The command generator's output format can be either Console or XML, depending what you prefer. Console commands can be executed as: Codecepticon.exe --action obfuscate --module csharp --verbose ...etc
While when using an XML config file, as: Codecepticon.exe --config C:\Your\Path\To\The\File.xml
If you want to deep dive into Codecepticon's functionality, check out this document (https://github.com/Accenture/Codecepticon/blob/main/docs/Functionality.md). For tips you can use, check out this document (https://github.com/Accenture/Codecepticon/blob/main/docs/Tips.md). C# Obfuscating a C# project is simple, simply select the solution you wish to target. Note that a backup of the solution itself will not be taken, and the current one will be the one that will be obfuscated. Make sure that you can independently compile the target project before trying to run Codecepticon against it. VBA/VB6 The VBA obfuscation (https://www.kitploit.com/search/label/Obfuscation) works against source code itself rather than a Microsoft Office document. This means that you cannot pass a doc(x) or xls(x) file to Codecepticon. It will have to be the source code of the module itself (press Alt-F11 and copy the code from there). PowerShell Due to the complexity of PowerShell scripts, along with the freedom it provides in how to write scripts it is challenging to cover all edge cases and ensure that the obfuscated result will be fully functional. Although it's expected for Codecepticon to work fine against simple scripts/functionality, running it against complex ones such as PowerView will not work - this is a work in progress. Obfuscating Command Line Arguments After obfuscating an application or a script, it is very likely that the command line arguments have also been renamed. The solution to this is to use the HTML mapping file to find what the new names are. For example, let's convert the following command line: SharpHound.exe --CollectionMethods DCOnly --OutputDirectory C:\temp\
By searching through the HTML mapping file for each argument, we get:
While when using an XML config file, as: Codecepticon.exe --config C:\Your\Path\To\The\File.xml
If you want to deep dive into Codecepticon's functionality, check out this document (https://github.com/Accenture/Codecepticon/blob/main/docs/Functionality.md). For tips you can use, check out this document (https://github.com/Accenture/Codecepticon/blob/main/docs/Tips.md). C# Obfuscating a C# project is simple, simply select the solution you wish to target. Note that a backup of the solution itself will not be taken, and the current one will be the one that will be obfuscated. Make sure that you can independently compile the target project before trying to run Codecepticon against it. VBA/VB6 The VBA obfuscation (https://www.kitploit.com/search/label/Obfuscation) works against source code itself rather than a Microsoft Office document. This means that you cannot pass a doc(x) or xls(x) file to Codecepticon. It will have to be the source code of the module itself (press Alt-F11 and copy the code from there). PowerShell Due to the complexity of PowerShell scripts, along with the freedom it provides in how to write scripts it is challenging to cover all edge cases and ensure that the obfuscated result will be fully functional. Although it's expected for Codecepticon to work fine against simple scripts/functionality, running it against complex ones such as PowerView will not work - this is a work in progress. Obfuscating Command Line Arguments After obfuscating an application or a script, it is very likely that the command line arguments have also been renamed. The solution to this is to use the HTML mapping file to find what the new names are. For example, let's convert the following command line: SharpHound.exe --CollectionMethods DCOnly --OutputDirectory C:\temp\
By searching through the HTML mapping file for each argument, we get:
And by replacing all strings the result is: ObfuscatedSharpHound.exe --AphylesPiansAsp TurthsTance --AnineWondon C:\temp\
However, some values may exist in more than one category:
However, some values may exist in more than one category:
