AutoC2.sh 41 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536
  1. #!/bin/bash
  2. cat << "EOF"
  3. __ _ ___ ___ _ _ _ __ ___ ___ | |__ _ __ ___ __ _ ___| |__
  4. / _` / __/ __| | | | '_ ` _ \ / _ \_____| '_ \| '__/ _ \/ _` |/ __| '_ \
  5. | (_| \__ \__ \ |_| | | | | | | __/_____| |_) | | | __/ (_| | (__| | | |
  6. \__,_|___/___/\__,_|_| |_| |_|\___| |_.__/|_| \___|\__,_|\___|_| |_|
  7. **AutoC2**
  8. Use At Your Own Risk
  9. EOF
  10. sleep 2
  11. echo""
  12. echo""
  13. echo "WARNING THIS SCRIPT TAKES FUCKING FOREVER!!!"
  14. echo""
  15. echo""
  16. echo "All Tools Can Be Found In The /opt Directory"
  17. echo ""
  18. sleep 2
  19. read -p "Press enter to continue"
  20. echo ""
  21. echo "Updating Your System"
  22. echo""
  23. sleep 2
  24. apt-get update -y && apt-get upgrade -y
  25. apt update -y && apt upgrade -y
  26. apt autoremove -y
  27. echo ""
  28. sleep 2
  29. echo "Installing System Dependencies"
  30. echo ""
  31. sleep 2
  32. apt --fix-broken install
  33. apt install git -y
  34. apt --fix-broken install
  35. apt install docker.io ruby-bundler golang python-pip python3 make snap fuse ruby-bundler python3-pip pipx chromium-browser dnsmasq hostapd openssl open-vm-tools-desktop build-essential libpcap-dev net-tools -y
  36. apt --fix-broken install
  37. echo ""
  38. echo "Installing Hackery Stuff"
  39. echo ""
  40. sleep 2
  41. apt install nmap wifite nikto wpscan aircrack-ng ettercap-graphical john hashcat crunch tshark macchanger recon-ng snap dhcpd lighttpd mdk4 dsniff mdk3 php-cgi xterm cewl crunch hydra sqlmap ncrack gobuster dirb wfuzz medusa netcat -y
  42. snap install amass
  43. echo ""
  44. sleep 2
  45. echo "Installing CherryTree For Documentation"
  46. sleep 3
  47. sudo apt-get install cherrytree -y
  48. apt --fix-broken install -y
  49. echo ""
  50. echo "Creating Tool Folders"
  51. echo ""
  52. sleep 2
  53. cd /opt
  54. mkdir Initial_Access
  55. mkdir Recon
  56. mkdir Command_And_Control
  57. mkdir Social_Engineering
  58. mkdir Phishing
  59. mkdir Delivery
  60. mkdir Lateral_Movement
  61. mkdir Cloud
  62. mkdir Payload_Development
  63. mkdir Hak5_Implants
  64. mkdir Wireless
  65. mkdir Wordlists
  66. mkdir Web
  67. mkdir Virtual_Machines
  68. mkdir Staging
  69. mkdir Log_Aggregation
  70. mkdir Windows_OS
  71. echo""
  72. echo "Getting Resources"
  73. sleep 2
  74. echo ""
  75. echo "Installing Wordlists & Rule Sets"
  76. sleep 3
  77. cd /opt/Wordlists/
  78. git clone https://github.com/NotSoSecure/password_cracking_rules.git
  79. git clone https://github.com/praetorian-inc/Hob0Rules.git
  80. git clone https://github.com/danielmiessler/SecLists.git
  81. echo""
  82. echo "Installing Recon Resources"
  83. echo""
  84. sleep 2
  85. cd /opt/Recon/
  86. echo""
  87. echo "Installing RustScan"
  88. echo""
  89. sleep 2
  90. git clone https://github.com/RustScan/RustScan.git
  91. cd RustScan.git
  92. docker build -t rustscan .
  93. cd /opt/Recon/
  94. echo "Installing GitLeaks"
  95. echo ""
  96. sleep 2
  97. git clone https://github.com/zricethezav/gitleaks.git
  98. cd gitleaks/
  99. make build
  100. echo ""
  101. cd /opt/Windows_OS/
  102. mkdir Recon
  103. cd Recon/
  104. echo "Installing MFA Sweep"
  105. echo ""
  106. sleep 2
  107. git clone https://github.com/dafthack/MFASweep
  108. cd /opt/Recon/
  109. echo "Installing S3Scanner"
  110. echo ""
  111. sleep 2
  112. git clone https://github.com/sa7mon/S3Scanner.git
  113. cd S3Scanner/
  114. pip3 install -r requirements.txt
  115. python3 -m S3Scanner
  116. cd /opt/Recon/
  117. echo""
  118. echo "Installing Enum4Linux"
  119. cd /opt/Recon/
  120. echo ""
  121. sleep 2
  122. git clone https://github.com/CiscoCXSecurity/enum4linux.git
  123. echo "alias enum4linux='/opt/enum4linux/./enum4linux.pl'" >> /root/.bashrc
  124. echo ""
  125. echo "Installing Cloud_Enum"
  126. echo""
  127. sleep 2
  128. git clone https://github.com/initstring/cloud_enum.git
  129. cd cloud_enum
  130. pip3 install -r ./requirements.txt
  131. cd /opt/Recon/
  132. echo "Installing Buster"
  133. echo ""
  134. sleep 2
  135. git clone https://github.com/sham00n/buster.git
  136. cd buster/
  137. python3 setup.py install
  138. cd /opt/Repo/
  139. git clone https://github.com/initstring/linkedin2username.git
  140. echo ""
  141. echo "Installing WitnessMe"
  142. echo ""
  143. sleep 2
  144. python3 -m pip install --user pipx
  145. pipx install witnessme
  146. pipx ensurepath
  147. cd /opt/Recon/
  148. echo ""
  149. echo "Installing Pagodo"
  150. echo ""
  151. sleep 2
  152. git clone https://github.com/opsdisk/pagodo.git
  153. cd pagodo
  154. pip install -r requirements.txt
  155. cd /opt/Recon/
  156. echo ""
  157. echo "Installing AttackSurfaceMapper"
  158. echo""
  159. sleep 2
  160. git clone https://github.com/superhedgy/AttackSurfaceMapper.git
  161. cd AttackSurfaceMapper
  162. python3 -m pip install --no-cache-dir -r requirements.txt
  163. cd /opt/Recon/
  164. echo ""
  165. echo "Installing SpiderFoot"
  166. echo ""
  167. sleep 2
  168. git clone https://github.com/smicallef/spiderfoot.git
  169. cd spiderfoot
  170. pip3 install -r requirements.txt
  171. pip3 install cherrypy
  172. pip3 install cherrypy_cors
  173. pip3 install publicsuffixlist
  174. pip3 install networkx
  175. pip3 install openpyxl
  176. cd /opt/Recon/
  177. echo""
  178. echo "Installing DNScan"
  179. echo ""
  180. sleep 2
  181. git clone https://github.com/rbsec/dnscan.git
  182. cd dnscan
  183. pip3 install -r requirements.txt
  184. pip3 install setuptools
  185. cd /opt/Recon/
  186. echo""
  187. echo "Installing SpoofCheck"
  188. echo""
  189. sleep 2
  190. git clone https://github.com/BishopFox/spoofcheck.git
  191. cd spoofcheck
