AutoC2.sh 31 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992
  1. #!/bin/bash
  2. cat << "EOF"
  3. __ _ ___ ___ _ _ _ __ ___ ___ | |__ _ __ ___ __ _ ___| |__
  4. / _` / __/ __| | | | '_ ` _ \ / _ \_____| '_ \| '__/ _ \/ _` |/ __| '_ \
  5. | (_| \__ \__ \ |_| | | | | | | __/_____| |_) | | | __/ (_| | (__| | | |
  6. \__,_|___/___/\__,_|_| |_| |_|\___| |_.__/|_| \___|\__,_|\___|_| |_|
  7. **AutoC2**
  8. Use At Your Own Risk
  9. EOF
  10. sleep 2
  11. echo""
  12. echo""
  13. echo "WARNING THIS SCRIPT TAKES FUCKING FOREVER!!!"
  14. echo""
  15. echo""
  16. echo "All Tools Can Be Found In The /opt Directory"
  17. echo ""
  18. sleep 2
  19. read -p "Press enter to continue"
  20. echo ""
  21. echo "Updating Your System"
  22. echo""
  23. sleep 2
  24. apt-get update -y && apt-get upgrade -y
  25. apt update -y && apt upgrade -y
  26. apt autoremove -y
  27. echo ""
  28. sleep 2
  29. echo "Installing System Dependencies"
  30. echo ""
  31. sleep 2
  32. apt install git docker.io golang python3 python3-pip pipx chromium-browser -y
  33. /usr/bin/python3 -m pip install --upgrade pip
  34. echo ""
  35. echo "Removing Unneeded Directories"
  36. sleep 2
  37. rm -rf Videos/
  38. rm -rf Music/
  39. rm -rf Public/
  40. rm -rf Templates/
  41. echo""
  42. echo "Installing Hackery Stuff"
  43. echo ""
  44. sleep 2
  45. apt install nmap recon-ng snap -y
  46. snap install amass
  47. echo ""
  48. echo "Creating Repo Folders"
  49. echo ""
  50. sleep 2
  51. cd /opt
  52. mkdir Initial_Access
  53. mkdir Recon
  54. mkdir Delivery
  55. mkdir Command_And_Control
  56. mkdir Situational_Awareness
  57. mkdir Credential_Dumping
  58. mkdir Privilege_Escallation
  59. mkdir Defense_Evasion
  60. mkdir Social_Engineering
  61. mkdir Phishing
  62. mkdir Persistence
  63. mkdir Lateral_Movement
  64. mkdir Exfiltration
  65. mkdir Cloud
  66. mkdir Payload_Development
  67. mkdir Hak5_Implants
  68. mkdir Wireless
  69. echo""
  70. echo "Getting Resources"
  71. sleep 2
  72. echo""
  73. echo "Cloning Recon Resources"
  74. echo""
  75. sleep 2
  76. cd Recon
  77. echo""
  78. echo "Installing RustScan"
  79. echo""
  80. sleep 2
  81. git clone https://github.com/RustScan/RustScan.git
  82. cd RustScan.git
  83. docker build -t rustscan .
  84. cd /opt/Recon/
  85. echo "Installing GitLeaks"
  86. echo ""
  87. sleep 2
  88. git clone https://github.com/zricethezav/gitleaks.git
  89. cd gitleaks/
  90. make build
  91. echo ""
  92. cd /opt/Recon/
  93. echo "Installing S3Scanner"
  94. echo ""
  95. sleep 2
  96. git clone https://github.com/sa7mon/S3Scanner.git
  97. cd S3Scanner/
  98. pip3 install -r requirements.txt
  99. python3 -m S3Scanner
  100. cd /opt/Recon/
  101. echo""
  102. echo "Installing Cloud_Enum"
  103. echo""
  104. sleep 2
  105. git clone https://github.com/initstring/cloud_enum.git
  106. cd cloud_enum
  107. pip3 install -r ./requirements.txt
  108. cd /opt/Recon/
  109. echo "Installing Buster"
  110. echo ""
  111. sleep 2
  112. git clone https://github.com/sham00n/buster.git
  113. cd buster/
  114. python3 setup.py install
  115. cd /opt/Repo/
  116. git clone https://github.com/initstring/linkedin2username.git
  117. echo ""
  118. echo "Installing WitnessMe"
  119. echo ""
  120. sleep 2
  121. python3 -m pip install --user pipx
  122. pipx install witnessme
  123. pipx ensurepath
  124. cd /opt/Recon/
  125. echo ""
  126. echo "Installing Pagodo"
  127. echo ""
  128. sleep 2
  129. git clone https://github.com/opsdisk/pagodo.git
  130. cd pagodo
  131. pip install -r requirements.txt
  132. cd /opt/Recon/
  133. echo ""
  134. echo "Installing AttackSurfaceMapper"
  135. echo""
  136. sleep 2
  137. git clone https://github.com/superhedgy/AttackSurfaceMapper.git
  138. cd AttackSurfaceMapper
  139. python3 -m pip install --no-cache-dir -r requirements.txt
  140. cd /opt/Recon/
  141. echo ""
  142. echo "Installing SpiderFoot"
  143. echo ""
  144. sleep 2
  145. git clone https://github.com/smicallef/spiderfoot.git
  146. cd spiderfoot
  147. pip3 install -r requirements.txt
  148. pip3 install cherrypy
  149. pip3 install cherrypy_cors
  150. pip3 install publicsuffixlist
  151. pip3 install networkx
  152. pip3 install openpyxl
  153. cd /opt/Recon/
  154. echo""
  155. echo "Installing DNScan"
  156. echo ""
  157. sleep 2
  158. git clone https://github.com/rbsec/dnscan.git
  159. cd dnscan
  160. pip3 install -r requirements.txt
  161. pip3 install setuptools
  162. cd /opt/Recon/
  163. echo""
  164. echo "Installing SpoofCheck"
  165. echo""
  166. sleep 2
  167. git clone https://github.com/BishopFox/spoofcheck.git
  168. cd spoofcheck
  169. pip3 install -r requirements.txt
