OffensivePipeline

OffensivePipeline permite que você baixe e construa ferramentas C#, aplicando certas modificações para melhorar sua evasão em exercícios de Red Team.
Um uso comum do OffensivePipeline é baixar uma ferramenta de um repositório Git, randomizar certos valores no projeto, compilá-lo, ofuscar o binário resultante e gerar um shellcode.

Features

• Atualmente suporta apenas projetos C# (.Net Framework)
• Permite clonar repositórios Git públicos e privados (você precisará de credenciais :D)
• Permite trabalhar com pastas locais
• Randomiza GUIDs de projetos
• Randomiza informações do aplicativo contidas no AssemblyInfo
• Compila projetos C#
• Ofusca binários gerados
• Gera shellcodes a partir de binários
• Existem 79 ferramentas parametrizadas em modelos YML (nem todas podem funcionar :D)
• Novas ferramentas podem ser adicionadas usando modelos YML
• Deve ser fácil adicionar novos plugins...

O que há de novo na versão 2.0

• Reescrita de código quase completa (novos bugs?)
• Clonagem de repositórios privados possível (autenticação via authToken do GitHub)
• Possibilidade de copiar uma pasta local em vez de clonar de um repositório remoto
• Novo módulo para gerar shellcodes com Donut
• Novo módulo para randomizar GUIDs de aplicativos
• Novo módulo para randomizar o AssemblyInfo de cada aplicativo
• 60 novas ferramentas adicionadas

Exemplos

• Listar todas as ferramentas:``` OffensivePipeline.exe list

- Construir todas as ferramentas:```
OffensivePipeline.exe all

• Construir uma ferramenta``` OffensivePipeline.exe t toolName

- Limpar ferramentas clonadas e de compilação```
OffensivePipeline.exe 

Exemplo de saída```

PS C:\OffensivePipeline> .\OffensivePipeline.exe t rubeus

                                                                                               ooo
                                                                                       .osooooM M
  ___   __  __                _           ____  _            _ _                      +y.     M M
 / _ \ / _|/ _| ___ _ __  ___(_)_   _____|  _ \(_)_ __   ___| (_)_ __   ___           :h  .yoooMoM
| | | | |_| |_ / _ \ '_ \/ __| \ \ / / _ \ |_) | | '_ \ / _ \ | | '_ \ / _ \          oo  oo
| |_| |  _|  _|  __/ | | \__ \ |\ V /  __/  __/| | |_) |  __/ | | | | |  __/          oo  oo
 \___/|_| |_|  \___|_| |_|___/_| \_/ \___|_|   |_| .__/ \___|_|_|_| |_|\___|          oo  oo
                                                 |_|                            MoMoooy.  h:
                                                                                M M     .y+
                                                                                M Mooooso.
                                                                                ooo

                                                                @aetsu
                                                                            v2.0.0

[+] Loading tool: Rubeus Clonnig repository: Rubeus into C:\OffensivePipeline\Git\Rubeus Repository Rubeus cloned into C:\OffensivePipeline\Git\Rubeus

