hak5
/
sharkjack-payloads
mirror of https://github.com/hak5/sharkjack-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10 from chill633/chill633-patch-1 

Update payload.sh
pull/14/head
Darren Kitchen 2019-12-18 19:48:01 -08:00 committed by GitHub
parent e9796731b6 3548b819bf
commit 85e84ed7ec
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 22 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
payloads/library/recon/Network-Recon-With-Email-Exfil/payload.sh
View File

@ -2,20 +2,24 @@
#
# Title: Network Recon Payload with email exfiltration
# Author: Topknot (Based on the orignial HAK5 sample payload and MonsieurMarc Sample Nmap Payload with Patebil exfiltration)
# Version: 1.0
# Version: 1.2
#
# This payload:
#
# Version 1.1: Make e-mail optional, set DNS as variable
# Version 1.2: Add ability to change system hostname
#
# Performs an nmap ping scan of the local subnet and logs it to a text file
# Pulls LLDP neighbor and switch information and logs it to a text file
# Performs an IFconfig and ip addr show and logs it to a text file
# Performs a traceroute to 8.8.8.8 and logs it to a text file
# Performs a public IP address lookup via curl and icanhazip.com and logs it to a text file
# Sends all of the created text files via email to the address set with MAIL_RCPT
# Optionally sends all of the created text files via email to the address set with MAIL_RCPT
#
# A nameserver, 1.1.1.1, is set for the payload in case you want to run it in arming mode.
# A nameserver, 1.1.1.1 by default, is set for the payload in case you want to run it in arming mode.
# The HOSTNAME variable can be set to change the system hostname, helping disguise
#
# This payload requires you to have curl, lldpd, and msmtp mutt already installed and configured via opkg
# This payload requires you to have curl, lldpd, and (optionally) msmtp mutt already installed and configured via opkg
#
# Guide for MSMTP MUTT can be found here https://forum.openwrt.org/t/openwrt-how-to-send-mail-with-attachment-with-mutt-and-msmtp-gmail/45844
#
@ -26,9 +30,9 @@
# See nmap --help for options. Default "-sP" ping scans the address space for
# fast host discovery.
#
# Please enter your email details below
# Please enter your email details below. Set SEND_EMAIL=y to send e-mail.
#
SEND_EMAIL=n
MAIL_RCPT=EnterEmail@Here.com
NMAP_OPTIONS="-sP"
@ -46,6 +50,8 @@ ICANHAZIP_DIR=/etc/shark/icanhazip
DNS_FILE=/etc/resolv.conf
MUTT_FILE=/root/.muttrc
NAMESERVER=1.1.1.1
HOSTNAME=shark
function finish() {
@ -65,8 +71,10 @@ function finish() {
#Email the loot as an attachment
email
sleep 5s
if [ $SEND_EMAIL = "y" ]; then
email
sleep 5s
fi
LED FINISH
sleep 1s
@ -84,7 +92,7 @@ function setup() {
while ! ifconfig eth0 | grep "inet addr"; do sleep 1; done
# Configure DNS Server
echo "nameserver 1.1.1.1" > $DNS_FILE
echo "nameserver " $NAMESERVER > $DNS_FILE
# Create loot directory
mkdir -p $LOOT_DIR_NMAP &> /dev/null
@ -138,7 +146,7 @@ function setup() {
fi
# Create icanhazip loot directory
# Create icanhazip loot directory
mkdir -p $LOOT_DIR_ICANHAZIP &> /dev/null
#Create tmp icanhazip directory
@ -150,6 +158,10 @@ function setup() {
touch $ICANHAZIP_FILE && echo 0 > $ICANHAZIP_FILE
fi
# Set system hostname
uci set system.@system[0].hostname=$HOSTNAME
uci commit system
/etc/init.d/system reload
# Find IP address and subnet
while [ -z "$SUBNET" ]; do