  192. pip3 install -r requirements.txt
  193. cd /opt/Recon/
  194. echo ""
  195. echo "Installing LinkedInt"
  196. echo""
  197. sleep 2
  198. git clone https://github.com/vysecurity/LinkedInt.git
  199. cd LinkedInt
  200. pip3 install -r requirements.txt
  201. cd /opt/Recon/
  202. echo ""
  203. echo "Installing EyeWitness"
  204. echo ""
  205. sleep 2
  206. git clone https://github.com/ChrisTruncer/EyeWitness.git
  207. cd EyeWitness/Python/setup
  208. bash setup.sh
  209. cd /opt/Recon/
  210. echo""
  211. echo "Installing Aquatone"
  212. echo ""
  213. sleep 2
  214. mkdir Aquatone
  215. cd Aquatone/
  216. wget https://github.com/michenriksen/aquatone/releases/download/v1.7.0/aquatone_linux_amd64_1.7.0.zip
  217. unzip aquatone_linux_amd64_1.7.0.zip
  218. cd /opt/Recon/
  219. echo""
  220. echo "Installing DNSrecon"
  221. echo ""
  222. sleep 2
  223. git clone https://github.com/darkoperator/dnsrecon.git
  224. cd dnsrecon
  225. pip install -r requirements.txt
  226. python setup.py install
  227. cd /opt/Recon/
  228. echo ""
  229. echo "Installing Social Mapper"
  230. echo ""
  231. sleep 2
  232. git clone https://github.com/SpiderLabs/social_mapper.git
  233. cd /social_mapper/setup/
  234. pip install -r requirements.txt
  235. echo""
  236. cd /opt/Recon/
  237. echo "Installing theHarvester"
  238. echo ""
  239. sleep 2
  240. git clone https://github.com/laramies/theHarvester.git
  241. cd theHarvester/
  242. pip3 install aiohttp
  243. pip3 install aiomultiprocess
  244. python3 -m pip install -r requirements/base.txt
  245. python3 setup.py install
  246. cd /opt/Recon/
  247. echo ""
  248. echo "Installing Metagoofil"
  249. echo ""
  250. sleep 2
  251. git clone https://github.com/laramies/metagoofil.git
  252. echo""
  253. echo "Installing TruffleHog"
  254. echo ""
  255. sleep 2
  256. git clone https://github.com/dxa4481/truffleHog.git
  257. cd trufflehog; go install
  258. cd /opt/Recon/
  259. echo""
  260. echo "Installing Pwned0rNot -- API KEY REQUIRE"
  261. git clone https://github.com/thewhiteh4t/pwnedOrNot.git
  262. cd pwnedOrNot
  263. chmod +x install.sh
  264. ./install.sh
  265. cd /opt/Recon/
  266. echo""
  267. echo "Installing GitHarvester"
  268. echo ""
  269. sleep 2
  270. git clone https://github.com/metac0rtex/GitHarvester.git
  271. echo ""
  272. echo "Cloning Initial Access Resources"
  273. echo ""
  274. sleep 2
  275. ###Break For Recon Folder###
  276. cd /opt/Initial_Access
  277. echo "Installing Initial Access Tools"
  278. echo ""
  279. sleep 2
  280. echo "Installing Spraying Toolkit"
  281. echo ""
  282. sleep 2
  283. git clone https://github.com/byt3bl33d3r/SprayingToolkit.git
  284. cd SprayingToolkit/
  285. pip3 install -r requirements.txt
  286. cd /opt/Initial_Access
  287. echo ""
  288. sleep 2
  289. echo "Installing O365 Recon"
  290. echo ""
  291. git clone https://github.com/nyxgeek/o365recon.git
  292. echo ""
  293. sleep 2
  294. echo "Installing TREVORspray"
  295. echo ""
  296. sleep 2
  297. git clone https://github.com/blacklanternsecurity/TREVORspray.git
  298. cd TREVORspray/
  299. pip3 install -r requirements.txt
  300. sleep 2
  301. ###Break Initial Access###
  302. echo ""
  303. echo "Installing Payload Development Resources"
  304. echo ""
  305. sleep 2
  306. cd /opt/Payload_Development
  307. echo "Installing Unicorn"
  308. git clone https://github.com/trustedsec/unicorn.git
  309. echo""
  310. echo "Installing Demiguise"
  311. echo ""
  312. sleep 2
  313. git clone https://github.com/nccgroup/demiguise.git
  314. echo ""
  315. echo "Installing The Backdoor Factory"
  316. echo ""
  317. docker pull secretsquirrel/the-backdoor-factory
  318. echo ""
  319. sleep 2
  320. echo "Installing Avet"
  321. echo ""
  322. git clone https://github.com/govolution/avet.git
  323. cd avet
  324. bash setup.sh
  325. cd /opt/Payload_Development/
  326. sleep 2
  327. echo ""
  328. echo "Installing MetaTwin"
  329. git clone https://github.com/threatexpress/metatwin.git
  330. echo ""
  331. sleep 2
  332. echo "Installing PSAmsi"
  333. git clone https://github.com/cobbr/PSAmsi.git
  334. sleep 2
  335. echo ""
  336. echo "Worse-PDF"
  337. echo ""
  338. git clone https://github.com/3gstudent/Worse-PDF.git
  339. echo ""
  340. sleep 2
  341. echo "Installing Ivy"
  342. echo ""
  343. git clone https://github.com/optiv/Ivy.git
  344. cd Ivy
  345. go get github.com/fatih/color
  346. go get github.com/KyleBanks/XOREncryption/Go
  347. go build Ivy.go
  348. echo ""
  349. cd /opt/Payload_Development/
  350. echo "Installing PEzor"
  351. echo ""
  352. git clone https://github.com/phra/PEzor.git
  353. cd PEzor/
  354. bash install.sh
  355. echo ""
  356. #read -p "Open A New Terminal And Export The Path For PEzor To Work!"
  357. echo ""
  358. sleep 2
  359. echo "Installing ScareCrow"
  360. echo""
  361. cd /opt/Payload_Development/
  362. git clone https://github.com/optiv/ScareCrow.git
  363. cd ScareCrow/
  364. go get github.com/fatih/color
  365. go get github.com/yeka/zip
  366. go get github.com/josephspurrier/goversioninfo
  367. apt install openssl -y
  368. apt install osslsigncode -y
  369. apt install mingw-w64 -y
  370. go build ScareCrow.go
  371. cd /opt/Payload_Development/
  372. echo ""
  373. sleep 2
  374. echo "Installing Donut"
  375. echo ""
  376. git clone https://github.com/TheWover/donut.git
  377. cd donut/
  378. python3 setup.py install
  379. cd /opt/Payload_Development
  380. mkdir MAC_OS
  381. cd MAC_OS
  382. echo ""
  383. sleep 2
  384. echo "Installing Mystikal"
  385. echo ""
  386. git clone https://github.com/D00MFist/Mystikal.git
  387. cd /opt/Payload_Development/
  388. echo ""
  389. sleep 2
  390. cd /opt/Windows_OS
  391. echo "Installing GadgetToJscript"
