Compare commits
10 Commits
44b1657542
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
209db74ac6 | ||
|
|
a0a00b09d4 | ||
|
|
d4e1913fd5 | ||
|
|
6b69855372 | ||
|
|
5e68391057 | ||
|
|
b26239bda1 | ||
|
|
8b92c52f95 | ||
|
|
dc46a26134 | ||
|
|
e35eaa3ad2 | ||
|
|
371599919e |
1
.gitattributes
vendored
Normal file
1
.gitattributes
vendored
Normal file
@@ -0,0 +1 @@
|
|||||||
|
*.src linguist-language=lua
|
||||||
Submodule CelestialCorp-Apps deleted from 2b64bed7c0
46
myShit/betterDec.src
Normal file
46
myShit/betterDec.src
Normal file
@@ -0,0 +1,46 @@
|
|||||||
|
homePW = #envar homePW
|
||||||
|
|
||||||
|
myShell = get_shell("root", homePW)
|
||||||
|
myComputer = myShell.host_computer
|
||||||
|
|
||||||
|
crypto = include_lib("/lib/crypto.so")
|
||||||
|
if not crypto then exit("<center><color=red>There is no crypto.so in you /lib\n</color></center>")
|
||||||
|
|
||||||
|
g = get_custom_object
|
||||||
|
|
||||||
|
passFile = user_input("Path to encrypted file: \n")
|
||||||
|
fullString = myComputer.File(passFile).get_content
|
||||||
|
lines = fullString.split(char(10))
|
||||||
|
|
||||||
|
userNames = []
|
||||||
|
hashes = []
|
||||||
|
passes = []
|
||||||
|
|
||||||
|
for line in lines
|
||||||
|
line = line.trim
|
||||||
|
if line == "" then continue
|
||||||
|
parts = line.split(":")
|
||||||
|
if parts.len < 2 then continue
|
||||||
|
userNames.push(parts[0])
|
||||||
|
hashes.push(parts[1])
|
||||||
|
end for
|
||||||
|
|
||||||
|
for entry in hashes
|
||||||
|
if g.hashTable.hasIndex(hashes[entry]) then
|
||||||
|
passes.push(hashes[entry])
|
||||||
|
continue
|
||||||
|
end if
|
||||||
|
passes.push(entry)
|
||||||
|
end for
|
||||||
|
|
||||||
|
if passes.len > 0 then
|
||||||
|
for line in passes
|
||||||
|
passes.replace([line], crypto.decipher(line))
|
||||||
|
g.hashTable.push(passes[line])
|
||||||
|
end for
|
||||||
|
end if
|
||||||
|
|
||||||
|
for line in userNames
|
||||||
|
if not passes[indexOf(line)] then passes.indexOf(line) = "|no password found|"
|
||||||
|
print(userNames[indexOf(line)] + " has the password " + passes[indexOf(line)])
|
||||||
|
end for
|
||||||
44
myShit/shlockcrack.src
Normal file
44
myShit/shlockcrack.src
Normal file
@@ -0,0 +1,44 @@
|
|||||||
|
metax = include_lib("/lib/metaxploit.so")
|
||||||
|
if not metax then metax = include_lib(current_path + "/metaexploit.so")
|
||||||
|
if not metax then exit("<color=red><b><center>No metaxploit.so found\nAcceptable places: /lib or current directory<center/><b/><color/>")
|
||||||
|
|
||||||
|
g = get_custom_object
|
||||||
|
|
||||||
|
expectedParamCount = 0
|
||||||
|
|
||||||
|
if not g.currentAdd then
|
||||||
|
g.currentAdd = params[expectedParamCount]
|
||||||
|
expectedParamCount += 1
|
||||||
|
end if
|
||||||
|
if not g.port then
|
||||||
|
g.port = params[expectedParamCount]
|
||||||
|
expectedParamCount += 1
|
||||||
|
end if
|
||||||
|
if not g.targetMem then
|
||||||
|
g.targetMem = params[expectedParamCount]
|
||||||
|
expectedParamCount += 1
|
||||||
|
end if
|
||||||
|
if not g.targetExploit then
|
||||||
|
g.targetExploit = params[expectedParamCount]
|
||||||
|
expectedParamCount += 1
|
||||||
|
end if
|
||||||
|
|
||||||
|
if not g.netSession then g.netSession = metax.net_use(g.currentAdd, g.port)
|
||||||
|
if not g.netSession then exit("Couldn't connect to net session")
|
||||||
|
|
||||||
|
overflowResult = g.metLib.overflow(g.targetMem, g.targetExploit)
|
||||||
|
|
||||||
|
