++++++++ tcp_reverse_shell/README.md | 14 +++++++ 5 files changed, 108 insertions(+), 16 deletions(-) diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml index cbd6259..d0864aa 100644 --- a/.github/workflows/linux.yml +++ b/.github/workflows/linux.yml @@ -10,7 +10,7 @@ env: CARGO_TERM_COLOR: always jobs: - linux-builds: + linux-reverse-shell: runs-on: ubuntu-latest @@ -22,11 +22,29 @@ jobs: run: cargo update - name: Build reverse shell for Linux run: cargo build -p tcp_reverse_shell --verbose - - name: Clean - run: cargo clean + + linux-process-migration: + + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v2 + - name: Update rust + run: rustup update + - name: Update cargo + run: cargo update - name: Build process migration for Linux run: cargo build -p process_migration --verbose - - name: Clean again - run: cargo clean + + linux-all: + + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v2 + - name: Update rust + run: rustup update + - name: Update cargo + run: cargo update - name: Build all for Linux run: cargo build --verbose diff --git a/.github/workflows/shield_io_updater.yml b/.github/workflows/shield_io_updater.yml index e05e1e1..cd3b19a 100644 --- a/.github/workflows/shield_io_updater.yml +++ b/.github/workflows/shield_io_updater.yml @@ -7,7 +7,7 @@ on: branches: [ master ] jobs: - read-tomls: + update-reverse-shell: runs-on: ubuntu-latest @@ -25,6 +25,18 @@ jobs: file: '.custom_shields/tcp_reverse_shell.json' field: message value: ${{ steps.tcp_reverse_shell_ver.outputs.app_version }} + - uses: stefanzweifel/git-auto-commit-action@v4 + with: + commit_message: "Update reverse shell badge data via Github Action" + + update-process-migration: + + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v2 + with: + ref: ${{ github.head_ref }} - uses: dante-signal31/rust-app-version@v1.0.0 id: process_migration_ver with: @@ -37,4 +49,4 @@ jobs: value: ${{ steps.process_migration_ver.outputs.app_version }} - uses: stefanzweifel/git-auto-commit-action@v4 with: - commit_message: "Update shields data via Github Action" + commit_message: "Update process migration badge data via Github Action" diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index 19487d5..f50d639 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -10,27 +10,60 @@ env: CARGO_TERM_COLOR: always jobs: - windows-builds: + + windows-reverse-shell: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 - name: Update rust run: rustup update - - name: Update cargo - run: cargo update + - name: Apt update + run: sudo apt-get update - name: Install linker - run: sudo apt -y install mingw-w64 + run: sudo apt-get -y install mingw-w64 - name: Add Windows build target run: rustup target add x86_64-pc-windows-gnu + - uses: actions/checkout@v2 + - name: Update cargo + run: cargo update - name: Build reverse shell for Windows run: cargo build -p tcp_reverse_shell --target x86_64-pc-windows-gnu --verbose - - name: Clean - run: cargo clean + + windows-process-migration: + + runs-on: ubuntu-latest + + steps: + - name: Update rust + run: rustup update + - name: Apt update + run: sudo apt-get update + - name: Install linker + run: sudo apt-get -y install mingw-w64 + - name: Add Windows build target + run: rustup target add x86_64-pc-windows-gnu + - uses: actions/checkout@v2 + - name: Update cargo + run: cargo update - name: Build process migration for Windows run: cargo build -p process_migration --target x86_64-pc-windows-gnu --verbose - - name: Clean again - run: cargo clean + + windows-all: + + runs-on: ubuntu-latest + + steps: + - name: Update rust + run: rustup update + - name: Apt update + run: sudo apt-get update + - name: Install linker + run: sudo apt-get -y install mingw-w64 + - name: Add Windows build target + run: rustup target add x86_64-pc-windows-gnu + - uses: actions/checkout@v2 + - name: Update cargo + run: cargo update - name: Build all for Windows run: cargo build --target x86_64-pc-windows-gnu --verbose diff --git a/process_migration/README.md b/process_migration/README.md index fa880dd..040a377 100644 --- a/process_migration/README.md +++ b/process_migration/README.md @@ -32,3 +32,18 @@ and change the shellcode to the shellcode generated in step 1 ``` 4. Execute the payload on the victim machine +5. Return to the listener and enter desired commands for the victim machine to run + +![process_migration_linux](https://user-images.githubusercontent.com/14863147/151044951-5ee5b376-9f62-4e2e-a773-8c3b7a7d580e.gif) + +![process_migration_windows](https://user-images.githubusercontent.com/14863147/151059013-b053e9de-d75c-4470-97a7-a109c7f2ef55.gif) + +## Detection rates + +[Linux - 6 / 40](https://kleenscan.com/scan_result/81ac12b76a4be897145f1772b8c57d6c5330ee9bd574f480a825232bd846d113) + +![image](https://user-images.githubusercontent.com/14863147/151022870-a65ecbcc-7579-42c3-be6c-6c117c64bbd3.png) + +[Windows - 12 / 40](https://kleenscan.com/scan_result/402c207f8a1e53a0f9b9ed533c53b96077956bc91367520ac28289b2fc6cc511) + +![image](https://user-images.githubusercontent.com/14863147/151023019-735113d1-df25-41d7-8edc-b031320c7cea.png) diff --git a/tcp_reverse_shell/README.md b/tcp_reverse_shell/README.md index 44a6509..bc571e0 100644 --- a/tcp_reverse_shell/README.md +++ b/tcp_reverse_shell/README.md @@ -38,3 +38,17 @@ and change the IP address and port to match your attacking machine and listener, 4. Execute the payload on the victim machine 5. Return to the listener and enter desired commands for the victim machine to run + +![tcp_reverse_shell_linux](https://user-images.githubusercontent.com/14863147/151044738-72dbec76-73b1-47c5-831a-2e995673b559.gif) + +![tcp_reverse_shell_windows](https://user-images.githubusercontent.com/14863147/151058869-8e5e9f6e-3f7b-4a98-ab65-2ac5017a4e76.gif) + +## Detection rates + +[Linux - 0 / 40](https://kleenscan.com/scan_result/d185d1b1ba09f1a9133b72cb1bb12f177b32f3e65962baf7789b03c968ec8e47) + +![image](https://user-images.githubusercontent.com/14863147/151023219-84d7ab95-002e-4d20-89c7-264894d72683.png) + +[Windows - 0 / 40](https://kleenscan.com/scan_result/e9ffcf8fffd390b68a4cbc9d506571f0618e473732015be748e1960300bc6a85) + +![image](https://user-images.githubusercontent.com/14863147/151023325-d917df57-18ce-4e99-b059-968a479b65ce.png)