Therefore it is critical to always test your result in a local environment first. FAQ Why isn't there a compiled version under Releases that I can download? The compiled output includes a lot of dependency DLLs, which due to licensing requirements (https://www.kitploit.com/search/label/Requirements) we can't re-distribute without written consent. Does Codecepticon only work for C# projects that already have a supported profile? No, Codecepticon should work with everything. The profiles are just a bit of extra tweaks that are done to the target project in order to make it more reliable and easier to work with. But as all code is unique, there will be instances where obfuscating a project will end up with an error or two that won't allow it to be compiled or executed. In this case a new profile may be in order - please raise a new issue if this is the case. Same principle applies to PowerShell/VBA code - although those currently have no profiles that come with Codecepticon, it's an easy task to add if some are needed. Can I contribute? For reporting bugs and suggesting new features, please create an issue. For submitting pull requests, please see the Contributions (https://github.com/Accenture/Codecepticon#contributions) section. Troubleshooting I'm using Codecepticon against a C# project, it runs, but afterwards I can't compile the target project. Before running Codecepticon make sure you can compile a clean version of the target project. Very often when this issue appears, it's due to missing dependencies for the target solution rather than Codecepticon. But if it still doesn't compile: Is it a public project? Create an issue and paste the link with as much detail as possible. If the tool is part of SharpCollection, even better. Is it a private project? In the spirit of improving Codecepticon we'll try to provide as much support as possible via screenshots and error/debug messages. But we will not be accessing/running any clean/obfuscated code via private repos etc. Same as above, but it's a PowerShell/VBA script - can you help? I will do my best, but as PowerShell scripts can be VERY complex and the PSParser isn't as advanced as Roslyn for C#, no promises can be made. Same applies for VBA/VB6. I keep getting: "Method not found: 'System.Collections.Immutable.ImmutableArray" You may at some point encounter the following error:
Still trying to get to the bottom of this one, a quick fix is to uninstall and reinstall the System.Collections.Immutable package, from the NuGet Package Manager. Contributions Whether it's a typo, a bug, or a new feature, Codecepticon is very open to contributions as long as we agree on the following: You are OK with the MIT license of this project. Before creating a pull request, create an issue so it could be discussed before doing any work as internal development is not tracked via the public GitHub repository. Otherwise you risk having a pull request rejected if for example we are already working on the same/similar feature, or for any other reason. References / Credits https://blog.xpnsec.com/building-modifying-packing-devops/ https://twitter.com/EmericNasi/status/1460640760928296966 https://github.com/MagicMau/ProceduralNameGenerator https://github.com/uwol/proleap-vb6-parser https://github.com/dwyl/english-words
Download Codecepticon (https://github.com/Accenture/Codecepticon)
Download Codecepticon (https://github.com/Accenture/Codecepticon)
These days we mostly witness website with more of dynamic content than the static content. There are several ways to achieve the mentioned…Continue reading on Medium » (https://roadtooscp.medium.com/hacking-server-using-ssti-4b6e3992baec?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Codecepticon - .NET Application That Allows You To Obfuscate C#, VBA/VB6 (Macros), And PowerShell Source Code
https://blogger.googleusercontent.com/img/a/AVvXsEjHBQ5zx6OlyuNPX1n08DcS5pxivaXSLJjbiM4yQH4H-5j1Tg-eL620aITw7_68mE3bhcR-db2FTvK0pL2QkaCaFmEUEyMa8PFXUJNykCkIX7eiqBob5EPNxwxK-mdOO64zT1TB6KQ0a4aJfBly9Yoo-PkT1ZUk3IAsgbAqHomeiEuwoLIqbcOk6USFAg=s16000 Codecepticon is a .NET application that allows you to obfuscate C#, VBA/VB6 (macros), and PowerShell source code, and is developed for offensive security engagements such as Red/Purple Teams. What separates Codecepticon from other obfuscators is that it targets the source code rather than the compiled executables, and was developed specifically for AV/EDR evasion.
Codecepticon allows you to obfuscate and rewrite code, but also provides features such as rewriting the command line as well. Read This First! Before we begin !
*
This documentation is on how to install and use Codecepticon only. Compilation, usage, and support for tools like Rubeus and SharpHound will not be provided. Refer to each project's repo separately for more information.
*
Codecepticon is actively developed/tested in VS2022, but it should work in VS2019 as well. Any tickets/issues created for VS2019 and below, will not be investigated unless the issue is reproducible in VS2022. So please use the latest and greatest VS2022.
