God Genesis 是一个纯粹用 Python3 编码的 C2 服务器,旨在帮助红队和渗透测试人员。目前它只支持 TCP 反向 shell,但请稍等,它是一个 FUD,可以从任何目标 WINDOWS 机器为你提供管理 shell。
===================================================================================================
BASIC COMMANDS:
===================================================================================================
help --> Show This Options
terminate --> Exit The Shell Completely
exit --> Shell Works In Background And Prompted To C2 Server
clear --> Clear The Previous Outputs
===================================================================================================
SYSTEM COMMANDS:
===================================================================================================
cd --> Change Directory
pwd --> Prints Current Working Directory
mkdir *dir_name* --> Creates A Directory Mentioned
rm *dir_name* --> Deletes A Directoty Mentioned
powershell [command] --> Run Powershell Command
start *exe_name* --> Start Any Executable By Giving The Executable Name
===================================================================================================
INFORMATION GATHERING COMMANDS:
===================================================================================================
env --> Checks Enviornment Variables
sc --> Lists All Services Running
user --> Current User
info --> Gives Us All Information About Compromised System
av --> Lists All antivirus In Compromised System
===================================================================================================
DATA EXFILTRATION COMMANDS:
===================================================================================================
download *file_name* --> Download Files From Compromised System
upload *file_name* --> Uploads Files To Victim Pc
===================================================================================================
EXPLOITATION COMMANDS:
===================================================================================================
persistence1 --> Persistance Via Method 1
persistence2 --> Persistance Via Method 2
get --> Download Files From Any URL
chrome_pass_dump --> Dump All Stored Passwords From Chrome Bowser
wifi_password --> Dump Passwords Of All Saved Wifi Networks
keylogger --> Starts Key Logging Via Keylogger
dump_keylogger --> Dump All Logs Done By Keylogger
python_install --> Installs Python In Victim Pc Without UI
1. Payload.py是一个完全不可检测的(FUD)使用你自己的技术来制作exe文件。(最好的结果是用其他合法的应用程序来掩盖)
2. 能够在任何windows系统上进行权限升级
3. 欺诈性键盘记录器
4. 2种实现持久性的方法
5. 侦察自动化,节省你的时间
安装:
//github.com/SaumyajeetDas/GodGenesis.git :
pip3 install -r requirements.txt
python3 c2c.py
项目地址
https://github.com/SaumyajeetDas/GodGenesis
原文始发于微信公众号(Khan安全攻防实验室):基于 Python3 的 C2 服务器
免责声明:文章中涉及的程序(方法)可能带有攻击性,仅供安全研究与教学之用,读者将其信息做其他用途,由读者承担全部法律及连带责任,本站不承担任何法律及连带责任;如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截,联系方式见首页),望知悉。
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论