[+] Load RandomGuid module
    Searching GUIDs...
            > C:\OffensivePipeline\Git\Rubeus\Rubeus.sln
            > C:\OffensivePipeline\Git\Rubeus\Rubeus\Rubeus.csproj
            > C:\OffensivePipeline\Git\Rubeus\Rubeus\Properties\AssemblyInfo.cs
    Replacing GUIDs...
            File C:\OffensivePipeline\Git\Rubeus\Rubeus.sln:
                    > Replacing GUID 658C8B7F-3664-4A95-9572-A3E5871DFC06 with 3bd82351-ac9a-4403-b1e7-9660e698d286
                    > Replacing GUID FAE04EC0-301F-11D3-BF4B-00C04F79EFBC with 619876c2-5a8b-4c48-93c3-f87ca520ac5e
                    > Replacing GUID 658c8b7f-3664-4a95-9572-a3e5871dfc06 with 11e0084e-937f-46d7-83b5-38a496bf278a
            [+] No errors!
            File C:\OffensivePipeline\Git\Rubeus\Rubeus\Rubeus.csproj:
                    > Replacing GUID 658C8B7F-3664-4A95-9572-A3E5871DFC06 with 3bd82351-ac9a-4403-b1e7-9660e698d286
                    > Replacing GUID FAE04EC0-301F-11D3-BF4B-00C04F79EFBC with 619876c2-5a8b-4c48-93c3-f87ca520ac5e
                    > Replacing GUID 658c8b7f-3664-4a95-9572-a3e5871dfc06 with 11e0084e-937f-46d7-83b5-38a496bf278a
            [+] No errors!
            File C:\OffensivePipeline\Git\Rubeus\Rubeus\Properties\AssemblyInfo.cs:
                    > Replacing GUID 658C8B7F-3664-4A95-9572-A3E5871DFC06 with 3bd82351-ac9a-4403-b1e7-9660e698d286
                    > Replacing GUID FAE04EC0-301F-11D3-BF4B-00C04F79EFBC with 619876c2-5a8b-4c48-93c3-f87ca520ac5e
                    > Replacing GUID 658c8b7f-3664-4a95-9572-a3e5871dfc06 with 11e0084e-937f-46d7-83b5-38a496bf278a
            [+] No errors!


[+] Load RandomAssemblyInfo module
    Replacing strings in C:\OffensivePipeline\Git\Rubeus\Rubeus\Properties\AssemblyInfo.cs
            [assembly: AssemblyTitle("Rubeus")] -> [assembly: AssemblyTitle("g4ef3fvphre")]
            [assembly: AssemblyDescription("")] -> [assembly: AssemblyDescription("")]
            [assembly: AssemblyConfiguration("")] -> [assembly: AssemblyConfiguration("")]
            [assembly: AssemblyCompany("")] -> [assembly: AssemblyCompany("")]
            [assembly: AssemblyProduct("Rubeus")] -> [assembly: AssemblyProduct("g4ef3fvphre")]
            [assembly: AssemblyCopyright("Copyright ©  2018")] -> [assembly: AssemblyCopyright("Copyright ©  2018")]
            [assembly: AssemblyTrademark("")] -> [assembly: AssemblyTrademark("")]
            [assembly: AssemblyCulture("")] -> [assembly: AssemblyCulture("")]


[+] Load BuildCsharp module
    [+] Checking requirements...
    [*] Downloading nuget.exe from https://dist.nuget.org/win-x86-commandline/latest/nuget.exe
            [+] Download OK - nuget.exe
            [+] Path found - C:\Program Files (x86)\Microsoft Visual Studio\2022\BuildTools\Common7\Tools\VsDevCmd.bat
    Solving dependences with nuget...
    Building solution...
            [+] No errors!
            [+] Output folder: C:\OffensivePipeline\Output\Rubeus_vh00nc50xud


[+] Load ConfuserEx module
    [+] Checking requirements...
    [+] Downloading ConfuserEx from https://github.com/mkaring/ConfuserEx/releases/download/v1.6.0/ConfuserEx-CLI.zip
            [+] Download OK - ConfuserEx
    Confusing...
            [+] No errors!


[+] Load Donut module
    Generating shellcode...

Payload options: Domain: RMM6XFC3 Runtime:v4.0.30319

Raw Payload: C:\OffensivePipeline\Output\Rubeus_vh00nc50xud\ConfuserEx\Donut\Rubeus.bin B64 Payload: C:\OffensivePipeline\Output\Rubeus_vh00nc50xud\ConfuserEx\Donut\Rubeus.bin.b64

            [+] No errors!


[+] Generating Sha256 hashes
            Output file: C:\OffensivePipeline\Output\Rubeus_vh00nc50xud

---

            SUMMARY

• Rubeus - RandomGuid: OK - RandomAssemblyInfo: OK - BuildCsharp: OK - ConfuserEx: OK - Donut: OK

---

## Plugins