diff --git a/myShit/shlockcrack.src b/myShit/shlockcrack.src new file mode 100644 index 0000000..37b42d9 --- /dev/null +++ b/myShit/shlockcrack.src @@ -0,0 +1,44 @@ +metax = include_lib("/lib/metaxploit.so") +if not metax then metax = include_lib(current_path + "/metaexploit.so") +if not metax then exit("
No metaxploit.so found\nAcceptable places: /lib or current directory
") + +g = get_custom_object + +expectedParamCount = 0 + +if not g.currentAdd then + g.currentAdd = params[expectedParamCount] + expectedParamCount += 1 +end if +if not g.port then + g.port = params[expectedParamCount] + expectedParamCount += 1 +end if +if not g.targetMem then + g.targetMem = params[expectedParamCount] + expectedParamCount += 1 +end if +if not g.targetExploit then + g.targetExploit = params[expectedParamCount] + expectedParamCount += 1 +end if + +if not g.netSession then g.netSession = metax.net_use(g.currentAdd, g.port) +if not g.netSession then exit("Couldn't connect to net session") + +overflowResult = g.metLib.overflow(g.targetMem, g.targetExploit) + +if not overflowResult then exit("Not able to exploit this vector") + +if typeof(overflowResult) == "shell" then + overflowResult.start_terminal + +else if typeof(overflowResult) == "computer" then + print("Computer object obtained for " + overflowResult.get_name) + +else if typeof(overflowResult) == "file" then + print("Obtained file object") + +else + print("Erorr: expected shell, computer or file - result: " + overflowResult) +end if diff --git a/myShit/shlockmap.src b/myShit/shlockmap.src new file mode 100644 index 0000000..b12fdfe --- /dev/null +++ b/myShit/shlockmap.src @@ -0,0 +1,29 @@ +metax = include_lib("/lib/metaxploit.so") +if not metax then metax = include_lib(current_path + "/metaexploit.so") +if not metax then exit("
No metaxploit.so found\nAcceptable places: /lib or current directory
") +g = get_custom_object +if not params[0] then exit("No IP address provided") +add = "" +port = 0 +ports = get_router(add).used_ports +for port in ports + print(ports[port].port_number) +end for +if not add.hasIndex(params[0]) then add = params[0] +if params.len > 1 then port = params[1].to_int +netSession = metax.net_use(add, ports[0].port_number) +metLib = netSession.dump_lib +print(metLib.lib_name + " "+ metLib.version +"\nkernel_router.so " + get_router(add).kernel_version) +scanResult = metax.scan(metLib) +for hit in scanResult + scanAdd = metax.scan_address(metLib, hit) + segments = scanAdd.split("Unsafe check: ")[1:] + exploits = [] + for segment in segments + labelStart = segment.indexOf("") + labelEnd = segment.indexOf("") + exploits.push(segment[labelStart + 3: labelEnd]) + end for + print("Memory address " + hit) + print("Vulnerabilities: " + exploits.join(", ")) +end for