if not overflowResult then exit("Not able to exploit this vector")
|
||||||
|
|
||||||
|
if typeof(overflowResult) == "shell" then
|
||||||
|
overflowResult.start_terminal
|
||||||
|
|
||||||
|
else if typeof(overflowResult) == "computer" then
|
||||||
|
print("Computer object obtained for " + overflowResult.get_name)
|
||||||
|
|
||||||
|
else if typeof(overflowResult) == "file" then
|
||||||
|
print("Obtained file object")
|
||||||
|
|
||||||
|
else
|
||||||
|
print("<color=red>Erorr: expected shell, computer or file - result: " + overflowResult)
|
||||||
|
end if
|
||||||
29
myShit/shlockmap.src
Normal file
29
myShit/shlockmap.src
Normal file
@@ -0,0 +1,29 @@
|
|||||||
|
metax = include_lib("/lib/metaxploit.so")
|
||||||
|
if not metax then metax = include_lib(current_path + "/metaexploit.so")
|
||||||
|
if not metax then exit("<color=red><b><center>No metaxploit.so found\nAcceptable places: /lib or current directory<center/><b/><color/>")
|
||||||
|
g = get_custom_object
|
||||||
|
if not params[0] then exit("No IP address provided")
|
||||||
|
add = ""
|
||||||
|
port = 0
|
||||||
|
ports = get_router(add).used_ports
|
||||||
|
for port in ports
|
||||||
|
print(ports[port].port_number)
|
||||||
|
end for
|
||||||
|
if not add.hasIndex(params[0]) then add = params[0]
|
||||||
|
if params.len > 1 then port = params[1].to_int
|
||||||
|
netSession = metax.net_use(add, ports[0].port_number)
|
||||||
|
metLib = netSession.dump_lib
|
||||||
|
print(metLib.lib_name + " "+ metLib.version +"\nkernel_router.so " + get_router(add).kernel_version)
|
||||||
|
scanResult = metax.scan(metLib)
|
||||||
|
for hit in scanResult
|
||||||
|
scanAdd = metax.scan_address(metLib, hit)
|
||||||
|
segments = scanAdd.split("Unsafe check: ")[1:]
|
||||||
|
exploits = []
|
||||||
|
for segment in segments
|
||||||
|
labelStart = segment.indexOf("<b>")
|
||||||
|
labelEnd = segment.indexOf("</b>")
|
||||||
|
exploits.push(segment[labelStart + 3: labelEnd])
|
||||||
|
end for
|
||||||
|
print("Memory address " + hit)
|
||||||
|
print("Vulnerabilities: " + exploits.join(", ") + "\n")
|
||||||
|
end for
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
homePW = #envar homePW
|
|
||||||
doomKey = #envar doomKey
|
|
||||||
|
|
||||||
doomPath = "/root/doom"
|
|
||||||
myShell = get_shell
|
|
||||||
25
myShit/start.src
Normal file
25
myShit/start.src
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
homePW = #envar homePW
|
||||||
|
doomKey = #envar doomKey
|
||||||
|
|
||||||
|
doomPath = "/root/doom"
|
||||||
|
myShell = get_shell("root", homePW)
|
||||||
|
|
||||||
|
if not myShell then
|
||||||
|
exit("<color=red><b>Not able to get root shell...\n</b></color>")
|
||||||
|
else
|
||||||
|
print("<color=green><b>Root shell obtained</b></color>")
|
||||||
|
end if
|
||||||
|
|
||||||
|
filePath = "usr/bin/"
|
||||||
|
extension = ".exe"
|
||||||
|
|
||||||
|
launchSequence = ["Terminal", "Terminal", "Terminal", "Terminal", "AdminMonitor", "FileExplorer", "Mail", "Notepad", "Chat"]
|
||||||
|
argSequence = ["", "doom", "doom", "doom", "", "", "", "", ""]
|
||||||
|
|
||||||
|
if launchSequence.len != argSequence.len then exit(user_input("<center><b><color=red>Launch and args arent the same length...\n</color>Press enter to exit...</b></center>"))
|
||||||
|
|
||||||
|
for lines in launchSequence
|
||||||
|
myShell.launch(filePath + launchSequence[line] + extension, argSequence[line])
|
||||||
|
wait 2
|
||||||
|
end for
|
||||||
|
exit()
|
||||||
Reference in New Issue
Block a user