*
The following packages MUST be v3.9.0, as newer versions have the following issue which is still open: dotnet/roslyn#58463
* Microsoft.CodeAnalysis.CSharp.Workspaces
* Microsoft.CodeAnalysis.Workspaces.MSBuild
Codecepticon checks the version of these packages on runtime and will inform you if the version is different to v3.9.0.
*
It cannot be stressed this enough: always test your obfuscated code locally first. PrerequisitesVisual Studio Pro/Community 2022https://blogger.googleusercontent.com/img/a/AVvXsEgagS4oTPnCYENcdVnkDltBSZ6cBGqBXqEk26AMfX1AMTyFjGWsOTvDWMng1q5noOojupcnNLM2SPe0xt9UYXTlYPMwiB4jI62WxF8THvXWDzferXyWB_NE6q0GfAHOpfoTpZOsA_J62BFR5cmmzGAWJfiRhA-5YMadUHpJWZGStW6-fHBBKquZMZMOOg=w640-h324 Roslyn Compilerhttps://blogger.googleusercontent.com/img/a/AVvXsEiMa-NBNxe3NtMIE0MV42VfCfhaps3Q34xC5_3U6b68UyH0X_blZxsu7s-Xbwe-kNNLESzZT3AgJNWI2dxYSIDC0FwKuFEomYdBN0Yocd-xDGpqyrd1HB60G194YjV_ltf99c0lN7Uz3L1yd6xpszNhHzYcdObPnbq8NmjPQQiAd66vrHUYpLDRZOQGJw=w640-h322 Open and CompileOpen Codecepticon, wait until all NuGet packages are downloaded and then build the solution. Using CodecepticonThere are two ways to use Codecepticon, either by putting all arguments in the command line or by passing a single XML configuration file. Due to the high level of supported customisations, It's not recommended manually going through
For tips you can use, check out this document. C#Obfuscating a C# project is simple, simply select the solution you wish to target. Note that a backup of the solution itself will not be taken, and the current one will be the one that will be obfuscated. Make sure that you can independently compile the target project befo[...]
Codecepticon - .NET Application That Allows You To Obfuscate C#, VBA/VB6 (Macros), And PowerShell Source Code
https://blogger.googleusercontent.com/img/a/AVvXsEjHBQ5zx6OlyuNPX1n08DcS5pxivaXSLJjbiM4yQH4H-5j1Tg-eL620aITw7_68mE3bhcR-db2FTvK0pL2QkaCaFmEUEyMa8PFXUJNykCkIX7eiqBob5EPNxwxK-mdOO64zT1TB6KQ0a4aJfBly9Yoo-PkT1ZUk3IAsgbAqHomeiEuwoLIqbcOk6USFAg=s16000 Codecepticon is a .NET application that allows you to obfuscate C#, VBA/VB6 (macros), and PowerShell source code, and is developed for offensive security engagements such as Red/Purple Teams. What separates Codecepticon from other obfuscators is that it targets the source code rather than the compiled executables, and was developed specifically for AV/EDR evasion.
Codecepticon allows you to obfuscate and rewrite code, but also provides features such as rewriting the command line as well. Read This First! Before we begin !
*
This documentation is on how to install and use Codecepticon only. Compilation, usage, and support for tools like Rubeus and SharpHound will not be provided. Refer to each project's repo separately for more information.
*
Codecepticon is actively developed/tested in VS2022, but it should work in VS2019 as well. Any tickets/issues created for VS2019 and below, will not be investigated unless the issue is reproducible in VS2022. So please use the latest and greatest VS2022.
*
The following packages MUST be v3.9.0, as newer versions have the following issue which is still open: dotnet/roslyn#58463
* Microsoft.CodeAnalysis.CSharp.Workspaces
* Microsoft.CodeAnalysis.Workspaces.MSBuild
Codecepticon checks the version of these packages on runtime and will inform you if the version is different to v3.9.0.