  392. git clone https://github.com/med0x2e/GadgetToJScript.git
  393. echo ""
  394. cd /opt/Payload_Development/
  395. echo "Installing Charlotte"
  396. git clone https://github.com/9emin1/charlotte.git
  397. echo ""
  398. cd /opt/Payload_Development/
  399. echo "Installing Invisibility Cloak"
  400. git clone https://github.com/xforcered/InvisibilityCloak.git
  401. echo ""
  402. cd /opt/Windows_OS/
  403. echo "Installing Dendrobate"
  404. echo ""
  405. git clone https://github.com/FuzzySecurity/Dendrobate.git
  406. echo ""
  407. sleep 2
  408. cd /opt/Payload_Development/
  409. echo "Installing Offensive-VBA-and-XLS-Entanglement"
  410. echo ""
  411. git clone https://github.com/BC-SECURITY/Offensive-VBA-and-XLS-Entanglement.git
  412. sleep 2
  413. echo ""
  414. echo "Installing xlsGen"
  415. echo ""
  416. sleep 2
  417. git clone https://github.com/aaaddress1/xlsGen.git
  418. echo ""
  419. echo "Installing DarkArmour"
  420. echo ""
  421. sleep 2
  422. git clone https://github.com/bats3c/darkarmour.git
  423. sudo apt install mingw-w64-tools mingw-w64-common g++-mingw-w64 gcc-mingw-w64 upx-ucl osslsigncode -y
  424. echo ""
  425. echo "Installing InlineWhispers"
  426. echo""
  427. sleep 2
  428. git clone https://github.com/outflanknl/InlineWhispers.git
  429. echo ""
  430. cd /opt/Windows_OS/
  431. echo "Installing EvilClippy"
  432. echo ""
  433. sleep 2
  434. git clone https://github.com/outflanknl/EvilClippy.git
  435. echo ""
  436. echo "Installing OfficePurge"
  437. echo ""
  438. git clone https://github.com/fireeye/OfficePurge.git
  439. sleep 2
  440. echo ""
  441. echo "Installing ThreatCheck"
  442. echo ""
  443. git clone https://github.com/rasta-mouse/ThreatCheck.git
  444. echo ""
  445. echo "Ruler"
  446. echo ""
  447. sleep 2
  448. git clone https://github.com/sensepost/ruler.git
  449. echo ""
  450. echo "Installing DueDLLigence"
  451. echo ""
  452. sleep 2
  453. git clone https://github.com/fireeye/DueDLLigence.git
  454. echo ""
  455. echo "Installing RuralBishop"
  456. echo ""
  457. sleep 2
  458. git clone https://github.com/rasta-mouse/RuralBishop.git
  459. echo ""
  460. echo "Installing TikiTorch"
  461. echo ""
  462. sleep 2
  463. git clone https://github.com/rasta-mouse/TikiTorch.git
  464. echo ""
  465. echo "Installing SharpShooter"
  466. echo ""
  467. sleep 2
  468. git clone https://github.com/mdsecactivebreach/SharpShooter.git
  469. echo ""
  470. echo "Installing SharpSploit"
  471. echo ""
  472. sleep 2
  473. git clone https://github.com/cobbr/SharpSploit.git
  474. echo ""
  475. echo "Installing MSBuildAPICaller"
  476. echo ""
  477. sleep 2
  478. git clone https://github.com/rvrsh3ll/MSBuildAPICaller.git
  479. echo ""
  480. echo "Installing Macro_Pack"
  481. echo ""
  482. sleep 2
  483. git clone https://github.com/sevagas/macro_pack.git
  484. echo ""
  485. echo "Installing Inceptor"
  486. echo ""
  487. sleep 2
  488. git clone https://github.com/klezVirus/inceptor.git
  489. echo ""
  490. echo "Installing Mortar"
  491. echo ""
  492. sleep 2
  493. git clone https://github.com/0xsp-SRD/mortar.git
  494. echo ""
  495. echo "Installing RedTeamCCode"
  496. echo ""
  497. sleep 2
  498. git clone https://github.com/Mr-Un1k0d3r/RedTeamCCode.git
  499. echo ""
  500. sleep 2
  501. ###Break For Payload Development###
  502. echo "Cloning Delivery Resources"
  503. echo ""
  504. cd /opt/Delivery/
  505. echo ""
  506. echo "Installing O365 Attack Toolkit"
  507. echo ""
  508. sleep 2
  509. git clone https://github.com/mdsecactivebreach/o365-attack-toolkit.git
  510. echo ""
  511. sleep 2
  512. echo ""
  513. echo "Installing BEEF"
  514. echo ""
  515. sleep 2
  516. git clone https://github.com/beefproject/beef.git
  517. cd beef
  518. bundle install
  519. ./install
  520. echo ""
  521. ###Break For Delivery###
  522. echo "Cloning Your C2 Resources"
  523. echo ""
  524. cd /opt/Command_And_Control/
  525. echo "Cloning C2 Frameworks"
  526. echo ""
  527. echo "Installing Empire & Starkiller"
  528. echo ""
  529. sleep 2
  530. git clone https://github.com/BC-SECURITY/Empire.git
  531. version=$(lsb_release -sr)
  532. cd Empire/
  533. find ./ -type f -print0 | xargs -0 sed -i "s/20.04/${version}/g"
  534. find ./ -type f -print0 | xargs -0 sed -i "s/18.04/${version}/g"
  535. find ./ -type f -print0 | xargs -0 sed -i "s/21.04/${version}/g"
  536. find ./ -type f -print0 | xargs -0 sed -i "s/21.10/${version}/g"
  537. find ./ -type f -print0 | xargs -0 sed -i "s/16.04/${version}/g"
  538. find ./ -type f -print0 | xargs -0 sed -i "s/22.04/${version}/g"
  539. cd setup/
  540. bash install.sh
  541. cd ../
  542. sudo wget https://github.com/BC-SECURITY/Starkiller/releases/download/v1.8.0/starkiller-1.8.0.AppImage
  543. sudo chmod +x starkiller-1.8.0.AppImage
  544. echo""
  545. sleep 2
  546. cd /opt/Command_And_Control/
  547. echo "Installing PoshC2"
  548. echo ""
  549. git clone https://github.com/nettitude/PoshC2.git
  550. cd PoshC2/
  551. bash Install.sh
  552. cd /opt/Command_And_Control/
  553. echo ""
  554. echo "Installing Merlin C2"
  555. echo ""
  556. sleep 2
  557. git clone https://github.com/Ne0nd0g/merlin.git
  558. cd merlin/
  559. go build
  560. cd /opt/Command_And_Control/
  561. echo ""
  562. echo "Installing Mythic"
  563. echo ""
  564. sleep 2
  565. git clone https://github.com/its-a-feature/Mythic.git
  566. cd Mythic/
  567. ./install_docker_ubuntu.sh
  568. echo ""
  569. cd /opt/Command_And_Control/
  570. echo ""
  571. echo "Installing Covenant With Random Profile"
  572. echo ""
  573. echo "Enter A Random Word!"
  574. read Random1
  575. echo ""
  576. echo "Enter A Different Random Word!"
  577. read Random2
  578. echo ""
  579. echo "Enter A Different Random Word!"