  170. cd /opt/Recon/
  171. echo ""
  172. echo "Installing LinkedInt"
  173. echo""
  174. sleep 2
  175. git clone https://github.com/vysecurity/LinkedInt.git
  176. cd LinkedInt
  177. pip3 install -r requirements.txt
  178. cd /opt/Recon/
  179. echo ""
  180. echo "Installing EyeWitness"
  181. echo ""
  182. sleep 2
  183. git clone https://github.com/ChrisTruncer/EyeWitness.git
  184. cd EyeWitness/Python/setup
  185. bash setup.sh
  186. cd /opt/Recon/
  187. echo""
  188. echo "Installing Aquatone"
  189. echo ""
  190. sleep 2
  191. mkdir Aquatone
  192. cd Aquatone/
  193. wget https://github.com/michenriksen/aquatone/releases/download/v1.7.0/aquatone_linux_amd64_1.7.0.zip
  194. unzip aquatone_linux_amd64_1.7.0.zip
  195. cd /opt/Recon/
  196. echo""
  197. echo "Installing DNSrecon"
  198. echo ""
  199. sleep 2
  200. git clone https://github.com/darkoperator/dnsrecon.git
  201. cd dnsrecon
  202. pip install -r requirements.txt
  203. python setup.py install
  204. cd /opt/Recon/
  205. echo ""
  206. echo "Installing Social Mapper"
  207. echo ""
  208. sleep 2
  209. git clone https://github.com/SpiderLabs/social_mapper.git
  210. cd /social_mapper/setup/
  211. pip install -r requirements.txt
  212. echo""
  213. cd /opt/Recon/
  214. echo "Installing theHarvester"
  215. echo ""
  216. sleep 2
  217. git clone https://github.com/laramies/theHarvester.git
  218. cd theHarvester/
  219. pip3 install aiohttp
  220. pip3 install aiomultiprocess
  221. python3 -m pip install -r requirements/base.txt
  222. python3 setup.py install
  223. cd /opt/Recon/
  224. echo ""
  225. echo "Installing Metagoofil"
  226. echo ""
  227. sleep 2
  228. git clone https://github.com/laramies/metagoofil.git
  229. echo""
  230. echo "Installing TruffleHog"
  231. echo ""
  232. sleep 2
  233. git clone https://github.com/dxa4481/truffleHog.git
  234. cd trufflehog; go install
  235. cd /opt/Recon/
  236. echo""
  237. echo "Installing Pwned0rNot -- API KEY REQUIRE"
  238. git clone https://github.com/thewhiteh4t/pwnedOrNot.git
  239. cd pwnedOrNot
  240. chmod +x install.sh
  241. ./install.sh
  242. cd /opt/Recon/
  243. echo""
  244. echo "Installing GitHarvester"
  245. echo ""
  246. sleep 2
  247. git clone https://github.com/metac0rtex/GitHarvester.git
  248. echo ""
  249. echo "Cloning Initial Access Resources"
  250. echo ""
  251. sleep 2
  252. ###Break For Recon Folder###
  253. cd /opt/Initial_Access
  254. echo "Installing Initial Access Tools"
  255. echo ""
  256. sleep 2
  257. echo "Installing Spraying Toolkit"
  258. echo ""
  259. sleep 2
  260. git clone https://github.com/byt3bl33d3r/SprayingToolkit.git
  261. cd SprayingToolkit/
  262. pip3 install -r requirements.txt
  263. cd /opt/Initial_Access
  264. echo ""
  265. sleep 2
  266. echo "Installing O365 Recon"
  267. echo ""
  268. git clone https://github.com/nyxgeek/o365recon.git
  269. echo ""
  270. sleep 2
  271. echo "Installing TREVORspray"
  272. echo ""
  273. sleep 2
  274. git clone https://github.com/blacklanternsecurity/TREVORspray.git
  275. cd TREVORspray/
  276. pip3 install -r requirements.txt
  277. sleep2
  278. echo ""
  279. echo "Cloning Payload Development Resources"
  280. echo ""
  281. sleep 2
  282. cd ../Payload_Development
  283. echo "Installing Unicorn"
  284. git clone https://github.com/trustedsec/unicorn.git
  285. echo""
  286. echo "Installing Demiguise"
  287. echo ""
  288. sleep 2
  289. git clone https://github.com/nccgroup/demiguise.git
  290. echo ""
  291. echo "Installing The Backdoor Factory"
  292. echo ""
  293. docker pull secretsquirrel/the-backdoor-factory
  294. echo ""
  295. sleep 2
  296. echo "Installing Avet"
  297. echo ""
  298. git clone https://github.com/govolution/avet.git
  299. cd avet
  300. bash setup.sh
  301. cd /opt/Payload_Development/
  302. sleep 2
  303. echo ""
  304. echo "Installing MetaTwin"
  305. git clone https://github.com/threatexpress/metatwin.git
  306. echo "'"
  307. sleep 2
  308. echo "Installing PSAmsi"
  309. git clone https://github.com/cobbr/PSAmsi.git
  310. sleep 2
  311. echo ""
  312. echo "Worse-PDF"
  313. echo ""
  314. git clone https://github.com/3gstudent/Worse-PDF.git
  315. echo ""
  316. sleep 2
  317. echo "Installing Ivy"
  318. git clone https://github.com/optiv/Ivy.git
  319. cd Ivy
  320. go get github.com/fatih/color
  321. go get github.com/KyleBanks/XOREncryption/Go
  322. go build Ivy.go
  323. echo ""
  324. cd /opt/Payload_Development/
  325. echo "Installing PEzor"
  326. git clone https://github.com/phra/PEzor.git
  327. cd PEzor/
  328. bash install.sh
  329. echo ""
  330. read -p "Open A New Terminal And Export The Path For PEzor To Work!"
