Posts

Showing posts with the label Bash

Armor - Tool Designed To Practise Encrypted Macos Payloads Capable Of Evading Antivirus Scanners

Image
Armor is a unproblematic Bash script designed to exercise encrypted macOS payloads capable of evading antivirus scanners. Below is an example gif of Armor existence used alongside a unproblematic Netcat payload. H5N1 Netcat listener is started on port 4444. The "payload.txt" file is read in addition to shown to incorporate a unproblematic Bash one-liner that, when executed, volition exercise a TCP connector betwixt the target MacBook at the attacker's Netcat listener. Armor is used to encrypt the bash one-liner. Ncat is used to host the decryption cardinal on the attacker's server. When the stager is executed inward the target MacBook (not shown inward the gif), the bash one-liner is decrypted in addition to executed without writing whatever information to the harddrive. Ncat at nowadays terminates the listener afterwards the cardinal has been used. When the Netcat connector is established, the assailant has remote access to the target MacBook. Admittedl...

Reverse Musical Rhythm Cheat Sheet

Image
If you’re lucky plenty to uncovering a ascendence execution vulnerability during a penetration test, pretty shortly after you’ll belike desire an interactive shell. If it’s non possible to add together a novel concern human relationship / SSH telephone substitution / .rhosts file as well as only log in, your side past times side pace is probable to move either trowing dorsum a reverse musical rhythm or binding a musical rhythm to a TCP port. This page deals amongst the former. Your options for creating a contrary musical rhythm are express past times the scripting languages installed on the target organisation – though yous could belike upload a binary programme also if you’re suitably good prepared. The examples shown are tailored to Unix-like systems. Some of the examples below should also spill out Windows if yous role substitute “/bin/sh -i” amongst “cmd.exe”. Each of the methods below is aimed to move a one-liner that yous tin flame copy/paste. As such they’re quite b...