|
|
@@ -335,11 +335,6 @@ echo ""
|
|
|
read -p "Open A New Terminal And Export The Path For PEzor To Work!"
|
|
|
echo ""
|
|
|
sleep 2
|
|
|
-echo "Installing GadgetToJscript"
|
|
|
-echo ""
|
|
|
-git clone https://github.com/med0x2e/GadgetToJScript.git
|
|
|
-echo ""
|
|
|
-sleep 2
|
|
|
echo "Installing ScareCrow"
|
|
|
echo""
|
|
|
git clone https://github.com/optiv/ScareCrow.git
|
|
|
@@ -506,26 +501,268 @@ cd /opt/Command_And_Control
|
|
|
echo "Cloning C2 Frameworks"
|
|
|
echo ""
|
|
|
echo "Installing Empire & Starkiller"
|
|
|
+echo ""
|
|
|
+sleep 2
|
|
|
git clone https://github.com/BC-SECURITY/Empire.git
|
|
|
+version=$(lsb_release -sr)
|
|
|
+cd Empire/
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/20.04/${version}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/18.04/${version}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/21.04/${version}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/21.10/${version}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/16.04/${version}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/22.04/${version}/g"
|
|
|
+cd setup/
|
|
|
+bash install.sh
|
|
|
+sudo wget https://github.com/BC-SECURITY/Starkiller/releases/download/v1.8.0/starkiller-1.8.0.AppImage
|
|
|
+sudo chmod +x starkiller-1.0.0.AppImage
|
|
|
+echo""
|
|
|
+sleep 2
|
|
|
+cd /opt/Command_And_Control/
|
|
|
+echo "Installing PoshC2"
|
|
|
+echo ""
|
|
|
git clone https://github.com/nettitude/PoshC2.git
|
|
|
-git clone https://github.com/zerosum0x0/koadic.git
|
|
|
+cd PoshC2/
|
|
|
+bash Install.sh
|
|
|
+cd /opt/Command_And_Control/
|
|
|
+echo ""
|
|
|
+echo "Installing Merlin C2"
|
|
|
+echo ""
|
|
|
+sleep 2
|
|
|
git clone https://github.com/Ne0nd0g/merlin.git
|
|
|
+cd merlin/
|
|
|
+go build
|
|
|
+cd /opt/Command_And_Control/
|
|
|
+echo ""
|
|
|
+echo "Installing Mythic"
|
|
|
+echo ""
|
|
|
+sleep 2
|
|
|
git clone https://github.com/its-a-feature/Mythic.git
|
|
|
-git clone https://github.com/cobbr/Covenant.git
|
|
|
+cd Mythic/
|
|
|
+./install_docker_ubuntu.sh
|
|
|
+cd /opt/Command_And_Control
|
|
|
+echo ""
|
|
|
+echo "Installing Covenant With Random Profile"
|
|
|
+echo ""
|
|
|
+echo "Enter A Random Word!"
|
|
|
+read Random1
|
|
|
+echo ""
|
|
|
+echo "Enter A Different Random Word!"
|
|
|
+read Random2
|
|
|
+echo ""
|
|
|
+echo "Enter A Different Random Word!"
|
|
|
+read Random3
|
|
|
+
|
|
|
+custom1=$(echo $custom1 | md5sum | head -c 20)
|
|
|
+
|
|
|
+sudo git clone --recurse-submodules https://github.com/ZeroPointSecurity/Covenant.git /opt/Covenant
|
|
|
+
|
|
|
+cd /opt/Covenant/Covenant/
|
|
|
+
|
|
|
+mv ./Data/AssemblyReferences/ ../AssemblyReferences/
|
|
|
+
|
|
|
+mv ./Data/ReferenceSourceLibraries/ ../ReferenceSourceLibraries/
|
|
|
+
|
|
|
+mv ./Data/EmbeddedResources/ ../EmbeddedResources/
|
|
|
+
|
|
|
+mv ./Models/Covenant/ ./Models/${Random1^}/
|
|
|
+mv ./Components/CovenantUsers/ ./Components/${Random1^}Users/
|
|
|
+mv ./Components/Grunts/ ./Components/${Random2^}s/
|
|
|
+mv ./Models/Grunts/ ./Models/${Random2^}s/
|
|
|
+mv ./Data/Grunt/GruntBridge/ ./Data/Grunt/${Random2^}Bridge/
|
|
|
+mv ./Data/Grunt/GruntHTTP/ ./Data/Grunt/${Random2^}HTTP/
|
|
|
+mv ./Data/Grunt/GruntSMB/ ./Data/Grunt/${Random2^}SMB/
|
|
|
+mv ./Components/GruntTaskings/ ./Components/${Random2^}Taskings/
|
|
|
+mv ./Components/GruntTasks/ ./Components/${Random2^}Tasks/
|
|
|
+mv ./Data/Grunt/ ./Data/${Random2^}/
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Grunt/${Random2^}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/GRUNT/${Random2^^}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/grunt/${Random2,,}/g"
|
|
|
+
|
|
|
+#find ./ -type f -print0 | xargs -0 sed -i "s/covenant/${Random1,,}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Covenant/${Random1^}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/COVENANT/${Random1^^}/g"
|
|
|
+
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/ExecuteStager/ExecLevel/g"
|
|
|
+#find ./ -type f -print0 | xargs -0 sed -i "s/REPLACE_PROFILE/REP_PROF/g"
|
|
|
+#find ./ -type f -print0 | xargs -0 sed -i "s/REPLACE_PIPE/REP_PIP/g"
|
|
|
+#find ./ -type f -print0 | xargs -0 sed -i "s/GUID/ANGID/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/SetupAES/Install"${custom1}"AES/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/SessionKey/Sess"${custom1}"KEy/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/EncryptedChallenge/Enc"${custom1}"ChallEnge/g"
|
|
|
+