  331. echo ""
  332. sleep 2
  333. echo "Installing ScareCrow"
  334. echo""
  335. git clone https://github.com/optiv/ScareCrow.git
  336. cd ScareCrow/
  337. go get github.com/fatih/color
  338. go get github.com/yeka/zip
  339. go get github.com/josephspurrier/goversioninfo
  340. apt install openssl -y
  341. apt install osslsigncode -y
  342. apt install mingw-w64 -y
  343. go build ScareCrow.go
  344. cd /opt/Payload_Development/
  345. echo ""
  346. sleep 2
  347. echo "Installing Donut"
  348. echo ""
  349. git clone https://github.com/TheWover/donut.git
  350. cd donut/
  351. python3 setup.py install
  352. cd /opt/Payload_Development
  353. mkdir MAC_OS
  354. cd MAC_OS
  355. echo ""
  356. sleep 2
  357. echo "Installing Mystikal"
  358. echo ""
  359. git clone https://github.com/D00MFist/Mystikal.git
  360. cd /opt/Payload_Development/
  361. echo ""
  362. sleep 2
  363. mkdir Windows_OS
  364. cd Windows_OS
  365. echo "Installing GadgetToJscript"
  366. git clone https://github.com/med0x2e/GadgetToJScript.git
  367. echo ""
  368. cd /opt/Payload_Development/
  369. echo "Installing Charlotte"
  370. git clone https://github.com/9emin1/charlotte.git
  371. echo ""
  372. cd /opt/Payload_Development/
  373. echo "Installing Invisibility Cloak"
  374. git clone https://github.com/xforcered/InvisibilityCloak.git
  375. echo ""
  376. cd /opt/Payload_Development/Windows_OS/
  377. echo "Installing Dendrobate"
  378. echo ""
  379. git clone https://github.com/FuzzySecurity/Dendrobate.git
  380. echo ""
  381. sleep 2
  382. cd /opt/Payload_Development/
  383. echo "Installing Offensive-VBA-and-XLS-Entanglement"
  384. echo ""
  385. git clone https://github.com/BC-SECURITY/Offensive-VBA-and-XLS-Entanglement.git
  386. sleep 2
  387. echo ""
  388. echo "Installing xlsGen"
  389. echo ""
  390. sleep 2
  391. git clone https://github.com/aaaddress1/xlsGen.git
  392. echo ""
  393. echo "Installing DarkArmour"
  394. echo ""
  395. sleep 2
  396. git clone https://github.com/bats3c/darkarmour.git
  397. sudo apt install mingw-w64-tools mingw-w64-common g++-mingw-w64 gcc-mingw-w64 upx-ucl osslsigncode
  398. echo ""
  399. echo "Installing InlineWhispers"
  400. echo""
  401. sleep 2
  402. git clone https://github.com/outflanknl/InlineWhispers.git
  403. echo ""
  404. cd /opt/Payload_Development/Windows_OS/
  405. echo "Installing EvilClippy"
  406. echo ""
  407. sleep 2
  408. git clone https://github.com/outflanknl/EvilClippy.git
  409. echo ""
  410. echo "Installing OfficePurge"
  411. echo ""
  412. git clone https://github.com/fireeye/OfficePurge.git
  413. sleep 2
  414. echo ""
  415. echo "Installing ThreatCheck"
  416. echo ""
  417. git clone https://github.com/rasta-mouse/ThreatCheck.git
  418. echo ""
  419. echo "Ruler"
  420. echo ""
  421. sleep 2
  422. git clone https://github.com/sensepost/ruler.git
  423. echo ""
  424. echo "Installing DueDLLigence"
  425. echo ""
  426. sleep 2
  427. git clone https://github.com/fireeye/DueDLLigence.git
  428. echo ""
  429. echo "Installing RuralBishop"
  430. echo ""
  431. sleep 2
  432. git clone https://github.com/rasta-mouse/RuralBishop.git
  433. echo ""
  434. echo "Installing TikiTorch"
  435. echo ""
  436. sleep 2
  437. git clone https://github.com/rasta-mouse/TikiTorch.git
  438. echo ""
  439. echo "Installing SharpShooter"
  440. echo ""
  441. sleep 2
  442. git clone https://github.com/mdsecactivebreach/SharpShooter.git
  443. echo ""
  444. echo "Installing SharpSploit"
  445. echo ""
  446. sleep 2
  447. git clone https://github.com/cobbr/SharpSploit.git
  448. echo ""
  449. echo "Installing MSBuildAPICaller"
  450. echo ""
  451. sleep 2
  452. git clone https://github.com/rvrsh3ll/MSBuildAPICaller.git
  453. echo ""
  454. echo "Installing Macro_Pack"
  455. echo ""
  456. sleep 2
  457. git clone https://github.com/sevagas/macro_pack.git
  458. echo ""
  459. echo "Installing Inceptor"
  460. echo ""
  461. sleep 2
  462. git clone https://github.com/klezVirus/inceptor.git
  463. echo ""
  464. echo "Installing Mortar
  465. echo ""
  466. sleep 2
  467. git clone https://github.com/0xsp-SRD/mortar.git
  468. echo ""
  469. echo "Installing RedTeamCCode"
  470. echo ""
  471. sleep 2
  472. git clone https://github.com/Mr-Un1k0d3r/RedTeamCCode.git
  473. echo ""
  474. sleep 2
  475. echo "Cloning Delivery Resources"
  476. echo ""
  477. cd /opt/Payload_Development/Delivery/
  478. echo ""
  479. echo "Installing O365 Attack Toolkit"
  480. echo ""
  481. sleep 2
  482. git clone https://github.com/mdsecactivebreach/o365-attack-toolkit.git
  483. echo ""
  484. sleep 2
  485. echo "
  486. echo "Installing BEEF"
  487. echo ""
  488. sleep 2