  580. read Random3
  581. custom1=$(echo $custom1 | md5sum | head -c 20)
  582. cd /opt/Command_And_Control/
  583. sudo git clone --recurse-submodules https://github.com/ZeroPointSecurity/Covenant.git
  584. cd /opt/Command_And_Control/Covenant/Covenant/
  585. wget -q https://packages.microsoft.com/config/ubuntu/20.04/packages-microsoft-prod.deb -O packages-microsoft-prod.deb
  586. sudo dpkg -i packages-microsoft-prod.deb
  587. sudo apt-get update -y
  588. apt --fix-broken install -y
  589. sudo apt-get install apt-transport-https -y
  590. apt --fix-broken install -y
  591. sudo apt-get update -y
  592. apt --fix-broken install -y
  593. sudo apt-get install dotnet-sdk-3.1 -y
  594. apt --fix-broken install -y
  595. mv ./Data/AssemblyReferences/ ../AssemblyReferences/
  596. mv ./Data/ReferenceSourceLibraries/ ../ReferenceSourceLibraries/
  597. mv ./Data/EmbeddedResources/ ../EmbeddedResources/
  598. mv ./Models/Covenant/ ./Models/${Random1^}/
  599. mv ./Components/CovenantUsers/ ./Components/${Random1^}Users/
  600. mv ./Components/Grunts/ ./Components/${Random2^}s/
  601. mv ./Models/Grunts/ ./Models/${Random2^}s/
  602. mv ./Data/Grunt/GruntBridge/ ./Data/Grunt/${Random2^}Bridge/
  603. mv ./Data/Grunt/GruntHTTP/ ./Data/Grunt/${Random2^}HTTP/
  604. mv ./Data/Grunt/GruntSMB/ ./Data/Grunt/${Random2^}SMB/
  605. mv ./Components/GruntTaskings/ ./Components/${Random2^}Taskings/
  606. mv ./Components/GruntTasks/ ./Components/${Random2^}Tasks/
  607. mv ./Data/Grunt/ ./Data/${Random2^}/
  608. find ./ -type f -print0 | xargs -0 sed -i "s/Grunt/${Random2^}/g"
  609. find ./ -type f -print0 | xargs -0 sed -i "s/GRUNT/${Random2^^}/g"
  610. find ./ -type f -print0 | xargs -0 sed -i "s/grunt/${Random2,,}/g"
  611. #find ./ -type f -print0 | xargs -0 sed -i "s/covenant/${Random1,,}/g"
  612. find ./ -type f -print0 | xargs -0 sed -i "s/Covenant/${Random1^}/g"
  613. find ./ -type f -print0 | xargs -0 sed -i "s/COVENANT/${Random1^^}/g"
  614. find ./ -type f -print0 | xargs -0 sed -i "s/ExecuteStager/ExecLevel/g"
  615. #find ./ -type f -print0 | xargs -0 sed -i "s/REPLACE_PROFILE/REP_PROF/g"
  616. #find ./ -type f -print0 | xargs -0 sed -i "s/REPLACE_PIPE/REP_PIP/g"
  617. #find ./ -type f -print0 | xargs -0 sed -i "s/GUID/ANGID/g"
  618. find ./ -type f -print0 | xargs -0 sed -i "s/SetupAES/Install"${custom1}"AES/g"
  619. find ./ -type f -print0 | xargs -0 sed -i "s/SessionKey/Sess"${custom1}"KEy/g"
  620. find ./ -type f -print0 | xargs -0 sed -i "s/EncryptedChallenge/Enc"${custom1}"ChallEnge/g"
  621. find ./ -type f -print0 | xargs -0 sed -i "s/DecryptedChallenges/Decrypt"${custom1}"ChallEnges/g"
  622. find ./ -type f -print0 | xargs -0 sed -i "s/Stage0Body/First"${custom1}"Body/g"
  623. find ./ -type f -print0 | xargs -0 sed -i "s/Stage0Response/First"${custom1}"Response/g"
  624. find ./ -type f -print0 | xargs -0 sed -i "s/Stage0Bytes/First"${custom1}"Bytes/g"
  625. find ./ -type f -print0 | xargs -0 sed -i "s/Stage1Body/Seccond"${custom1}"Body/g"
  626. find ./ -type f -print0 | xargs -0 sed -i "s/Stage1Response/Seccond"${custom1}"Response/g"
  627. find ./ -type f -print0 | xargs -0 sed -i "s/Stage1Bytes/Seccond"${custom1}"Bytes/g"
  628. find ./ -type f -print0 | xargs -0 sed -i "s/Stage2Body/Third"${custom1}"Body/g"
  629. find ./ -type f -print0 | xargs -0 sed -i "s/Stage2Response/Third"${custom1}"Response/g"
  630. find ./ -type f -print0 | xargs -0 sed -i "s/Stage2Bytes/Third"${custom1}"Bytes/g"
  631. find ./ -type f -print0 | xargs -0 sed -i "s/message64str/messAgE"${custom1}"64str/g"
  632. find ./ -type f -print0 | xargs -0 sed -i "s/messageBytes/messAgE"${custom1}"bytes/g"
  633. find ./ -type f -print0 | xargs -0 sed -i "s/totalReadBytes/ToTal"${custom1}"ReaDBytes/g"
  634. #find ./ -type f -print0 | xargs -0 sed -i "s/inputStream/instream/g"
  635. #find ./ -type f -print0 | xargs -0 sed -i "s/outputStream/outstream/g"
  636. find ./ -type f -print0 | xargs -0 sed -i "s/deflateStream/deFlatE"${custom1}"stream/g"
  637. find ./ -type f -print0 | xargs -0 sed -i "s/memoryStream/memOrYstream/g" #don't change
  638. find ./ -type f -print0 | xargs -0 sed -i "s/compressedBytes/packed"${custom1}"bytes/g"
  639. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/REPLACE_/REP"${custom1}"_/g"
  640. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/_PROFILE_/_PROF"${custom1}"_/g"
  641. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/_VALIDATE_/_VA"${custom1}"L_/g"
  642. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
  643. find ./ -type f -name "*.razor" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
  644. find ./ -type f -name "*.json" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
  645. find ./ -type f -name "*.yaml" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
  646. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
  647. find ./ -type f -name "*.razor" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
  648. find ./ -type f -name "*.json" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
  649. find ./ -type f -name "*.yaml" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
  650. find ./ -type f -print0 | xargs -0 sed -i "s/ProfileHttp/Prof"${custom1}"HTTP/g"
  651. find ./ -type f -print0 | xargs -0 sed -i "s/baseMessenger/bAse"${custom1}"mEsSenger/g"
  652. find ./ -type f -print0 | xargs -0 sed -i "s/PartiallyDecrypted/Part"${custom1}"decrypted/g"
  653. find ./ -type f -print0 | xargs -0 sed -i "s/FullyDecrypted/Fulld"${custom1}"ecrypted/g"
  654. find ./ -type f -print0 | xargs -0 sed -i "s/compressedBytes/packed"${custom1}"bytes/g"
  655. find ./ -type f -print0 | xargs -0 sed -i "s/CookieWebClient/Ottos"${custom1}"WebClient/g"
  656. #find ./ -type f -print0 | xargs -0 sed -i "s/CookieContainer/KekseContains/g"
  657. #find ./ -type f -print0 | xargs -0 sed -i "s/GetWebRequest/DoAnWebReq/g"
  658. find ./ -type f -print0 | xargs -0 sed -i "s/Jitter/JIt"${custom1}"ter/g"
  659. find ./ -type f -print0 | xargs -0 sed -i "s/ConnectAttempts/ConneCT"${custom1}"AttEmpts/g"
  660. find ./ -type f -print0 | xargs -0 sed -i "s/RegisterBody/Reg"${custom1}"Body/g"
  661. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/messenger/meSsenGer"${custom1}"/g"
  662. find ./ -type f -print0 | xargs -0 sed -i "s/Hello World/"${custom1}"/g"
  663. find ./ -type f -print0 | xargs -0 sed -i "s/ValidateCert/Val"${custom1}"CerT/g"
  664. find ./ -type f -print0 | xargs -0 sed -i "s/UseCertPinning/UsCert"${custom1}"Pin/g"
  665. find ./ -type f -print0 | xargs -0 sed -i "s/EncryptedMessage/Enc"${custom1}"Msg/g"
  666. find ./ -type f -print0 | xargs -0 sed -i "s/cookieWebClient/"${custom1}"WebClient/g" #ottos
  667. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/aes/crypt"${custom1}"var/g"
  668. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/aes2/crypt"${custom1}"var2/g"
  669. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array5/ar"${custom1}"r5/g"
