-
Notifications
You must be signed in to change notification settings - Fork 14.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
437ced4
commit 5a94bad
Showing
4,392 changed files
with
982,184 additions
and
2,631 deletions.
The diff you're trying to view is too large. We only load the first 3000 changed files.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,33 @@ | ||
| [*] running method core_negotiate_tlv_encryption | ||
| [*] Negotiating TLV encryption | ||
| [*] RSA key: 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 | ||
| [*] AES key: 0x9b33ccc06e2030223f789d9c1c4235c824d70ecb168f4f172e6aa77775e2a42 | ||
| [*] Encrypted AES key: 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 | ||
| [*] TLV encryption sorted | ||
| [*] sending response packet | ||
| [*] running method core_set_session_guid | ||
| [*] sending response packet | ||
| [*] running method core_enumextcmd | ||
| [*] sending response packet | ||
| [*] running method core_enumextcmd | ||
| [*] sending response packet | ||
| [*] running method core_loadlib | ||
| [*] sending response packet | ||
| [*] running method stdapi_fs_getwd | ||
| [*] sending response packet | ||
| [*] running method stdapi_sys_config_getuid | ||
| [*] sending response packet | ||
| [*] running method stdapi_sys_config_sysinfo | ||
| [*] sending response packet | ||
| [*] running method core_set_uuid | ||
| [*] sending response packet | ||
| [*] running method stdapi_net_config_get_interfaces | ||
| [*] sending response packet | ||
| [*] running method stdapi_net_config_get_routes | ||
| [*] sending response packet | ||
| [*] running method stdapi_sys_config_getenv | ||
| [*] sending response packet | ||
| [*] running method stdapi_sys_config_getenv | ||
| [*] sending response packet | ||
| [*] running method stdapi_sys_config_getenv | ||
| [*] sending response packet |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,23 @@ | ||
| ## Load test modules | ||
| loadpath test/modules | ||
|
|
||
| ## Payload | ||
| use java/meterpreter/reverse_tcp | ||
|
|
||
| ## Set global datastore | ||
| irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
| setg SessionTlvLogging file:/tmp/javameterpreterreverse_tcp_session_tlv_logging20230918-3316-btp0omtxt | ||
|
|
||
| ## Generate command | ||
| generate -o /tmp/child-process-rb-java-meterpreter-reverse-tcp20230918-3316-6tvp8b.jar -f jar AutoVerifySessionTimeout=30 lport=6004 lhost=127.0.0.1 MeterpreterDebugLogging=rpath:/tmp/javameterpreterreverse_tcp_debug_log20230918-3316-45emvutxt spawn=0 | ||
|
|
||
| ## Create listener | ||
| to_handler | ||
|
|
||
| ## Execute command | ||
| java -jar /tmp/child-process-rb-java-meterpreter-reverse-tcp20230918-3316-6tvp8b.jar | ||
|
|
||
|
|
||
| ## Replication commands | ||
| use test/get_env | ||
| run session=4 AddEntropy=true Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,23 @@ | ||
| ## Load test modules | ||
| loadpath test/modules | ||
|
|
||
| ## Payload | ||
| use python/meterpreter_reverse_tcp | ||
|
|
||
| ## Set global datastore | ||
| irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
| setg SessionTlvLogging file:/tmp/pythonmeterpreter_reverse_tcp_session_tlv_logging20230918-3335-gfk80ptxt | ||
|
|
||
| ## Generate command | ||
| generate -o /tmp/child-process-rb-python-meterpreter-reverse-tcp20230918-3335-xbhjca.py -f raw AutoVerifySessionTimeout=30 lport=6009 lhost=127.0.0.1 MeterpreterDebugLogging=rpath:/tmp/pythonmeterpreter_reverse_tcp_debug_log20230918-3335-3hvlhxtxt MeterpreterTryToFork=false PythonMeterpreterDebug=true | ||
|
|
||
| ## Create listener | ||
| to_handler | ||
|
|
||
| ## Execute command | ||
| python /tmp/child-process-rb-python-meterpreter-reverse-tcp20230918-3335-xbhjca.py | ||
|
|
||
|
|
||
| ## Replication commands | ||
| use test/get_env | ||
| run session=10 AddEntropy=true Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,23 @@ | ||
| ## Load test modules | ||
| loadpath test/modules | ||
|
|
||
| ## Payload | ||
| use python/meterpreter_reverse_tcp | ||
|
|
||
| ## Set global datastore | ||
| irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
| setg SessionTlvLogging file:/tmp/pythonmeterpreter_reverse_tcp_session_tlv_logging20230918-3335-t9yu37txt | ||
|
|
||
| ## Generate command | ||
| generate -o /tmp/child-process-rb-python-meterpreter-reverse-tcp20230918-3335-jvoij1.py -f raw AutoVerifySessionTimeout=30 lport=6001 lhost=127.0.0.1 MeterpreterDebugLogging=rpath:/tmp/pythonmeterpreter_reverse_tcp_debug_log20230918-3335-iq5qbtxt MeterpreterTryToFork=false PythonMeterpreterDebug=true | ||