  489. git clone https://github.com/beefproject/beef.git
  490. cd beef
  491. ./install
  492. echo ""
  493. echo "Cloning Your C2 Resources"
  494. echo ""
  495. cd /opt/Command_And_Control
  496. echo "Cloning C2 Frameworks"
  497. echo ""
  498. echo "Installing Empire & Starkiller"
  499. echo ""
  500. sleep 2
  501. git clone https://github.com/BC-SECURITY/Empire.git
  502. version=$(lsb_release -sr)
  503. cd Empire/
  504. find ./ -type f -print0 | xargs -0 sed -i "s/20.04/${version}/g"
  505. find ./ -type f -print0 | xargs -0 sed -i "s/18.04/${version}/g"
  506. find ./ -type f -print0 | xargs -0 sed -i "s/21.04/${version}/g"
  507. find ./ -type f -print0 | xargs -0 sed -i "s/21.10/${version}/g"
  508. find ./ -type f -print0 | xargs -0 sed -i "s/16.04/${version}/g"
  509. find ./ -type f -print0 | xargs -0 sed -i "s/22.04/${version}/g"
  510. cd setup/
  511. bash install.sh
  512. sudo wget https://github.com/BC-SECURITY/Starkiller/releases/download/v1.8.0/starkiller-1.8.0.AppImage
  513. sudo chmod +x starkiller-1.0.0.AppImage
  514. echo""
  515. sleep 2
  516. cd /opt/Command_And_Control/
  517. echo "Installing PoshC2"
  518. echo ""
  519. git clone https://github.com/nettitude/PoshC2.git
  520. cd PoshC2/
  521. bash Install.sh
  522. cd /opt/Command_And_Control/
  523. echo ""
  524. echo "Installing Merlin C2"
  525. echo ""
  526. sleep 2
  527. git clone https://github.com/Ne0nd0g/merlin.git
  528. cd merlin/
  529. go build
  530. cd /opt/Command_And_Control/
  531. echo ""
  532. echo "Installing Mythic"
  533. echo ""
  534. sleep 2
  535. git clone https://github.com/its-a-feature/Mythic.git
  536. cd Mythic/
  537. ./install_docker_ubuntu.sh
  538. cd /opt/Command_And_Control
  539. echo ""
  540. echo "Installing Covenant With Random Profile"
  541. echo ""
  542. echo "Enter A Random Word!"
  543. read Random1
  544. echo ""
  545. echo "Enter A Different Random Word!"
  546. read Random2
  547. echo ""
  548. echo "Enter A Different Random Word!"
  549. read Random3
  550. custom1=$(echo $custom1 | md5sum | head -c 20)
  551. sudo git clone --recurse-submodules https://github.com/ZeroPointSecurity/Covenant.git /opt/Covenant
  552. cd /opt/Covenant/Covenant/
  553. mv ./Data/AssemblyReferences/ ../AssemblyReferences/
  554. mv ./Data/ReferenceSourceLibraries/ ../ReferenceSourceLibraries/
  555. mv ./Data/EmbeddedResources/ ../EmbeddedResources/
  556. mv ./Models/Covenant/ ./Models/${Random1^}/
  557. mv ./Components/CovenantUsers/ ./Components/${Random1^}Users/
  558. mv ./Components/Grunts/ ./Components/${Random2^}s/
  559. mv ./Models/Grunts/ ./Models/${Random2^}s/
  560. mv ./Data/Grunt/GruntBridge/ ./Data/Grunt/${Random2^}Bridge/
  561. mv ./Data/Grunt/GruntHTTP/ ./Data/Grunt/${Random2^}HTTP/
  562. mv ./Data/Grunt/GruntSMB/ ./Data/Grunt/${Random2^}SMB/
  563. mv ./Components/GruntTaskings/ ./Components/${Random2^}Taskings/
  564. mv ./Components/GruntTasks/ ./Components/${Random2^}Tasks/
  565. mv ./Data/Grunt/ ./Data/${Random2^}/
  566. find ./ -type f -print0 | xargs -0 sed -i "s/Grunt/${Random2^}/g"
  567. find ./ -type f -print0 | xargs -0 sed -i "s/GRUNT/${Random2^^}/g"
  568. find ./ -type f -print0 | xargs -0 sed -i "s/grunt/${Random2,,}/g"
  569. #find ./ -type f -print0 | xargs -0 sed -i "s/covenant/${Random1,,}/g"
  570. find ./ -type f -print0 | xargs -0 sed -i "s/Covenant/${Random1^}/g"
  571. find ./ -type f -print0 | xargs -0 sed -i "s/COVENANT/${Random1^^}/g"
  572. find ./ -type f -print0 | xargs -0 sed -i "s/ExecuteStager/ExecLevel/g"
  573. #find ./ -type f -print0 | xargs -0 sed -i "s/REPLACE_PROFILE/REP_PROF/g"
  574. #find ./ -type f -print0 | xargs -0 sed -i "s/REPLACE_PIPE/REP_PIP/g"
  575. #find ./ -type f -print0 | xargs -0 sed -i "s/GUID/ANGID/g"
  576. find ./ -type f -print0 | xargs -0 sed -i "s/SetupAES/Install"${custom1}"AES/g"
  577. find ./ -type f -print0 | xargs -0 sed -i "s/SessionKey/Sess"${custom1}"KEy/g"
  578. find ./ -type f -print0 | xargs -0 sed -i "s/EncryptedChallenge/Enc"${custom1}"ChallEnge/g"
  579. find ./ -type f -print0 | xargs -0 sed -i "s/DecryptedChallenges/Decrypt"${custom1}"ChallEnges/g"
  580. find ./ -type f -print0 | xargs -0 sed -i "s/Stage0Body/First"${custom1}"Body/g"
  581. find ./ -type f -print0 | xargs -0 sed -i "s/Stage0Response/First"${custom1}"Response/g"
  582. find ./ -type f -print0 | xargs -0 sed -i "s/Stage0Bytes/First"${custom1}"Bytes/g"
  583. find ./ -type f -print0 | xargs -0 sed -i "s/Stage1Body/Seccond"${custom1}"Body/g"
  584. find ./ -type f -print0 | xargs -0 sed -i "s/Stage1Response/Seccond"${custom1}"Response/g"
  585. find ./ -type f -print0 | xargs -0 sed -i "s/Stage1Bytes/Seccond"${custom1}"Bytes/g"