*
It cannot be stressed this enough: always test your obfuscated code locally first. PrerequisitesVisual Studio Pro/Community 2022https://blogger.googleusercontent.com/img/a/AVvXsEgagS4oTPnCYENcdVnkDltBSZ6cBGqBXqEk26AMfX1AMTyFjGWsOTvDWMng1q5noOojupcnNLM2SPe0xt9UYXTlYPMwiB4jI62WxF8THvXWDzferXyWB_NE6q0GfAHOpfoTpZOsA_J62BFR5cmmzGAWJfiRhA-5YMadUHpJWZGStW6-fHBBKquZMZMOOg=w640-h324 Roslyn Compilerhttps://blogger.googleusercontent.com/img/a/AVvXsEiMa-NBNxe3NtMIE0MV42VfCfhaps3Q34xC5_3U6b68UyH0X_blZxsu7s-Xbwe-kNNLESzZT3AgJNWI2dxYSIDC0FwKuFEomYdBN0Yocd-xDGpqyrd1HB60G194YjV_ltf99c0lN7Uz3L1yd6xpszNhHzYcdObPnbq8NmjPQQiAd66vrHUYpLDRZOQGJw=w640-h322 Open and CompileOpen Codecepticon, wait until all NuGet packages are downloaded and then build the solution. Using CodecepticonThere are two ways to use Codecepticon, either by putting all arguments in the command line or by passing a single XML configuration file. Due to the high level of supported customisations, It's not recommended manually going through
--helpoutput to try and figure out which parameters to use and how. Use CommandLineGenerator.html and generate your command quickly: https://blogger.googleusercontent.com/img/a/AVvXsEjHBQ5zx6OlyuNPX1n08DcS5pxivaXSLJjbiM4yQH4H-5j1Tg-eL620aITw7_68mE3bhcR-db2FTvK0pL2QkaCaFmEUEyMa8PFXUJNykCkIX7eiqBob5EPNxwxK-mdOO64zT1TB6KQ0a4aJfBly9Yoo-PkT1ZUk3IAsgbAqHomeiEuwoLIqbcOk6USFAg=s16000 The command generator's output format can be either Consoleor XML, depending what you prefer. Console commands can be executed as: Codecepticon.exe --action obfuscate --module csharp --verbose ...etc While when using an XML config file, as: Codecepticon.exe --config C:\Your\Path\To\The\File.xml If you want to deep dive into Codecepticon's functionality, check out this document.For tips you can use, check out this document. C#Obfuscating a C# project is simple, simply select the solution you wish to target. Note that a backup of the solution itself will not be taken, and the current one will be the one that will be obfuscated. Make sure that you can independently compile the target project befo[...]
Hacking Articles Tips Tricks Videos Tutorials
KitPloit - PenTest Tools! Codecepticon - .NET Application That Allows You To Obfuscate C#, VBA/VB6 (Macros), And PowerShell Source Code https://blogger.googleusercontent.com/img/a/AVvXsEjHBQ5zx6OlyuNPX1n08DcS5pxivaXSLJjbiM4yQH4H-5j1Tg-eL620aITw7_68mE3bhcR…
re trying to run Codecepticon against it. VBA/VB6The VBA obfuscation works against source code itself rather than a Microsoft Office document. This means that you cannot pass a
But as all code is unique, there will be instances where obfuscating a project will end up with an error or two that won't allow it to be compiled or executed. In this case a new profile may be in order - please raise a new issue if this is the case.
Same principle applies to PowerShell/VBA code - although those currently have no profiles that come with Codecepticon, it's an easy task to add if some are needed. Can I contribute?For reporting bugs and suggesting new features, please create an issue.
For submitting pull requests, please see the Contributions section. TroubleshootingI'm using Codecepticon against a C# project, it runs, but afterwards I can't compile the target project.Before running Codecepticon make sure you can compile a clean version of the target project. Very often when this issue appears, it's due to missing dependencies for the target solution rather than Codecepticon. But if it still doesn't compile:
* Is it a public project? Create an issue and paste the link with as much detail as possible. If the tool is[...]