|
|
||
| ## Create listener | ||
| to_handler | ||
|
|
||
| ## Execute command | ||
| python /tmp/child-process-rb-python-meterpreter-reverse-tcp20230918-3335-jvoij1.py | ||
|
|
||
|
|
||
| ## Replication commands | ||
| use test/railgun | ||
| run session=2 AddEntropy=true Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| Final status: | ||
| Process still alive after running test suite | ||
| stdout and stderr: | ||
| file created - but empty |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| { | ||
| "required_lines": [ | ||
|
|
||
| ], | ||
| "known_failures": [ | ||
|
|
||
| ] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,23 @@ | ||
| ## Load test modules | ||
| loadpath test/modules | ||
|
|
||
| ## Payload | ||
| use php/meterpreter_reverse_tcp | ||
|
|
||
| ## Set global datastore | ||
| irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
| setg SessionTlvLogging file:/tmp/phpmeterpreter_reverse_tcp_session_tlv_logging20230918-3783-r1k8x7txt | ||
|
|
||
| ## Generate command | ||
| generate -o /tmp/child-process-rb-php-meterpreter-reverse-tcp20230918-3783-mky3f6.php -f raw AutoVerifySessionTimeout=30 lport=6007 lhost=127.0.0.1 MeterpreterDebugLogging=rpath:/tmp/phpmeterpreter_reverse_tcp_debug_log20230918-3783-c9tv10txt MeterpreterDebugBuild=true | ||
|
|
||
| ## Create listener | ||
| to_handler | ||
|
|
||
| ## Execute command | ||
| php /tmp/child-process-rb-php-meterpreter-reverse-tcp20230918-3783-mky3f6.php | ||
|
|
||
|
|
||
| ## Replication commands | ||
| use test/extapi | ||
| run session=7 AddEntropy=true Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| { | ||
| "required_lines": [ | ||
|
|
||
| ], | ||
| "known_failures": [ | ||
|
|
||
| ] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,88 @@ | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 10, cb 0x7efef4e02b6a, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 13, cb 0x7efef4e02b1d, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 22, cb 0x7efef4e02ac1, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 11, cb 0x7efef4e02a82, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 21, cb 0x7efef4e02a21, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 16, cb 0x7efef4e02919, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 12, cb 0x7efef4e02604, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 23, cb 0x7efef4e025d4, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 4, cb 0x7efef4e019dc, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 2, cb 0x7efef4e023aa, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 6, cb 0x7efef4e02305, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 7, cb 0x7efef4e02278, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 5, cb 0x7efef4e02179, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 8, cb 0x7efef4e020a2, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1, cb 0x7efef4e0203b, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 3, cb 0x7efef4e0248d, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1001, cb 0x7efef4e0b89b, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1004, cb 0x7efef4e08d5b, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1006, cb 0x7efef4e0b84f, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1007, cb 0x7efef4e08e05, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1005, cb 0x7efef4e082f0, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1002, cb 0x7efef4e0b2b0, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1008, cb 0x7efef4e0b25a, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1011, cb 0x7efef4e08ccc, arg 0xf52040 | ||
| [09-18-2023 22:18:20.227s] [tlv.c:498] Registering command 1003, cb 0x7efef4e08d1e, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1009, cb 0x7efef4e0b1d9, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1013, cb 0x7efef4e0b19d, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1014, cb 0x7efef4e0835c, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1016, cb 0x7efef4e08c8f, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1010, cb 0x7efef4e0830b, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1015, cb 0x7efef4e08326, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1026, cb 0x7efef4e0b3e6, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1019, cb 0x7efef4e0998c, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1022, cb 