  586. find ./ -type f -print0 | xargs -0 sed -i "s/Stage2Body/Third"${custom1}"Body/g"
  587. find ./ -type f -print0 | xargs -0 sed -i "s/Stage2Response/Third"${custom1}"Response/g"
  588. find ./ -type f -print0 | xargs -0 sed -i "s/Stage2Bytes/Third"${custom1}"Bytes/g"
  589. find ./ -type f -print0 | xargs -0 sed -i "s/message64str/messAgE"${custom1}"64str/g"
  590. find ./ -type f -print0 | xargs -0 sed -i "s/messageBytes/messAgE"${custom1}"bytes/g"
  591. find ./ -type f -print0 | xargs -0 sed -i "s/totalReadBytes/ToTal"${custom1}"ReaDBytes/g"
  592. #find ./ -type f -print0 | xargs -0 sed -i "s/inputStream/instream/g"
  593. #find ./ -type f -print0 | xargs -0 sed -i "s/outputStream/outstream/g"
  594. find ./ -type f -print0 | xargs -0 sed -i "s/deflateStream/deFlatE"${custom1}"stream/g"
  595. find ./ -type f -print0 | xargs -0 sed -i "s/memoryStream/memOrYstream/g" #don't change
  596. find ./ -type f -print0 | xargs -0 sed -i "s/compressedBytes/packed"${custom1}"bytes/g"
  597. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/REPLACE_/REP"${custom1}"_/g"
  598. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/_PROFILE_/_PROF"${custom1}"_/g"
  599. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/_VALIDATE_/_VA"${custom1}"L_/g"
  600. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
  601. find ./ -type f -name "*.razor" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
  602. find ./ -type f -name "*.json" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
  603. find ./ -type f -name "*.yaml" -print0 | xargs -0 sed -i "s/GUID/${Random3^^}/g"
  604. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
  605. find ./ -type f -name "*.razor" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
  606. find ./ -type f -name "*.json" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
  607. find ./ -type f -name "*.yaml" -print0 | xargs -0 sed -i "s/guid/${Random3,,}/g"
  608. find ./ -type f -print0 | xargs -0 sed -i "s/ProfileHttp/Prof"${custom1}"HTTP/g"
  609. find ./ -type f -print0 | xargs -0 sed -i "s/baseMessenger/bAse"${custom1}"mEsSenger/g"
  610. find ./ -type f -print0 | xargs -0 sed -i "s/PartiallyDecrypted/Part"${custom1}"decrypted/g"
  611. find ./ -type f -print0 | xargs -0 sed -i "s/FullyDecrypted/Fulld"${custom1}"ecrypted/g"
  612. find ./ -type f -print0 | xargs -0 sed -i "s/compressedBytes/packed"${custom1}"bytes/g"
  613. find ./ -type f -print0 | xargs -0 sed -i "s/CookieWebClient/Ottos"${custom1}"WebClient/g"
  614. #find ./ -type f -print0 | xargs -0 sed -i "s/CookieContainer/KekseContains/g"
  615. #find ./ -type f -print0 | xargs -0 sed -i "s/GetWebRequest/DoAnWebReq/g"
  616. find ./ -type f -print0 | xargs -0 sed -i "s/Jitter/JIt"${custom1}"ter/g"
  617. find ./ -type f -print0 | xargs -0 sed -i "s/ConnectAttempts/ConneCT"${custom1}"AttEmpts/g"
  618. find ./ -type f -print0 | xargs -0 sed -i "s/RegisterBody/Reg"${custom1}"Body/g"
  619. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/messenger/meSsenGer"${custom1}"/g"
  620. find ./ -type f -print0 | xargs -0 sed -i "s/Hello World/"${custom1}"/g"
  621. find ./ -type f -print0 | xargs -0 sed -i "s/ValidateCert/Val"${custom1}"CerT/g"
  622. find ./ -type f -print0 | xargs -0 sed -i "s/UseCertPinning/UsCert"${custom1}"Pin/g"
  623. find ./ -type f -print0 | xargs -0 sed -i "s/EncryptedMessage/Enc"${custom1}"Msg/g"
  624. find ./ -type f -print0 | xargs -0 sed -i "s/cookieWebClient/"${custom1}"WebClient/g" #ottos
  625. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/aes/crypt"${custom1}"var/g"
  626. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/aes2/crypt"${custom1}"var2/g"
  627. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array5/ar"${custom1}"r5/g"
  628. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array6/ar"${custom1}"r6/g"
  629. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array4/ar"${custom1}"r4/g"
  630. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array7/ar"${custom1}"r7/g"
  631. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array1/ar"${custom1}"r1/g"
  632. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array2/ar"${custom1}"r2/g"
  633. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/array3/ar"${custom1}"r3/g"
  634. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list1/l"${custom1}"i1/g"
  635. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list2/l"${custom1}"i2/g"
  636. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list3/l"${custom1}"i3/g"
  637. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list4/l"${custom1}"i4/g"
  638. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/list5/l"${custom1}"i5/g"
  639. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group0/gr"${custom1}"p0/g"