  670. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array6/ar"${custom1}"r6/g"
  671. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array4/ar"${custom1}"r4/g"
  672. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array7/ar"${custom1}"r7/g"
  673. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array1/ar"${custom1}"r1/g"
  674. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array2/ar"${custom1}"r2/g"
  675. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array3/ar"${custom1}"r3/g"
  676. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list1/l"${custom1}"i1/g"
  677. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list2/l"${custom1}"i2/g"
  678. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list3/l"${custom1}"i3/g"
  679. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list4/l"${custom1}"i4/g"
  680. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list5/l"${custom1}"i5/g"
  681. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group0/gr"${custom1}"p0/g"
  682. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group1/gr"${custom1}"p1/g"
  683. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group2/gr"${custom1}"p2/g"
  684. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group3/gr"${custom1}"p3/g"
  685. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group4/gr"${custom1}"p4/g"
  686. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group5/gr"${custom1}"p5/g"
  687. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group6/gr"${custom1}"p6/g"
  688. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group7/gr"${custom1}"p7/g"
  689. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group8/gr"${custom1}"p8/g"
  690. find ./ -type f -name "*Grunt*" | while read FILE ; do
  691. newfile="$(echo ${FILE} |sed -e "s/Grunt/${Random2^}/g")";
  692. mv "${FILE}" "${newfile}";
  693. done
  694. find ./ -type f -name "*GRUNT*" | while read FILE ; do
  695. newfile="$(echo ${FILE} |sed -e "s/GRUNT/${Random2^^}/g")";
  696. mv "${FILE}" "${newfile}";
  697. done
  698. find ./ -type f -name "*grunt*" | while read FILE ; do
  699. newfile="$(echo ${FILE} |sed -e "s/grunt/${Random2,,}/g")";
  700. mv "${FILE}" "${newfile}";
  701. done
  702. find ./ -type f -name "*Covenant*" | while read FILE ; do
  703. newfile="$(echo ${FILE} |sed -e "s/Covenant/${Random1^}/g")";
  704. mv "${FILE}" "${newfile}";
  705. done
  706. find ./ -type f -name "*COVENANT*" | while read FILE ; do
  707. newfile="$(echo ${FILE} |sed -e "s/COVENANT/${Random2^^}/g")";
  708. mv "${FILE}" "${newfile}";
  709. done
  710. #find ./ -type f -name "*covenant*" | while read FILE ; do
  711. # newfile="$(echo ${FILE} |sed -e "s/covenant/ottocommand/g")";
  712. # mv "${FILE}" "${newfile}";
  713. #done
  714. mv ../AssemblyReferences/ ./Data/
  715. mv ../ReferenceSourceLibraries/ ./Data/
  716. mv ../EmbeddedResources/ ./Data/
  717. dotnet build
  718. echo ""
  719. cd /opt/Command_And_Control/
  720. echo "Installing Shad0w"
  721. echo ""
  722. sleep 2
  723. git clone https://github.com/bats3c/shad0w.git
  724. cd shad0w/
  725. bash install.sh
  726. echo ""
  727. cd /opt/Command_And_Control/
  728. echo "Installing Sliver"
  729. echo ""
  730. sleep 2
  731. git clone https://github.com/BishopFox/sliver.git
  732. cd sliver/
  733. python3 build.py
  734. cd /opt/Command_And_Control
  735. echo ""
  736. echo "Installing SilentTrinity"
  737. echo ""
  738. sleep 2
  739. git clone https://github.com/byt3bl33d3r/SILENTTRINITY.git
  740. cd SILENTTRINITY/
  741. pip3 install -r requirements.txt
  742. cd /opt/Command_And_Control/
  743. echo ""
  744. echo "Installing Pupy C2"
  745. echo ""
  746. sleep 2
  747. git clone https://github.com/n1nj4sec/pupy.git
  748. echo ""
  749. echo "Installing Metasploit"
  750. sleep 2
  751. echo ""
  752. apt install postgresql -y
  753. systemctl start postgresql
  754. systemctl enable postgresql
  755. apt install curl -y
  756. apt --fix-broken install -y
  757. cd /opt/Command_And_Control/
  758. curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall
  759. chmod +x msfinstall
  760. ./msfinstall
  761. apt --fix-broken install -y
  762. echo ""
  763. ###Break For C2 Frameworks###
  764. echo "Cloning Staging Resources"
  765. echo ""
  766. cd /opt/Staging/
  767. echo""
  768. echo "Installing PwnDrop"
  769. git clone https://github.com/kgretzky/pwndrop.git
  770. cd pwndrop/
  771. go build
  772. cd /opt/Staging
  773. echo ""
  774. echo "Installing C2 Concealer"
  775. echo ""
  776. sleep 2
  777. git clone https://github.com/FortyNorthSecurity/C2concealer.git
  778. cd C2concealer/
  779. bash install.sh
  780. cd /opt/Staging/
  781. echo ""
  782. echo "Installing FindFrontableDomains"
  783. echo ""
  784. sleep 2
  785. git clone https://github.com/rvrsh3ll/FindFrontableDomains.git
  786. cd FindFrontableDomains/
  787. bash install.sh
  788. echo ""
  789. echo "Installing DomainHunter"
  790. echo ""
  791. cd /opt/Staging/
  792. sleep 2
  793. git clone https://github.com/threatexpress/domainhunter.git
  794. cd domainhunter/
  795. pip3 install -r requirements.txt
  796. echo ""
  797. cd /opt/Staging/
  798. echo "Installing RedWarden"
  799. echo ""
  800. sleep 2
  801. git clone https://github.com/mgeeky/RedWarden.git
  802. cd RedWarden/
  803. pip3 install -r requirements.txt
  804. cd /opt/Staging/
  805. echo ""
  806. echo "Installing AzureC2Relay"
  807. echo ""
  808. sleep 2
  809. git clone https://github.com/Flangvik/AzureC2Relay.git
  810. echo ""
  811. echo "Installing C3"
  812. echo ""
  813. sleep 2
  814. cd /opt/Windows_OS
  815. git clone https://github.com/FSecureLABS/C3.git
  816. echo ""
  817. cd /opt/Staging/
  818. echo "Installing Chameleon"
  819. echo ""
  820. sleep 2
  821. git clone https://github.com/mdsecactivebreach/Chameleon.git
  822. cd Chameleon/
  823. pip3 install -r requirements.txt
  824. cd /opt/Staging/
  825. echo ""
  826. echo "Installing Redirect Rules"
  827. echo ""
  828. sleep 2
  829. git clone https://github.com/0xZDH/redirect.rules.git
  830. cd redirect.rules/
  831. bash setup.sh
  832. echo ""
  833. echo "Installing Log Aggregation Resources"
  834. echo ""
  835. sleep 2
  836. cd /opt/Log_Aggregation
  837. echo ""
  838. echo "Installing RedELK"
  839. echo ""
  840. sleep 2
  841. git clone https://github.com/outflanknl/RedELK.git
  842. echo ""
  843. echo "Installing RedTeamSIEM"
  844. echo ""
  845. sleep 2
  846. git clone https://github.com/SecurityRiskAdvisors/RedTeamSIEM.git
  847. echo ""
  848. echo "Installing Situational Awareness Resources"
  849. echo ""
  850. sleep 2
  851. cd /opt/Windows_OS
  852. mkdir Situational_Awareness
  853. cd Situational_Awareness/
  854. echo ""
  855. echo "Installing AggressiveProxy"
  856. echo ""
  857. sleep 2
  858. git clone https://github.com/EncodeGroup/AggressiveProxy.git