doc(x)or xls(x)file to Codecepticon. It will have to be the source code of the module itself (press Alt-F11 and copy the code from there). PowerShellDue to the complexity of PowerShell scripts, along with the freedom it provides in how to write scripts it is challenging to cover all edge cases and ensure that the obfuscated result will be fully functional. Although it's expected for Codecepticon to work fine against simple scripts/functionality, running it against complex ones such as PowerView will not work - this is a work in progress. Obfuscating Command Line ArgumentsAfter obfuscating an application or a script, it is very likely that the command line arguments have also been renamed. The solution to this is to use the HTML mapping file to find what the new names are. For example, let's convert the following command line: SharpHound.exe --CollectionMethods DCOnly --OutputDirectory C:\temp\ By searching through the HTML mapping file for each argument, we get: https://blogger.googleusercontent.com/img/a/AVvXsEiDTm2ofjGHkbYImXfsQM2NkHuO5skV2PiAn3pJCB61DaqLj47l3_wFTefGUyFTLssy-87m0w4fpXYmYjH3ll-x5ne5SlX0wV64I-x8S0ekYc9Th_oY0S3GjFGC0ZiRIVzRZU1ftIOKspK4Yb_0LlfhwEObafZLLklL_CRbQ2FtkWtwg-8nEYvww9gpTg=s16000 https://blogger.googleusercontent.com/img/a/AVvXsEiwMeP40qmRuOR7yKGon19uDtG8_YE4XvixdXjOYnfZxIsPK6zjr09wDHTW21K8avdqVlhKQit6dQ8MpweOBXcWWSMyQKjQJhExyUQGzrpED4fVY1BDo_bMSECD5aNqISKyXtYwtZoklkiW_3spFSduUPf6VW_dayGdP1VslKUloU1HB7i_FB1J6kCBmg=s16000 https://blogger.googleusercontent.com/img/a/AVvXsEgXroY4sju_1AjTU_nBt4uQhFnU3kBBspzZelw_UmM3ihSMvYOyAofS6rG6nDURa-h8u29Zt9YJ9ohLzGSNsAtf6X33Be85nNYGmmWWd1KJtCuKBa57Id3e-P6Vywy1pVbx6P90oZE6xZylZ1fWuttijM3Sb_J1sET3s7hDgTOSCTbdUpnbvwiugpUplQ=s16000 And by replacing all strings the result is: ObfuscatedSharpHound.exe --AphylesPiansAsp TurthsTance --AnineWondon C:\temp\ However, some values may exist in more than one category: https://blogger.googleusercontent.com/img/a/AVvXsEjrCH8LCCArv6gyGWa6btqYIj68jT2zKwlfjNiRbOryJFiroCtqT8qjkmGwHt0w8kvfeOo7vzLpnEdIUrC7eru2ada88pWyqEitGNapm6QNYPRqO9XMebg01gmQ2yCZkti5LKpgTfHYO4wgOs61-WGh9Xe-LGnmbIpxoQ89RtVsPLUHTvastpy7e8lgCg=s16000 Therefore it is critical to always test your result in a local environment first. FAQWhy isn't there a compiled version under Releases that I can download?The compiled output includes a lot of dependency DLLs, which due to licensing requirements we can't re-distribute without written consent. Does Codecepticon only work for C# projects that already have a supported profile?No, Codecepticon should work with everything. The profiles are just a bit of extra tweaks that are done to the target project in order to make it more reliable and easier to work with.But as all code is unique, there will be instances where obfuscating a project will end up with an error or two that won't allow it to be compiled or executed. In this case a new profile may be in order - please raise a new issue if this is the case.
Same principle applies to PowerShell/VBA code - although those currently have no profiles that come with Codecepticon, it's an easy task to add if some are needed. Can I contribute?For reporting bugs and suggesting new features, please create an issue.
For submitting pull requests, please see the Contributions section. TroubleshootingI'm using Codecepticon against a C# project, it runs, but afterwards I can't compile the target project.Before running Codecepticon make sure you can compile a clean version of the target project. Very often when this issue appears, it's due to missing dependencies for the target solution rather than Codecepticon. But if it still doesn't compile:
* Is it a public project? Create an issue and paste the link with as much detail as possible. If the tool is[...]