0x7efef4e09c31, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1017, cb 0x7efef4e09e99, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1023, cb 0x7efef4e09eb3, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1018, cb 0x7efef4e09c71, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1021, cb 0x7efef4e09ed0, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1020, cb 0x7efef4e08341, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1024, cb 0x7efef4e0b76c, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1025, cb 0x7efef4e0b751, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1052, cb 0x7efef4e0a753, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1055, cb 0x7efef4e0b557, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1059, cb 0x7efef4e0a833, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1056, cb 0x7efef4e0a8f0, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1071, cb 0x7efef4e0ab6a, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1067, cb 0x7efef4e0b5a2, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1068, cb 0x7efef4e0b698, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1069, cb 0x7efef4e0acad, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1077, cb 0x7efef4e0b7d5, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1071, cb 0x7efef4e0ab6a, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1072, cb 0x7efef4e0ac38, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1070, cb 0x7efef4e0b787, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1095, cb 0x7efef4e082e6, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1118, cb 0x7efef4e10caf, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1119, cb 0x7efef4e0c7eb, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1083, cb 0x7efef4e0afe7, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1112, cb 0x7efef4e10b4a, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1113, cb 0x7efef4e10a5a, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1114, cb 0x7efef4e10aca, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1111, cb 0x7efef4e106e1, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1117, cb 0x7efef4e10555, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1115, cb 0x7efef4e105fb, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [tlv.c:498] Registering command 1116, cb 0x7efef4e10666, arg 0xf52040 | ||
| [09-18-2023 22:18:20.228s] [mettle.c:75] Heartbeat | ||
| [09-18-2023 22:18:20.271s] [tlv.c:525] handler for 16: 0xf54a40 | ||
| [09-18-2023 22:18:20.271s] [tlv.c:566] processing command: 16 id: '84054211915952720906827765479145' | ||
| [09-18-2023 22:18:20.275s] [tlv.c:525] handler for 10: 0xf545e0 | ||
| [09-18-2023 22:18:20.275s] [tlv.c:566] processing command: 10 id: '92539627780563494854875690617657' | ||
| [09-18-2023 22:18:20.278s] [tlv.c:525] handler for 10: 0xf545e0 | ||
| [09-18-2023 22:18:20.278s] [tlv.c:566] processing command: 10 id: '45012086062434206205757312456117' | ||
| [09-18-2023 22:18:20.297s] [tlv.c:525] handler for 1008: 0xf550a0 | ||
| [09-18-2023 22:18:20.297s] [tlv.c:566] processing command: 1008 id: '76753808889974049021934088690308' | ||
| [09-18-2023 22:18:20.298s] [tlv.c:525] handler for 1055: 0xf55e80 | ||
| [09-18-2023 22:18:20.298s] [tlv.c:566] processing command: 1055 id: '32206045924096528061693747690537' | ||
| [09-18-2023 22:18:20.300s] [tlv.c:525] handler for 1059: 0xf55ee0 | ||
| [09-18-2023 22:18:20.300s] [tlv.c:566] processing command: 1059 id: '29470012798833627770025100355547' | ||
| [09-18-2023 22:18:20.302s] [tlv.c:525] handler for 1019: 0xf55ac0 | ||
| [09-18-2023 22:18:20.302s] [tlv.c:566] processing command: 1019 id: '78192964233071201469144837616669' | ||
| [09-18-2023 22:18:20.303s] [stdapi/net/config.c:46] lo: 127.0.0.1/8 | ||
| [09-18-2023 22:18:20.303s] [stdapi/net/config.c:46] lo: ::1 | ||
| [09-18-2023 22:18:20.303s] [stdapi/net/config.c:46] eth0: 10.1.0.26/16 | ||
| [09-18-2023 22:18:20.303s] [stdapi/net/config.c:46] eth0: fe80::20d:3aff:fe31:80ef/64 | ||
| [09-18-2023 22:18:20.303s] [stdapi/net/config.c:46] docker0: 172.17.0.1/16 | ||
| [09-18-2023 22:18:20.306s] [tlv.c:525] handler for 1022: 0xf55b20 | ||
| [09-18-2023 22:18:20.306s] [tlv.c:566] processing command: 1022 id: '73154414362521214869905794094301' | ||
| [09-18-2023 22:18:20.517s] [tlv.c:525] handler for 10: 0xf545e0 | ||
| [09-18-2023 22:18:20.517s] [tlv.c:566] processing command: 10 id: '76593143252119781893237889073622' |
Oops, something went wrong.