  859. echo ""
  860. echo "Installing Gopher"
  861. echo ""
  862. sleep 2
  863. git clone https://github.com/EncodeGroup/Gopher.git
  864. echo ""
  865. echo "Installing SharpEDRChecker"
  866. echo ""
  867. sleep 2
  868. git clone https://github.com/PwnDexter/SharpEDRChecker.git
  869. echo ""
  870. echo "Installing CS-Situational-Awareness-BOF"
  871. echo ""
  872. sleep 2
  873. git clone https://github.com/trustedsec/CS-Situational-Awareness-BOF.git
  874. echo ""
  875. echo "Installing Seatbelt"
  876. echo ""
  877. sleep 2
  878. git clone https://github.com/GhostPack/Seatbelt.git
  879. echo ""
  880. echo "Installing SauronEye"
  881. echo ""
  882. sleep 2
  883. git clone https://github.com/vivami/SauronEye.git
  884. echo ""
  885. echo "Installing SharpShares"
  886. echo ""
  887. sleep 2
  888. git clone https://github.com/mitchmoser/SharpShares.git
  889. echo ""
  890. echo "Installing SharpAppLocker"
  891. echo ""
  892. sleep2
  893. git clone https://github.com/Flangvik/SharpAppLocker/.git
  894. echo ""
  895. echo "Installing SharpPrinter"
  896. echo ""
  897. sleep 2
  898. git clone https://github.com/rvrsh3ll/SharpPrinter.git
  899. echo ""
  900. echo "Installing Standin"
  901. echo ""
  902. git clone https://github.com/FuzzySecurity/StandIn.git
  903. echo ""
  904. echo "Installing Recon-AD"
  905. echo ""
  906. sleep 2
  907. git clone https://github.com/outflanknl/Recon-AD.git
  908. echo ""
  909. echo "Cloning BloodHound For Windows"
  910. echo ""
  911. sleep 2
  912. git clone https://github.com/BloodHoundAD/BloodHound.git
  913. echo ""
  914. echo "Installing PSPKIAudit"
  915. echo ""
  916. sleep 2
  917. git clone https://github.com/GhostPack/PSPKIAudit.git
  918. echo ""
  919. echo "Installing SharpView"
  920. echo ""
  921. sleep 2
  922. git clone https://github.com/tevora-threat/SharpView.git
  923. echo ""
  924. echo "Installing Rubeus"
  925. echo ""
  926. sleep 2
  927. git clone https://github.com/GhostPack/Rubeus.git
  928. echo ""
  929. echo "Installing Grouper"
  930. echo ""
  931. sleep 2
  932. git clone https://github.com/l0ss/Grouper.git
  933. echo ""
  934. echo "Installing ImproHound"
  935. echo ""
  936. sleep 2
  937. git clone https://github.com/improsec/ImproHound.git
  938. echo ""
  939. echo "Installing ADRecon"
  940. echo ""
  941. sleep 2
  942. git clone https://github.com/adrecon/ADRecon.git
  943. echo ""
  944. echo "Installing ADCSPwn"
  945. echo ""
  946. sleep2
  947. git clone https://github.com/bats3c/ADCSPwn.git
  948. echo ""
  949. echo "Cloning Credential Dumping Resource"
  950. echo ""
  951. sleep 2
  952. cd /opt/Windows_OS
  953. mkdir Credential_Dumping
  954. cd Credential_Dumping/
  955. echo ""
  956. echo "Cloning Mimikatz"
  957. echo ""
  958. sleep2
  959. git clone https://github.com/gentilkiwi/mimikatz.git
  960. echo ""
  961. echo "Cloning Dumpert"
  962. echo ""
  963. sleep 2
  964. git clone https://github.com/outflanknl/Dumpert.git
  965. echo ""
  966. echo "Cloning SharpLAPS"
  967. echo ""
  968. sleep 2
  969. git clone https://github.com/swisskyrepo/SharpLAPS.git
  970. echo ""
  971. echo "Cloning SharpDPAPI"
  972. echo ""
  973. sleep 2
  974. git clone https://github.com/GhostPack/SharpDPAPI.git
  975. echo ""
  976. echo "Cloning KeeThief"
  977. echo ""
  978. sleep 2
  979. git clone https://github.com/GhostPack/KeeThief.git
  980. echo ""
  981. echo "Cloning SafetyKatz"
  982. echo ""
  983. sleep 2
  984. git clone https://github.com/GhostPack/SafetyKatz.git
  985. echo ""
  986. echo "Cloning Forkatz"
  987. echo ""
  988. sleep 2
  989. git clone https://github.com/Barbarisch/forkatz.git
  990. echo ""
  991. echo "Cloning PPLKiller"
  992. echo ""
  993. sleep 2
  994. git clone https://github.com/RedCursorSecurityConsulting/PPLKiller.git
  995. echo ""
  996. echo "Cloning LaZagne"
  997. echo ""
  998. sleep 2
  999. git clone https://github.com/AlessandroZ/LaZagne.git
  1000. echo ""
  1001. echo "Cloning AndrewSpecial"
  1002. echo ""
  1003. sleep 2
  1004. git clone https://github.com/hoangprod/AndrewSpecial.git
  1005. echo ""
  1006. echo "Cloning Net-GPPassword"
  1007. echo ""
  1008. sleep 2
  1009. git clone https://github.com/outflanknl/Net-GPPPassword.git
  1010. echo ""
  1011. echo "Cloning SharpChromium"
  1012. echo ""
  1013. sleep 2
  1014. git clone https://github.com/djhohnstein/SharpChromium.git
  1015. echo ""
  1016. echo "Cloning Chlonium"
  1017. echo ""
  1018. sleep 2
  1019. git clone https://github.com/rxwx/chlonium.git
  1020. echo ""
  1021. echo "Cloning SharpCloud"
  1022. echo ""
  1023. sleep 2
  1024. git clone https://github.com/chrismaddalena/SharpCloud.git
  1025. echo ""
  1026. echo "Cloning PypyKatz"
  1027. echo ""
  1028. sleep 2
  1029. git clone https://github.com/skelsec/pypykatz.git
  1030. echo ""
  1031. echo "Cloning NanoDump"
  1032. echo ""
  1033. sleep 2
  1034. git clone https://github.com/helpsystems/nanodump.git
  1035. echo ""
  1036. sleep 2
  1037. echo "Installing Privilege Escalation Resources"
  1038. echo ""
  1039. cd /opt/Windows_OS/
  1040. mkdir Privilege_Escalation
  1041. cd Privilege_Escalation/
  1042. echo ""
  1043. echo "Installing ElevateKit"
  1044. echo ""
  1045. sleep 2
  1046. git clone https://github.com/rsmudge/ElevateKit.git
  1047. echo ""
  1048. echo "Cloning Watson"
  1049. cd /opt/Windows_OS/
  1050. mkdir Privilege_Escalation/
  1051. cd Privilege_Escalation/
  1052. echo ""
  1053. sleep 2
  1054. git clone https://github.com/rasta-mouse/Watson.git
  1055. echo ""
  1056. echo "Cloning SharpUp"
  1057. echo ""
  1058. sleep 2
  1059. git clone https://github.com/GhostPack/SharpUp.git
  1060. echo ""
  1061. echo "Cloning dazzleUp"
  1062. echo ""
  1063. sleep 2
  1064. git clone https://github.com/hlldz/dazzleUP.git
  1065. echo ""
  1066. echo "Cloning PEASS-ng"
  1067. echo ""
  1068. sleep 2
  1069. git clone https://github.com/carlospolop/PEASS-ng.git
  1070. echo ""
  1071. echo "Cloning SweetPotato"
  1072. echo ""
  1073. sleep 2
  1074. git clone https://github.com/CCob/SweetPotato.git
  1075. echo ""
  1076. echo "Cloning MultiPotato"
  1077. echo ""
  1078. git clone https://github.com/S3cur3Th1sSh1t/MultiPotato.git
  1079. echo ""
  1080. echo "Cloning Defense Evasion Resources -- This is all Windows Based"
  1081. echo ""
  1082. sleep 2
  1083. cd /opt/Windows_OS/
  1084. mkdir Defense_Evasion
  1085. cd Defense_Evasion/
  1086. git clone https://github.com/hlldz/RefleXXion.git
  1087. git clone https://github.com/wavestone-cdt/EDRSandblast.git
  1088. git clone https://github.com/APTortellini/unDefender.git
  1089. git clone https://github.com/Yaxser/Backstab.git
  1090. git clone https://github.com/boku7/spawn.git
  1091. git clone https://github.com/CCob/BOF.NET.git
  1092. git clone https://github.com/Flangvik/NetLoader.git
  1093. git clone https://github.com/outflanknl/FindObjects-BOF.git