  640. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group1/gr"${custom1}"p1/g"
  641. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group2/gr"${custom1}"p2/g"
  642. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group3/gr"${custom1}"p3/g"
  643. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group4/gr"${custom1}"p4/g"
  644. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group5/gr"${custom1}"p5/g"
  645. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group6/gr"${custom1}"p6/g"
  646. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group7/gr"${custom1}"p7/g"
  647. find ./ -type f -name "*.cs" -print0 | xargs -0 sed -i "s/group8/gr"${custom1}"p8/g"
  648. find ./ -type f -name "*Grunt*" | while read FILE ; do
  649. newfile="$(echo ${FILE} |sed -e "s/Grunt/${Random2^}/g")";
  650. mv "${FILE}" "${newfile}";
  651. done
  652. find ./ -type f -name "*GRUNT*" | while read FILE ; do
  653. newfile="$(echo ${FILE} |sed -e "s/GRUNT/${Random2^^}/g")";
  654. mv "${FILE}" "${newfile}";
  655. done
  656. find ./ -type f -name "*grunt*" | while read FILE ; do
  657. newfile="$(echo ${FILE} |sed -e "s/grunt/${Random2,,}/g")";
  658. mv "${FILE}" "${newfile}";
  659. done
  660. find ./ -type f -name "*Covenant*" | while read FILE ; do
  661. newfile="$(echo ${FILE} |sed -e "s/Covenant/${Random1^}/g")";
  662. mv "${FILE}" "${newfile}";
  663. done
  664. find ./ -type f -name "*COVENANT*" | while read FILE ; do
  665. newfile="$(echo ${FILE} |sed -e "s/COVENANT/${Random2^^}/g")";
  666. mv "${FILE}" "${newfile}";
  667. done
  668. #find ./ -type f -name "*covenant*" | while read FILE ; do
  669. # newfile="$(echo ${FILE} |sed -e "s/covenant/ottocommand/g")";
  670. # mv "${FILE}" "${newfile}";
  671. #done
  672. mv ../AssemblyReferences/ ./Data/
  673. mv ../ReferenceSourceLibraries/ ./Data/
  674. mv ../EmbeddedResources/ ./Data/
  675. dotnet build
  676. echo ""
  677. cd /opt/Command_And_Control/
  678. echo"Installing Shad0w"
  679. echo ""
  680. sleep 2
  681. git clone https://github.com/bats3c/shad0w.git
  682. cd shad0w/
  683. bash install.sh
  684. echo ""
  685. cd /opt/Command_And_
  686. /
  687. echo "Installing Sliver"
  688. echo ""
  689. sleep 2
  690. git clone https://github.com/BishopFox/sliver.git
  691. cd sliver/
  692. python3 build.py
  693. cd /opt/Command_And_Control
  694. echo ""
  695. echo "Installing SilentTrinity"
  696. echo ""
  697. sleep 2
  698. git clone https://github.com/byt3bl33d3r/SILENTTRINITY.git
  699. cd SILENTTRINITY/
  700. pip3 install -r requirements.txt
  701. cd /opt/Command_And_Control
  702. echo ""
  703. echo "Installing Pupy C2"
  704. echo ""
  705. sleep 2
  706. git clone https://github.com/n1nj4sec/pupy.git
  707. echo ""
  708. echo "Installing Metasploit"
  709. sleep 2
  710. echo ""
  711. apt install postgresql -y
  712. systemctl start postgresql
  713. systemctl enable postgresql
  714. apt install curl -y
  715. apt --fix-broken install -y
  716. curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall
  717. chmod +x msfinstall
  718. ./msfinstall
  719. apt --fix-broken install -y
  720. echo ""
  721. echo "Cloning Staging Resources"
  722. echo ""
  723. cd /opt/
  724. mkdir Staging
  725. cd Staging/
  726. echo "Installing PwnDrop"
  727. git clone https://github.com/kgretzky/pwndrop.git
  728. cd pwndrop/
  729. go build
  730. cd /opt/Staging
  731. echo ""
  732. echo "Installing C2 Concealer"
  733. echo ""
  734. sleep 2
  735. git clone https://github.com/FortyNorthSecurity/C2concealer.git
  736. git clone https://github.com/rvrsh3ll/FindFrontableDomains.git
  737. git clone https://github.com/threatexpress/domainhunter.git
  738. git clone https://github.com/mgeeky/RedWarden.git
  739. git clone https://github.com/Flangvik/AzureC2Relay.git
  740. git clone https://github.com/FSecureLABS/C3.git
  741. git clone https://github.com/mdsecactivebreach/Chameleon.git
  742. git clone https://github.com/0xZDH/redirect.rules.git
  743. echo "Cloning Log Aggregation Resources"
  744. cd ../
  745. mkdir Log_Aggregation
  746. cd Log_Aggregation
  747. git clone https://github.com/outflanknl/RedELK.git
  748. git clone https://github.com/SecurityRiskAdvisors/RedTeamSIEM.git
  749. echo "Cloning Situational Awareness Resources"
  750. cd /home/pi/Repo/Situational_Awareness
  751. mkdir Host_Situtational_Awareness
  752. cd Host_Situational_Awareness
  753. git clone https://github.com/EncodeGroup/AggressiveProxy.git
  754. git clone https://github.com/EncodeGroup/Gopher.git
  755. git clone https://github.com/PwnDexter/SharpEDRChecker.git
  756. git clone https://github.com/trustedsec/CS-Situational-Awareness-BOF.git