Hacking Articles Tips Tricks Videos Tutorials
re trying to run Codecepticon against it. VBA/VB6The VBA obfuscation works against source code itself rather than a Microsoft Office document. This means that you cannot pass a doc(x)or xls(x)file to Codecepticon. It will have to be the source code of the…
part of SharpCollection, even better.
* Is it a private project? In the spirit of improving Codecepticon we'll try to provide as much support as possible via screenshots and error/debug messages. But we will not be accessing/running any clean/obfuscated code via private repos etc. Same as above, but it's a PowerShell/VBA script - can you help?I will do my best, but as PowerShell scripts can be VERY complex and the PSParser isn't as advanced as Roslyn for C#, no promises can be made. Same applies for VBA/VB6. I keep getting: "Method not found: 'System.Collections.Immutable.ImmutableArray"You may at some point encounter the following error: https://blogger.googleusercontent.com/img/a/AVvXsEjr5wGIaPNogKNtIzTqpLcuzN7ZkAy4QkcVa0VB3tZEd67lBKkHy4t6tnhnQ2ISqHlxWoeOwOtcpOKFssDP-KtyllM4OGUE2EEOm_bdXON4_13mZRCuNk9wUYIpiEF-2zAkg773VZ1BABBXhpMlN1X62XRQXqFfyzdNymJA1joCCux5asuK_N4nvaLMhg=w640-h388 Still trying to get to the bottom of this one, a quick fix is to uninstall and reinstall the
* You are OK with the MIT license of this project.
* Before creating a pull request, create an issue so it could be discussed before doing any work as internal development is not tracked via the public GitHub repository. Otherwise you risk having a pull request rejected if for example we are already working on the same/similar feature, or for any other reason. References / Credits* https://blog.xpnsec.com/building-modifying-packing-devops/
* https://twitter.com/EmericNasi/status/1460640760928296966
* https://github.com/MagicMau/ProceduralNameGenerator
* https://github.com/uwol/proleap-vb6-parser
* https://github.com/dwyl/english-words Download Codecepticon
* Is it a private project? In the spirit of improving Codecepticon we'll try to provide as much support as possible via screenshots and error/debug messages. But we will not be accessing/running any clean/obfuscated code via private repos etc. Same as above, but it's a PowerShell/VBA script - can you help?I will do my best, but as PowerShell scripts can be VERY complex and the PSParser isn't as advanced as Roslyn for C#, no promises can be made. Same applies for VBA/VB6. I keep getting: "Method not found: 'System.Collections.Immutable.ImmutableArray"You may at some point encounter the following error: https://blogger.googleusercontent.com/img/a/AVvXsEjr5wGIaPNogKNtIzTqpLcuzN7ZkAy4QkcVa0VB3tZEd67lBKkHy4t6tnhnQ2ISqHlxWoeOwOtcpOKFssDP-KtyllM4OGUE2EEOm_bdXON4_13mZRCuNk9wUYIpiEF-2zAkg773VZ1BABBXhpMlN1X62XRQXqFfyzdNymJA1joCCux5asuK_N4nvaLMhg=w640-h388 Still trying to get to the bottom of this one, a quick fix is to uninstall and reinstall the
System.Collections.Immutablepackage, from the NuGet Package Manager. ContributionsWhether it's a typo, a bug, or a new feature, Codecepticon is very open to contributions as long as we agree on the following:* You are OK with the MIT license of this project.
* Before creating a pull request, create an issue so it could be discussed before doing any work as internal development is not tracked via the public GitHub repository. Otherwise you risk having a pull request rejected if for example we are already working on the same/similar feature, or for any other reason. References / Credits* https://blog.xpnsec.com/building-modifying-packing-devops/
* https://twitter.com/EmericNasi/status/1460640760928296966
* https://github.com/MagicMau/ProceduralNameGenerator
* https://github.com/uwol/proleap-vb6-parser
* https://github.com/dwyl/english-words Download Codecepticon
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Pylirt : Python Linux Incident Response Toolkit
Pylirt application, it is aimed to accelerate the incident response processes by collecting information in Linux operating systems.
