mirror of
https://github.com/postrequest/link
synced 2026-06-08 16:46:19 +00:00
postrequest
43 lines
1.4 KiB
Plaintext
43 lines
1.4 KiB
Plaintext
[Windows Persistence]
|
|
* generate dlls ready for proxying for teams
|
|
* registry
|
|
* startup folder
|
|
* junction folder
|
|
* COM scheduled task: similar to COM hijack but you are not actually hijacking an existing COM object, but instead implementing and registering your own
|
|
|
|
[TUI]
|
|
https://github.com/fdehau/tui-rs
|
|
|
|
[Link]
|
|
- make jitter and delay adjustable
|
|
- add evasion PPID spoofer for windows
|
|
- make use of evasion from https://github.com/f0rb1dd3n/Reptile for linux link
|
|
- check this out https://github.com/gsfraley/dotrust
|
|
|
|
[Link Modules]
|
|
- add powershell modules from empire
|
|
- all powershell modules should take advantage of xeca
|
|
- https://github.com/PorLaCola25/TransactedSharpMiniDump for reference, also https://github.com/m0rv4i/SafetyDump
|
|
- add https://github.com/deadjakk/RustPivot/
|
|
- add https://github.com/itm4n/PPLdump
|
|
|
|
[Compile obfuscation]
|
|
Use the following projects for implementation
|
|
- https://github.com/tsarpaul/llvm-string-obfuscator
|
|
- https://github.com/moloch--/denim
|
|
|
|
[Server]
|
|
- launch server from cli
|
|
- add other transports such as DNS
|
|
- add xeca as a generate option
|
|
- add autocompletion
|
|
- add https://github.com/deadjakk/RustPivot/
|
|
- accept dynamic hostnames
|
|
- use a better encoding than base64 for binary to ascii transfer, such as yEnc ose Base85
|
|
|
|
[Code]
|
|
- clean up repetition
|
|
|
|
[Build]
|
|
- for kali 'apt install mono-mcs' for dynamic powershell scripts || https://github.com/mgeeky/Stracciatella/releases/latest/download/Stracciatella.exe
|