  757. git clone https://github.com/GhostPack/Seatbelt.git
  758. git clone https://github.com/vivami/SauronEye.git
  759. git clone https://github.com/mitchmoser/SharpShares.git
  760. git clone https://github.com/Flangvik/SharpAppLocker/.git
  761. git clone https://github.com/rvrsh3ll/SharpPrinter.git
  762. cd ../
  763. mkdir Domain_Situational_Awareness
  764. cd Domain_Situational_Awareness
  765. git clone https://github.com/FuzzySecurity/StandIn.git
  766. git clone https://github.com/outflanknl/Recon-AD.git
  767. git clone https://github.com/BloodHoundAD/BloodHound.git
  768. git clone https://github.com/GhostPack/PSPKIAudit.git
  769. git clone https://github.com/tevora-threat/SharpView.git
  770. git clone https://github.com/GhostPack/Rubeus.git
  771. git clone https://github.com/l0ss/Grouper.git
  772. git clone https://github.com/improsec/ImproHound.git
  773. git clone https://github.com/adrecon/ADRecon.git
  774. git clone https://github.com/bats3c/ADCSPwn.git
  775. cd /home/pi/Repo/Credential_Dumping/
  776. git clone https://github.com/gentilkiwi/mimikatz.git
  777. git clone https://github.com/outflanknl/Dumpert.git
  778. git clone https://github.com/swisskyrepo/SharpLAPS.git
  779. git clone https://github.com/GhostPack/SharpDPAPI.git
  780. git clone https://github.com/GhostPack/KeeThief.git
  781. git clone https://github.com/GhostPack/SafetyKatz.git
  782. git clone https://github.com/Barbarisch/forkatz.git
  783. git clone https://github.com/RedCursorSecurityConsulting/PPLKiller.git
  784. git clone https://github.com/AlessandroZ/LaZagne.git
  785. git clone https://github.com/hoangprod/AndrewSpecial.git
  786. git clone https://github.com/outflanknl/Net-GPPPassword.git
  787. git clone https://github.com/djhohnstein/SharpChromium.git
  788. git clone https://github.com/rxwx/chlonium.git
  789. git clone https://github.com/chrismaddalena/SharpCloud.git
  790. git clone https://github.com/skelsec/pypykatz.git
  791. git clone https://github.com/helpsystems/nanodump.git
  792. echo "Cloning Privilege Escallation Resources"
  793. cd /home/pi/Repo/Privilege_Escallation
  794. git clone https://github.com/rsmudge/ElevateKit.git
  795. git clone https://github.com/rasta-mouse/Watson.git
  796. git clone https://github.com/GhostPack/SharpUp.git
  797. git clone https://github.com/hlldz/dazzleUP.git
  798. git clone https://github.com/carlospolop/PEASS-ng.git
  799. git clone https://github.com/CCob/SweetPotato.git
  800. git clone https://github.com/S3cur3Th1sSh1t/MultiPotato.git
  801. echo "Cloning Defense Evasion Resources"
  802. cd /home/pi/Repo/Defense_Evasion
  803. git clone https://github.com/hlldz/RefleXXion.git
  804. git clone https://github.com/wavestone-cdt/EDRSandblast.git
  805. git clone https://github.com/APTortellini/unDefender.git
  806. git clone https://github.com/Yaxser/Backstab.git
  807. git clone https://github.com/boku7/spawn.git
  808. git clone https://github.com/CCob/BOF.NET.git
  809. git clone https://github.com/Flangvik/NetLoader.git
  810. git clone https://github.com/outflanknl/FindObjects-BOF.git
  811. git clone https://github.com/GetRektBoy724/SharpUnhooker.git
  812. git clone https://github.com/bats3c/EvtMute.git
  813. git clone https://github.com/xforcered/InlineExecute-Assembly.git
  814. git clone https://github.com/hlldz/Phant0m.git
  815. git clone https://github.com/CCob/SharpBlock.git
  816. git clone https://github.com/Kharos102/NtdllUnpatcher.git
  817. git clone https://github.com/bats3c/DarkLoadLibrary.git
  818. git clone https://github.com/Soledge/BlockEtw.git
  819. git clone https://github.com/mdsecactivebreach/firewalker.git
  820. git clone https://github.com/Cerbersec/KillDefenderBOF.git
  821. echo "Cloning Social Engineering Resources"
  822. cd /home/pi/Social_Engineering
  823. git clone https://github.com/trustedsec/social-engineer-toolkit.git
  824. git clone https://github.com/bhdresh/SocialEngineeringPayloads.git
  825. echo "Cloning Phishing Resources"
  826. cd /home/pi/Phishing
  827. git clone https://github.com/ryhanson/phishery.git
  828. git clone https://github.com/kgretzky/evilginx2.git
  829. git clone https://github.com/fireeye/PwnAuth.git
  830. git clone https://github.com/drk1wi/Modlishka.git
  831. git clone https://github.com/securestate/king-phisher.git
  832. git clone https://github.com/Raikia/FiercePhish.git
  833. git clone https://github.com/fireeye/ReelPhish.git
  834. git clone https://github.com/gophish/gophish.git
  835. git clone https://github.com/ustayready/CredSniper.git
  836. git clone https://github.com/pentestgeek/phishing-frenzy.git
  837. git clone https://github.com/L4bF0x/PhishingPretexts.git
  838. echo "Cloning Persistence Resources"