  1094. git clone https://github.com/GetRektBoy724/SharpUnhooker.git
  1095. git clone https://github.com/bats3c/EvtMute.git
  1096. git clone https://github.com/xforcered/InlineExecute-Assembly.git
  1097. git clone https://github.com/hlldz/Phant0m.git
  1098. git clone https://github.com/CCob/SharpBlock.git
  1099. git clone https://github.com/Kharos102/NtdllUnpatcher.git
  1100. git clone https://github.com/bats3c/DarkLoadLibrary.git
  1101. git clone https://github.com/Soledge/BlockEtw.git
  1102. git clone https://github.com/mdsecactivebreach/firewalker.git
  1103. git clone https://github.com/Cerbersec/KillDefenderBOF.git
  1104. echo ""
  1105. echo "Cloning Web Resources"
  1106. echo ""
  1107. sleep 2
  1108. cd /opt/Web/
  1109. git clone https://github.com/rastating/wordpress-exploit-framework
  1110. apt-get install ruby-dev zlib1g-dev liblzma-dev libsqlite3-dev -y
  1111. apt-get install build-essential patch -y
  1112. cd wordpress-exploit-framework/
  1113. ./rebuild_and_install_gem.sh
  1114. cd /opt/Web/
  1115. echo "Installing RED HAWK Framework"
  1116. echo ""
  1117. sleep 2
  1118. git clone https://github.com/Tuhinshubhra/RED_HAWK
  1119. cd RED_HAWK
  1120. php rhawk.php
  1121. echo "Cloning Social Engineering Resources"
  1122. echo ""
  1123. sleep 2
  1124. cd /opt/Social_Engineering
  1125. echo ""
  1126. echo "Installing Social Engineering Toolkit"
  1127. echo ""
  1128. sleep 2
  1129. git clone https://github.com/trustedsec/social-engineer-toolkit.git
  1130. cd social-engineering-toolkit/
  1131. python3 setup.py install
  1132. cd /opt/Social_Engineering/
  1133. echo ""
  1134. echo "Installing Social Engineering Payloads"
  1135. echo ""
  1136. sleep 2
  1137. git clone https://github.com/bhdresh/SocialEngineeringPayloads.git
  1138. echo ""
  1139. echo "Cloning Phishing Resources"
  1140. echo ""
  1141. sleep 2
  1142. cd /opt/Phishing/
  1143. echo ""
  1144. echo "Installing Phishery"
  1145. echo ""
  1146. sleep 2
  1147. mkdir phishery
  1148. cd phishery
  1149. wget https://github.com/ryhanson/phishery/releases/download/v1.0.2/phishery1.0.2linux-amd64.tar.gz
  1150. tar -xzvf phishery*.tar.gz
  1151. cp phishery /usr/local/bin
  1152. cd /opt/Phishing/
  1153. echo ""
  1154. echo "Installing EvilginX2"
  1155. echo ""
  1156. sleep 2
  1157. git clone https://github.com/kgretzky/evilginx2.git
  1158. cd evilginx2/
  1159. make
  1160. sudo make install
  1161. cd /opt/Phishing/
  1162. echo ""
  1163. echo "Installing PwnAuth"
  1164. echo ""
  1165. sleep 2
  1166. git clone https://github.com/fireeye/PwnAuth.git
  1167. cd PwnAuth/
  1168. bash setup.sh
  1169. cd /opt/Phishing/
  1170. echo ""
  1171. echo "Installig Modlishka"
  1172. echo ""
  1173. sleep 2
  1174. git clone https://github.com/drk1wi/Modlishka.git
  1175. cd Modlishka/
  1176. make
  1177. go build
  1178. cd /opt/Phishing/
  1179. echo ""
  1180. echo "Installing King-Phisher"
  1181. echo ""
  1182. sleep 2
  1183. git clone https://github.com/securestate/king-phisher.git
  1184. echo ""
  1185. echo "Installing FiercePhish"
  1186. echo ""
  1187. sleep 2
  1188. git clone https://github.com/Raikia/FiercePhish.git
  1189. cd FiercePhish/
  1190. bash install.sh
  1191. echo ""
  1192. echo "Installing ReelPhish"
  1193. echo ""
  1194. sleep 2
  1195. git clone https://github.com/fireeye/ReelPhish.git
  1196. cd ReelPhish/
  1197. pip3 install -r requirements.txt
  1198. cd /opt/Phishing/
  1199. echo ""
  1200. echo "Installing GoPhish"
  1201. echo ""
  1202. sleep 2
  1203. git clone https://github.com/gophish/gophish.git
  1204. cd gophish/
  1205. go build
  1206. echo ""
  1207. cd /opt/Phishing/
  1208. echo "Installing CredSniper"
  1209. echo ""
  1210. sleep 2
  1211. git clone https://github.com/ustayready/CredSniper.git
  1212. cd CredSniper/
  1213. read -p "Just Hit Enter Until All Dependencies Are Installed"
  1214. cd /opt/Phishing/
  1215. echo ""
  1216. echo "Cloning Phishing Pretexts"
  1217. echo ""
  1218. sleep 2
  1219. git clone https://github.com/L4bF0x/PhishingPretexts.git
  1220. echo ""
  1221. echo "Cloning Persistence Resources"
  1222. cd /opt/Windows_OS
  1223. mkdir Persistence
  1224. cd Persistence/
  1225. git clone https://github.com/0xthirteen/SharpStay.git
  1226. git clone https://github.com/fireeye/SharPersist.git
  1227. git clone https://github.com/outflanknl/SharpHide.git
  1228. git clone https://github.com/Ben0xA/DoUCMe.git
  1229. git clone https://github.com/nccgroup/ABPTTS.git
  1230. git clone https://github.com/blackarrowsec/pivotnacci.git
  1231. git clone https://github.com/sensepost/reGeorg.git
  1232. git clone https://github.com/HarmJ0y/DAMP.git
  1233. git clone https://github.com/0x09AL/IIS-Raid.git
  1234. git clone https://github.com/antonioCoco/SharPyShell.git
  1235. echo ""
  1236. echo "Cloning Lateral Movement Resources"
  1237. echo ""
  1238. echo ""
  1239. cd /opt/Lateral_Movement/
  1240. echo ""
  1241. echo "Installing Responder"
  1242. echo ""
  1243. sleep 2
  1244. git clone https://github.com/lgandx/Responder.git
  1245. echo ""
  1246. echo "Installing MITM6"
  1247. echo ""
  1248. sleep 2
  1249. git clone https://github.com/dirkjanm/mitm6.git
  1250. cd mitm6/
  1251. pip3 install -r requirements.txt
  1252. python3 setup.py install
  1253. cd /opt/Lateral_Movement/
  1254. echo ""
  1255. echo "Installing Impacket"
  1256. echo ""
  1257. sleep 2
  1258. git clone https://github.com/SecureAuthCorp/impacket.git
  1259. cd impacket/
  1260. python3 setup.py install
  1261. echo ""
  1262. sleep 2
  1263. cd /opt/Lateral_Movement/
  1264. echo "Cloning CrackMapExec"
  1265. git clone https://github.com/byt3bl33d3r/CrackMapExec.git
  1266. cd CrackMapExec/
  1267. echo "Cloning Windows Lateral Movement Resources"
  1268. echo ""
  1269. sleep 2
  1270. cd /opt/Windows_OS/
  1271. mkdir Lateral_Movement
  1272. cd Lateral_Movement/
  1273. git clone https://github.com/RiccardoAncarani/LiquidSnake.git
  1274. git clone https://github.com/NetSPI/PowerUpSQL.git
  1275. git clone https://github.com/0xthirteen/SharpRDP.git
  1276. git clone https://github.com/0xthirteen/MoveKit.git
  1277. git clone https://github.com/juliourena/SharpNoPSExec.git
  1278. git clone https://github.com/mdsecactivebreach/Farmer.git
  1279. git clone https://github.com/FortyNorthSecurity/CIMplant.git
  1280. git clone https://github.com/Mr-Un1k0d3r/PowerLessShell.git
  1281. git clone https://github.com/FSecureLABS/SharpGPOAbuse.git
  1282. git clone https://github.com/ropnop/kerbrute.git
  1283. git clone https://github.com/blackarrowsec/mssqlproxy.git
  1284. git clone https://github.com/Kevin-Robertson/Invoke-TheHash.git
  1285. git clone https://github.com/Kevin-Robertson/InveighZero.git
  1286. git clone https://github.com/jnqpblc/SharpSpray/git
  1287. git clone https://github.com/pkb1s/SharpAllowedToAct.git