Features
Information is collected in the following contents.
* /etc/passwd
* cat /etc/group
* cat /etc/sudoers
* lastlog
* cat /var/log/auth.log
* uptime/proc/meminfo
* ps aux
* /etc/resolv.conf
* /etc/hosts
* iptables -L -v -n
* find / -type f -size +512k -exec ls -lh {}/;
* find / -mtime -1 -ls
* ip a
* netstat -nap
* arp -a
* echo $PATH
Installation
git clone https://github.com/anil-yelken/pylirt
cd pylirt
sudo pip3 install paramiko
Usage
The following information should be specified in the cred_list.txt file:
IP|Username|Password
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhApwpWH_wx96l2e3wN3py2swkhJwXRkPPtLwRcY_gZ-jQBuBVMVWwFboe0dUAc0Nwka6oZ26wioXhKHOc13V_XbsDgfhST9HayB6liCSBnaiJIBXz7K3rAoNJTnAtS4IObX87W86ngBtyCT4ZH_tBNjxxdeGsncPglnzHSkT7DQUHbfVasnG8ec5bb/s261/Pylirt1.jpg
sudo python3 plirt.py
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdwOGdPGk0pn5qas8q6cZxGsjb12CAq6NxG8i8h8j14vftEoKSTURq9oyAWawtmB8-N4YstlxwScZee2WWH68BKFWqMy3FbfpqWo_5GExGY-523vmOrg0JS8YK4ljvPkO1GkvZJkmbuUpBPn438VaTBtR7_-MfQXwvl6qAvsMeHyRstb_lNcrdPRM3/s728/Pylirt2.png
Click Here To Download
Pylirt : Python Linux Incident Response Toolkit
Pylirt application, it is aimed to accelerate the incident response processes by collecting information in Linux operating systems.
Features
Information is collected in the following contents.
* /etc/passwd
* cat /etc/group
* cat /etc/sudoers
* lastlog
* cat /var/log/auth.log
* uptime/proc/meminfo
* ps aux
* /etc/resolv.conf
* /etc/hosts
* iptables -L -v -n
* find / -type f -size +512k -exec ls -lh {}/;
* find / -mtime -1 -ls
* ip a
* netstat -nap
* arp -a
* echo $PATH
Installation
git clone https://github.com/anil-yelken/pylirt
cd pylirt
sudo pip3 install paramiko
Usage
The following information should be specified in the cred_list.txt file:
IP|Username|Password
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhApwpWH_wx96l2e3wN3py2swkhJwXRkPPtLwRcY_gZ-jQBuBVMVWwFboe0dUAc0Nwka6oZ26wioXhKHOc13V_XbsDgfhST9HayB6liCSBnaiJIBXz7K3rAoNJTnAtS4IObX87W86ngBtyCT4ZH_tBNjxxdeGsncPglnzHSkT7DQUHbfVasnG8ec5bb/s261/Pylirt1.jpg
sudo python3 plirt.py
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdwOGdPGk0pn5qas8q6cZxGsjb12CAq6NxG8i8h8j14vftEoKSTURq9oyAWawtmB8-N4YstlxwScZee2WWH68BKFWqMy3FbfpqWo_5GExGY-523vmOrg0JS8YK4ljvPkO1GkvZJkmbuUpBPn438VaTBtR7_-MfQXwvl6qAvsMeHyRstb_lNcrdPRM3/s728/Pylirt2.png
Click Here To Download
Getting Started With 5 Bugs part(1)
https://medium.com/@mahmoudkamel_52472/getting-started-with-5-bugs-part-1-c0d9df42e3cf?source=rss------bug_bounty-5
https://medium.com/@mahmoudkamel_52472/getting-started-with-5-bugs-part-1-c0d9df42e3cf?source=rss------bug_bounty-5
In today’s write-up I’m going to explain the first bug of this series to get you started in bug bountiesContinue reading on Medium » (https://medium.com/@mahmoudkamel_52472/getting-started-with-5-bugs-part-1-c0d9df42e3cf?source=rss------bug_bounty-5)