  839. cd /home/pi/Repo/Persistence
  840. git clone https://github.com/0xthirteen/SharpStay.git
  841. git clone https://github.com/fireeye/SharPersist.git
  842. git clone https://github.com/outflanknl/SharpHide.git
  843. git clone https://github.com/Ben0xA/DoUCMe.git
  844. git clone https://github.com/nccgroup/ABPTTS.git
  845. git clone https://github.com/blackarrowsec/pivotnacci.git
  846. git clone https://github.com/sensepost/reGeorg.git
  847. git clone https://github.com/HarmJ0y/DAMP.git
  848. git clone https://github.com/0x09AL/IIS-Raid.git
  849. git clone https://github.com/antonioCoco/SharPyShell.git
  850. echo "Cloning Lateral Movement Resources"
  851. cd /home/pi/Repo/Lateral_Movement
  852. git clone https://github.com/RiccardoAncarani/LiquidSnake.git
  853. git clone https://github.com/NetSPI/PowerUpSQL.git
  854. git clone https://github.com/0xthirteen/SharpRDP.git
  855. git clone https://github.com/0xthirteen/MoveKit.git
  856. git clone https://github.com/juliourena/SharpNoPSExec.git
  857. git clone https://github.com/lgandx/Responder.git
  858. git clone https://github.com/dirkjanm/mitm6.git
  859. git clone https://github.com/SecureAuthCorp/impacket.git
  860. git clone https://github.com/mdsecactivebreach/Farmer.git
  861. git clone https://github.com/FortyNorthSecurity/CIMplant.git
  862. git clone https://github.com/Mr-Un1k0d3r/PowerLessShell.git
  863. git clone https://github.com/FSecureLABS/SharpGPOAbuse.git
  864. git clone https://github.com/ropnop/kerbrute.git
  865. git clone https://github.com/blackarrowsec/mssqlproxy.git
  866. git clone https://github.com/Kevin-Robertson/Invoke-TheHash.git
  867. git clone https://github.com/Kevin-Robertson/InveighZero.git
  868. git clone https://github.com/jnqpblc/SharpSpray/git
  869. git clone https://github.com/byt3bl33d3r/CrackMapExec.git
  870. git clone https://github.com/pkb1s/SharpAllowedToAct.git
  871. git clone https://github.com/bohops/SharpRDPHijack.git
  872. git clone https://github.com/klezVirus/CheeseTools.git
  873. git clone https://github.com/iomoath/SharpSpray.git
  874. git clone https://github.com/BloodHoundAD/SharpHound.git
  875. git clone https://github.com/PowerShellMafia/PowerSploit.git
  876. git clone https://github.com/NetSPI/PowerUpSQL.git
  877. git clone https://github.com/DanMcInerney/icebreaker.git
  878. git clone https://github.com/JavelinNetworks/HoneypotBuster.git
  879. echo "Cloning Exfiltration Resources"
  880. cd /home/pi/Repo/Exfiltration
  881. git clone https://github.com/Flangvik/SharpExfiltrate.git
  882. git clone https://github.com/Arno0x/DNSExfiltrator.git
  883. git clone https://github.com/FortyNorthSecurity/Egress-Assess.git
  884. echo "Cloning Cloud Resources"
  885. cd /home/pi/Repo/Cloud
  886. mkdir AWS
  887. git clone https://github.com/RhinoSecurityLabs/pacu.git
  888. git clone https://github.com/duo-labs/cloudmapper.git
  889. git clone https://github.com/andresriancho/enumerate-iam.git
  890. git clone https://github.com/jordanpotti/AWSBucketDump.git
  891. cd ../
  892. mkdir Azure
  893. cd Azure
  894. git clone https://github.com/fox-it/adconnectdump.git
  895. git clone https://github.com/Azure/Stormspotter.git
  896. git clone https://github.com/dirkjanm/ROADtools.git
  897. git clone https://github.com/NetSPI/MicroBurst.git
  898. git clone https://github.com/Gerenios/AADInternals.git
  899. echo "Cloning Hak5 Implant Resources"
  900. cd /home/pi/Repo/Hak5_Implants
  901. git clone https://github.com/hak5/omg-payloads.git
  902. git clone https://github.com/hak5/bashbunny-payloads.git
  903. git clone https://github.com/hak5/usbrubberducky-payloads.git
  904. git clone https://github.com/hak5/pineapple-community-packages.git
  905. git clone https://github.com/hak5/pineapple-modules.git
  906. git clone https://github.com/hak5/mk7-docs.git
  907. git clone https://github.com/hak5/keycroc-payloads.git
  908. git clone https://github.com/hak5/sharkjack-payloads.git
  909. git clone https://github.com/hak5/lanturtle-modules.git
  910. git clone https://github.com/hak5/hak5-docs.git
  911. git clone https://github.com/hak5/packetsquirrel-payloads.git
  912. git clone https://github.com/hak5/nano-tetra-modules.git
  913. git clone https://github.com/hak5/signalowl-payloads.git
  914. git clone https://github.com/hak5/plunderbug-scripts.git
  915. echo "Cloning Wireless Resources"
  916. cd /home/pi/Repo/Wireless
  917. git clone https://github.com/derv82/wifite2.git
  918. git clone https://github.com/wifiphisher/wifiphisher.git
  919. git clone https://github.com/sensepost/mana.git
  920. git clone https://github.com/joswr1ght/cowpatty.git
  921. git clone https://github.com/athanstan/EvilTwin_AP_CaptivePortal.git