hak5
/
omg-payloads
mirror of https://github.com/hak5/omg-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
omg-payloads/payloads/library/execution/Telegram_Persistent_Connect.../README.md

2.6 KiB
Raw Permalink Blame History

Telegram Persistent Connection

A script used to configure a persistent connection on a Linux computer trough a pre-configured Telegram Bot.

Category: Execution

Description

A script used to configure a persistent connesction on a Linux computer trough a pre-configured Telegram Bot.

Opens a shell, download the python script trough the curl command outputing the file into a connection.py file using -o option, then run it and set the run of the program as a default command every times a shell is runned.

This payload is intended as a basic reference point for developing payloads on a persistent connection Telegram based.

Getting Started

Dependencies

  • Internet Connection

Settings

  • Telegram Bot: You should configure a bot trough Telegram. If you don't know how to do this, follow the guide about Telegram Bot guide. When you have create your personal Telegram Bot you should get the Telegram bot ID that you must put into the variable BOT_TOKEN at line 4 in the Python file as you can read in the line 3 comment.
  • Python Script: Download, edit as you want and upload the python script somewhere you want and put the file link into the file payload.txt replacing the example link.
  • Persistence: I preferred to create a mechanism that would allow you to create some persistence, not quite total, but you can have a high level of persistence. In this specific case, no permissions are needed, because it is sufficient to insert some lines in the .bashrc file that allow to keep the connection to Telegram open from the first time the user opens the terminal. Most of other mechanism needs the sudo permissions.

Telegram Bot Guide

  1. Search for @botfather in Telegram.
  2. Start a conversation with BotFather by clicking on the Start button.
  3. Type /newbot, and follow the prompts to set up a new bot.
  4. Select and copy the Bot Token that you can see after the registration and past it into the BOT_TOKEN python variable that you find in the connection.py file at line 3.

Credits

Aleff :octocat:


Github
Linkedin