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/DecryptedChallenges/Decrypt"${custom1}"ChallEnges/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Stage0Body/First"${custom1}"Body/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Stage0Response/First"${custom1}"Response/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Stage0Bytes/First"${custom1}"Bytes/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Stage1Body/Seccond"${custom1}"Body/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Stage1Response/Seccond"${custom1}"Response/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Stage1Bytes/Seccond"${custom1}"Bytes/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Stage2Body/Third"${custom1}"Body/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Stage2Response/Third"${custom1}"Response/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Stage2Bytes/Third"${custom1}"Bytes/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/message64str/messAgE"${custom1}"64str/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/messageBytes/messAgE"${custom1}"bytes/g"
|
|
|
+
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/totalReadBytes/ToTal"${custom1}"ReaDBytes/g"
|
|
|
+#find ./ -type f -print0 | xargs -0 sed -i "s/inputStream/instream/g"
|
|
|
+#find ./ -type f -print0 | xargs -0 sed -i "s/outputStream/outstream/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/deflateStream/deFlatE"${custom1}"stream/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/memoryStream/memOrYstream/g" #don't change
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/compressedBytes/packed"${custom1}"bytes/g"
|
|
|
+
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/REPLACE_/REP"${custom1}"_/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/_PROFILE_/_PROF"${custom1}"_/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/_VALIDATE_/_VA"${custom1}"L_/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
|
|
|
+find ./ -type f -name "*.razor" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
|
|
|
+find ./ -type f -name "*.json" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
|
|
|
+find ./ -type f -name "*.yaml" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
|
|
|
+find ./ -type f -name "*.razor" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
|
|
|
+find ./ -type f -name "*.json" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
|
|
|
+find ./ -type f -name "*.yaml" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/ProfileHttp/Prof"${custom1}"HTTP/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/baseMessenger/bAse"${custom1}"mEsSenger/g"
|
|
|
+
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/PartiallyDecrypted/Part"${custom1}"decrypted/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/FullyDecrypted/Fulld"${custom1}"ecrypted/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/compressedBytes/packed"${custom1}"bytes/g"
|
|
|
+
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/CookieWebClient/Ottos"${custom1}"WebClient/g"
|
|
|
+#find ./ -type f -print0 | xargs -0 sed -i "s/CookieContainer/KekseContains/g"
|
|
|
+#find ./ -type f -print0 | xargs -0 sed -i "s/GetWebRequest/DoAnWebReq/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Jitter/JIt"${custom1}"ter/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/ConnectAttempts/ConneCT"${custom1}"AttEmpts/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/RegisterBody/Reg"${custom1}"Body/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/messenger/meSsenGer"${custom1}"/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/Hello World/"${custom1}"/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/ValidateCert/Val"${custom1}"CerT/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/UseCertPinning/UsCert"${custom1}"Pin/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/EncryptedMessage/Enc"${custom1}"Msg/g"
|
|
|
+find ./ -type f -print0 | xargs -0 sed -i "s/cookieWebClient/"${custom1}"WebClient/g" #ottos
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/aes/crypt"${custom1}"var/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/aes2/crypt"${custom1}"var2/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array5/ar"${custom1}"r5/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array6/ar"${custom1}"r6/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array4/ar"${custom1}"r4/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array7/ar"${custom1}"r7/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array1/ar"${custom1}"r1/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array2/ar"${custom1}"r2/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array3/ar"${custom1}"r3/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list1/l"${custom1}"i1/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list2/l"${custom1}"i2/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list3/l"${custom1}"i3/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list4/l"${custom1}"i4/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list5/l"${custom1}"i5/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group0/gr"${custom1}"p0/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group1/gr"${custom1}"p1/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group2/gr"${custom1}"p2/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group3/gr"${custom1}"p3/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group4/gr"${custom1}"p4/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group5/gr"${custom1}"p5/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group6/gr"${custom1}"p6/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group7/gr"${custom1}"p7/g"
|
|
|
+find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group8/gr"${custom1}"p8/g"
|
|
|
+
|
|
|
+find ./ -type f -name "*Grunt*" | while read FILE ; do
|
|
|
+ newfile="$(echo ${FILE} |sed -e "s/Grunt/${Random2^}/g")";
|
|
|
+ mv "${FILE}" "${newfile}";
|
|
|
+done
|
|
|
+find ./ -type f -name "*GRUNT*" | while read FILE ; do
|
|
|
+ newfile="$(echo ${FILE} |sed -e "s/GRUNT/${Random2^^}/g")";
|
|
|
+ mv "${FILE}" "${newfile}";
|
|
|
+done
|
|
|
+
|
|
|
+find ./ -type f -name "*grunt*" | while read FILE ; do
|
|
|
+ newfile="$(echo ${FILE} |sed -e "s/grunt/${Random2,,}/g")";
|
|
|
+ mv "${FILE}" "${newfile}";
|
|
|
+done
|
|
|
+
|
|
|
+find ./ -type f -name "*Covenant*" | while read FILE ; do
|
|
|
+ newfile="$(echo ${FILE} |sed -e "s/Covenant/${Random1^}/g")";
|
|
|
+ mv "${FILE}" "${newfile}";
|
|
|
+done
|
|
|
+
|
|
|
+find ./ -type f -name "*COVENANT*" | while read FILE ; do
|
|
|
+ newfile="$(echo ${FILE} |sed -e "s/COVENANT/${Random2^^}/g")";
|
|
|
+ mv "${FILE}" "${newfile}";
|
|
|
+done
|
|
|
+
|
|
|
+#find ./ -type f -name "*covenant*" | while read FILE ; do
|
|
|
+# newfile="$(echo ${FILE} |sed -e "s/covenant/ottocommand/g")";
|
|
|
+# mv "${FILE}" "${newfile}";
|
|
|
+#done
|
|
|
+
|
|
|
+mv ../AssemblyReferences/ ./Data/
|
|
|
+
|
|
|
+mv ../ReferenceSourceLibraries/ ./Data/
|
|
|
+
|
|
|
+mv ../EmbeddedResources/ ./Data/
|
|
|
+
|
|
|
+dotnet build
|
|
|
+echo ""
|
|
|
+cd /opt/Command_And_Control/
|
|
|
+echo"Installing Shad0w"
|
|
|
+echo ""
|
|
|
+sleep 2
|
|
|
git clone https://github.com/bats3c/shad0w.git
|
|
|
+cd shad0w/
|
|
|
+bash install.sh
|
|
|
+echo ""
|
|
|
+cd /opt/Command_And_
|
|
|
+/
|
|
|
+echo "Installing Sliver"
|
|
|
+echo ""
|
|
|
+sleep 2
|
|
|
git clone https://github.com/BishopFox/sliver.git
|
|
|
+cd sliver/
|
|
|
+python3 build.py
|
|
|
+cd /opt/Command_And_Control
|
|
|
+echo ""
|
|
|
+echo "Installing SilentTrinity"
|
|
|
+echo ""
|
|
|
+sleep 2
|
|
|
git clone https://github.com/byt3bl33d3r/SILENTTRINITY.git
|
|
|
+cd SILENTTRINITY/
|
|
|
+pip3 install -r requirements.txt
|
|
|
+cd /opt/Command_And_Control
|
|
|
+echo ""
|
|
|
+echo "Installing Pupy C2"
|
|
|
+echo ""
|
|
|
+sleep 2
|
|
|
git clone https://github.com/n1nj4sec/pupy.git
|
|
|
-sudo apt-get install build-essential libreadline-dev libssl-dev libpq5 libpq-dev libreadline5 libsqlite3-dev libpcap-dev subversion git-core autoconf postgresql pgadmin3 curl zlib1g-dev libxml2-dev libxslt1-dev libyaml-dev nmap -y
|
|
|
-sudo curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && chmod 755 msfinstall && ./msfinstall
|
|
|
-
|
|
|
+echo ""
|
|
|
+echo "Installing Metasploit"
|
|
|
+sleep 2
|
|
|
+echo ""
|
|
|
+apt install postgresql -y
|
|
|
+systemctl start postgresql
|
|
|
+systemctl enable postgresql
|
|
|
+apt install curl -y
|
|
|
+apt --fix-broken install -y
|
|
|
+curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall
|
|
|
+chmod +x msfinstall
|
|
|
+./msfinstall
|
|
|
+apt --fix-broken install -y
|
|
|
+echo ""
|
|
|
echo "Cloning Staging Resources"
|
|
|
-
|
|
|
-cd ../
|
|
|
+echo ""
|
|
|
+cd /opt/
|
|
|
mkdir Staging
|
|
|
-cd Staging
|
|
|
-
|
|
|
+cd Staging/
|
|
|
+echo "Installing PwnDrop"
|
|
|
git clone https://github.com/kgretzky/pwndrop.git
|
|
|
+cd pwndrop/
|
|
|
+go build
|
|
|
+cd /opt/Staging
|
|
|
+echo ""
|
|
|
+echo "Installing C2 Concealer"
|
|
|
+echo ""
|
|
|
+sleep 2
|
|
|
git clone https://github.com/FortyNorthSecurity/C2concealer.git
|
|
|
git clone https://github.com/rvrsh3ll/FindFrontableDomains.git
|
|
|
git clone https://github.com/threatexpress/domainhunter.git
|