  1288. git clone https://github.com/bohops/SharpRDPHijack.git
  1289. git clone https://github.com/klezVirus/CheeseTools.git
  1290. git clone https://github.com/PowerShellMafia/PowerSploit.git
  1291. git clone https://github.com/DanMcInerney/icebreaker.git
  1292. git clone https://github.com/JavelinNetworks/HoneypotBuster.git
  1293. echo ""
  1294. echo "Cloning Exfiltration Resources"
  1295. echo ""
  1296. sleep 2
  1297. cd /opt/Windows_OS/
  1298. mkdir Exfiltration
  1299. cd Exfiltration/
  1300. echo ""
  1301. sleep 2
  1302. git clone https://github.com/Flangvik/SharpExfiltrate.git
  1303. git clone https://github.com/Arno0x/DNSExfiltrator.git
  1304. git clone https://github.com/FortyNorthSecurity/Egress-Assess.git
  1305. echo ""
  1306. echo "Cloning Cloud Resources"
  1307. echo ""
  1308. sleep 2
  1309. cd /opt/Cloud
  1310. echo ""
  1311. mkdir AWS
  1312. cd AWS/
  1313. echo "Installing AWS Resources"
  1314. echo ""
  1315. sleep 2
  1316. echo ""
  1317. echo "Installing Pacu"
  1318. echo ""
  1319. sleep 2
  1320. git clone https://github.com/RhinoSecurityLabs/pacu.git
  1321. cd pacu/
  1322. bash install.sh
  1323. echo ""
  1324. cd /opt/Cloud/AWS/
  1325. echo "Installing CloudMapper"
  1326. echo ""
  1327. sleep 2
  1328. git clone https://github.com/duo-labs/cloudmapper.git
  1329. pip3 install -r requirements.txt
  1330. echo ""
  1331. echo "Installing Enumerate-IAM"
  1332. echo ""
  1333. sleep 2
  1334. cd /opt/Cloud/AWS/
  1335. git clone https://github.com/andresriancho/enumerate-iam.git
  1336. cd enumerate-iam/
  1337. pip3 install -r requirements.txt
  1338. echo ""
  1339. cd /opt/Cloud/AWS/
  1340. echo "Installing AWSBucketDump"
  1341. echo ""
  1342. sleep 2
  1343. git clone https://github.com/jordanpotti/AWSBucketDump.git
  1344. cd AWSBucketDump/
  1345. pip3 install -r requirements.txt
  1346. cd /opt/Cloud/
  1347. mkdir Azure
  1348. cd Azure
  1349. echo "Installing Azure Resources"
  1350. echo ""
  1351. echo "Installing ADConnectDump"
  1352. echo ""
  1353. sleep 2
  1354. git clone https://github.com/fox-it/adconnectdump.git
  1355. echo ""
  1356. cd /opt/Cloud/Azure/
  1357. echo ""
  1358. echo "Installing Stormspotter"
  1359. echo ""
  1360. sleep 2
  1361. git clone https://github.com/Azure/Stormspotter.git
  1362. cd /opt/Cloud/Azure/
  1363. echo ""
  1364. echo "Installing ROADtools"
  1365. echo ""
  1366. sleep 2
  1367. git clone https://github.com/dirkjanm/ROADtools.git
  1368. cd ROADtools/
  1369. pip install -e roadlib/
  1370. pip install -e roadrecon/
  1371. cd roadrecon/frontend/
  1372. npm install
  1373. npm audit fix
  1374. echo ""
  1375. echo "Installing MicroBurst"
  1376. echo ""
  1377. sleep 2
  1378. cd /opt/Cloud/Azure/
  1379. git clone https://github.com/NetSPI/MicroBurst.git
  1380. echo ""
  1381. echo "Installing AADInternals"
  1382. echo ""
  1383. sleep 2
  1384. cd /opt/Windows_OS/
  1385. mkdir Cloud
  1386. cd Cloud
  1387. mkdir Azure
  1388. cd Azure
  1389. git clone https://github.com/Gerenios/AADInternals.git
  1390. echo ""
  1391. echo "Cloning Hak5 Implant Resources"
  1392. echo ""
  1393. cd /opt/Hak5_Implants
  1394. echo ""
  1395. git clone https://github.com/hak5/omg-payloads.git
  1396. git clone https://github.com/hak5/bashbunny-payloads.git
  1397. git clone https://github.com/hak5/usbrubberducky-payloads.git
  1398. git clone https://github.com/hak5/pineapple-community-packages.git
  1399. git clone https://github.com/hak5/pineapple-modules.git
  1400. git clone https://github.com/hak5/mk7-docs.git
  1401. git clone https://github.com/hak5/keycroc-payloads.git
  1402. git clone https://github.com/hak5/sharkjack-payloads.git
  1403. git clone https://github.com/hak5/lanturtle-modules.git
  1404. git clone https://github.com/hak5/hak5-docs.git
  1405. git clone https://github.com/hak5/packetsquirrel-payloads.git
  1406. git clone https://github.com/hak5/nano-tetra-modules.git
  1407. git clone https://github.com/hak5/signalowl-payloads.git
  1408. git clone https://github.com/hak5/plunderbug-scripts.git
  1409. echo ""
  1410. echo "Cloning Wireless Resources"
  1411. echo ""
  1412. cd /opt/Wireless/
  1413. echo ""
  1414. echo "Installing BeRateAP"
  1415. echo ""
  1416. sleep 2
  1417. git clone https://github.com/sensepost/berate_ap
  1418. echo ""
  1419. cd /opt/Wireless/
  1420. echo "Installing EvilTwin Capitive Portal"
  1421. echo ""
  1422. sleep 2
  1423. git clone https://github.com/athanstan/EvilTwin_AP_CaptivePortal.git
  1424. echo ""
  1425. cd /opt/Wireless/
  1426. echo "Installing Fluxion"
  1427. echo ""
  1428. sleep 2
  1429. git clone https://www.github.com/FluxionNetwork/fluxion.git
  1430. echo ""
  1431. echo "Installing Bettercap"
  1432. echo ""
  1433. sleep 2
  1434. git clone https://github.com/bettercap/bettercap
  1435. cd bettercap/
  1436. bash build.sh
  1437. echo ""
  1438. echo "Installing Airgeddon"
  1439. echo ""
  1440. sleep 2
  1441. git clone https://github.com/v1s1t0r1sh3r3/airgeddon.git
  1442. echo ""
  1443. cd /opt/Wireless/
  1444. echo "Installing HCXTools"
  1445. echo ""
  1446. sleep 2
  1447. git clone https://github.com/ZerBea/hcxtools
  1448. cd hcxtools/
  1449. make && make install
  1450. echo "Installing HCX Dump Tool"
  1451. cd /opt/Wireless/
  1452. git clone https://github.com/ZerBea/hcxdumptool
  1453. cd hcxdumptool/
  1454. make && make install
  1455. cd /opt/Wireless/
  1456. echo "Installing Bully"
  1457. echo ""
  1458. sleep 2
  1459. git clone https://github.com/aanarchyy/bully
  1460. cd bully/src
  1461. make && make install
  1462. cd /opt/Wireless/
  1463. echo "Installing EapHammer"
  1464. echo ""
  1465. sleep 2
  1466. git clone https://github.com/s0lst1c3/eaphammer.git
  1467. cd eaphammer/
  1468. ./kali-setup
  1469. cd /opt/Wireless
  1470. mkdir Wireless_Drivers
  1471. cd Wireless_Drivers/
  1472. apt install dkms -y
  1473. git clone https://github.com/aircrack-ng/rtl8812au
  1474. cd rtl8812au/
  1475. make && make install
  1476. cd /opt/Virtual_Machines
  1477. echo "Installing VirtualBox"
  1478. echo ""
  1479. sleep 3
  1480. apt-get update -y && apt-get upgrade -y
  1481. apt --fix-broken install -y
  1482. wget https://download.virtualbox.org/virtualbox/6.1.34/virtualbox-6.1_6.1.34-150636.1~Ubuntu~eoan_amd64.deb
  1483. dpkg --install virtualbox-6.1_6.1.34-150636.1~Ubuntu~eoan_amd64.deb
  1484. echo""
  1485. echo "Downloading Kali VM"
  1486. echo ""
  1487. wget https://kali.download/virtual-images/kali-2022.1/kali-linux-2022.1-virtualbox-amd64.ova
  1488. echo ""
  1489. echo "Downloading Windows Ops Box"
  1490. echo ""
  1491. sleep 2
  1492. wget https://az792536.vo.msecnd.net/vms/VMBuild_20190311/VirtualBox/MSEdge/MSEdge.Win10.VirtualBox.zip
  1493. echo ""
  1494. sleep 2
  1495. echo ""
  1496. apt --fix-broken install -y
  1497. read -p "Press Enter To Reboot Your New C2 Box"
  1498. reboot now