Merge 39750dfbd2 into dcf527fd86

SharkNetSniffer

payloads/library/recon/Shark-Net-Sniff/payload.sh

@@ -0,0 +1,46 @@
+#!/bin/bash
+#
+# Title: Wireshark PCAP Capture & Examine
+# Author: BuffBaby253
+# Version: 1.1
+# 
+# Description: uses tcpdump to capture network traffic for 1 minute and saves into pcap
+# into loot storage folder for further analysis in Wireshark
+#
+# Note: If you want to extend the time, change the amount of seconds in line 38
+#
+# LED SETUP   making loot directory and waiting for an ip address from DHCP
+# LED ATTACK   capturing packets
+# LED FINISH   the Shark Jack is finished and you can now download saved pcaps to open in Wireshark
+
+LOOT_DIR=/root/loot/pcaps
+INTERFACE="eth0"
+seconds=60
+
+
+# preparing for capture
+
+LED SETUP 
+
+# setting up loot directory
+mkdir -p $LOOT_DIR
+COUNT=$(($(ls -l $LOOT_DIR/*.txt | wc -l)+1))
+
+# waiting for ip address
+
+NETMODE DHCP_CLIENT
+while [ -z "$IPADDR" ]; do sleep 1 && IPADDR=$(ifconfig eth0 | grep "inet addr"); done
+
+LED ATTACK
+
+# using tcpdump to capture network traffic and save to loot directory
+tcpdump -i $INTERFACE -w $LOOT_DIR/net-traffic_$COUNT.txt &
+
+# sleep command will let it run for amount of seconds selected
+sleep $seconds
+
+# end capture
+killall tcpdump
+
+# the work is done and you can unplug
+LED FINISH

sharkjack.sh

@@ -312,7 +312,7 @@ function setup_shark(){
     [[ -e $SSHKEYPATH ]] && printf "\n%s\n" "[!] $SSHKEYPATH does not exist" && sleep 2 && main_menu
   fi
   if [[ -z $SSHKEYPATH ]]; then
-    ssh-copy-id -i root@172.16.24.1
+    ssh-copy-id "root@172.16.24.1"
   else
     ssh-copy-id -i $SSHKEYPATH "root@172.16.42.1"
   fi