saumyajeetdas/godgenesisPython3 기반 C2 서버로, 레드 팀원의 삶을 조금 더 편리하게 만들어 줍니다. 페이로드는 알려진 모든 안티바이러스 및 엔드포인트를 우회할 수 있습니다.
God Genesis는 Red Teamer와 침투 테스터를 돕기 위해 순수 Python3로 코딩된 C2 서버입니다. 현재는 TCP 리버스 셸만 지원하지만 잠깐만요, FUD이며 모든 대상 WINDOWS 머신에서 관리자 셸을 제공할 수 있습니다.
지원하는 명령 목록:-
===================================================================================================
BASIC COMMANDS:
===================================================================================================
help --> Show This Options
terminate --> Exit The Shell Completely
exit --> Shell Works In Background And Prompted To C2 Server
clear --> Clear The Previous Outputs
===================================================================================================
SYSTEM COMMANDS:
===================================================================================================
cd --> Change Directory
pwd --> Prints Current Working Directory
mkdir *dir_name* --> Creates A Directory Mentioned
rm *dir_name* --> Deletes A Directoty Mentioned
powershell [command] --> Run Powershell Command
start *exe_name* --> Start Any Executable By Giving The Executable Name
===================================================================================================
INFORMATION GATHERING COMMANDS:
===================================================================================================
env --> Checks Enviornment Variables
sc --> Lists All Services Running
user --> Current User
info --> Gives Us All Information About Compromised System
av --> Lists All antivirus In Compromised System
===================================================================================================
DATA EXFILTRATION COMMANDS:
===================================================================================================
download *file_name* --> Download Files From Compromised System
upload *file_name* --> Uploads Files To Victim Pc
===================================================================================================
EXPLOITATION COMMANDS:
===================================================================================================
persistence1 --> Persistance Via Method 1
persistence2 --> Persistance Via Method 2
get --> Download Files From Any URL
chrome_pass_dump --> Dump All Stored Passwords From Chrome Bowser
wifi_password --> Dump Passwords Of All Saved Wifi Networks
keylogger --> Starts Key Logging Via Keylogger
dump_keylogger --> Dump All Logs Done By Keylogger
python_install --> Installs Python In Victim Pc Without UI
자세한 내용을 보려면 비디오를 확인하세요.
1. The Payload.py is a FULLY UNDETECTABLE(FUD) use your own techniques for making an exe file. (Best Result When Backdoored With Some Other Legitimate Applictions)
2. Able to perform privilege escalation on any windows systems.
3. Fud keylogger
4. 2 ways of achieving persistance
5. Recon automation to save your time.
도구 사용 방법:
git clone https://github.com/SaumyajeetDas/GodGenesis.git
pip3 install -r requirements.txt
python3 c2c.py
Suman Kumar Chakraborty님이 Fud 키로거, WiFi 비밀번호 추출 및 Chrome 비밀번호 덤퍼 모듈을 코딩하여 프레임워크에 기여했다는 점을 언급할 가치가 있습니다.