From 54a90b2fef1aec8a1a9b68163e646170f58619dd Mon Sep 17 00:00:00 2001 From: Ranma <54248704+cHJlaXpoZXI@users.noreply.github.com> Date: Tue, 2 Jul 2024 15:19:18 +0000 Subject: [PATCH 01/10] Toboggan added --- sources/install/package_web.sh | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/sources/install/package_web.sh b/sources/install/package_web.sh index 51386a330..0e4555821 100644 --- a/sources/install/package_web.sh +++ b/sources/install/package_web.sh @@ -887,6 +887,14 @@ function install_postman() { add-to-list "postman,https://www.postman.com/,API platform for testing APIs" } +function install_toboggan() { + colorecho "Installing Toboggan" + pipx install 'git+https://github.com/n3rada/toboggan.git' + add-history toboggan + add-test-command "toboggan -h" + add-to-list "toboggan,https://github.com/n3rada/toboggan, Toboggan is your go-to tool that wraps your remote command execution into a semi-interactive shell" +} + # Package dedicated to applicative and active web pentest tools function package_web() { set_env @@ -966,6 +974,7 @@ function package_web() { install_jsluice # Extract URLs, paths, secrets, and other interesting data from JavaScript source code install_katana # A next-generation crawling and spidering framework install_postman # Postman - API platform for testing APIs + install_toboggan # Toboggan is a wrapper to change your remote command execution into a semi-interactive shell end_time=$(date +%s) local elapsed_time=$((end_time - start_time)) colorecho "Package web completed in $elapsed_time seconds." From be6eb01a5ba84dd7978aee8e342b1578d04a605f Mon Sep 17 00:00:00 2001 From: Ranma <54248704+cHJlaXpoZXI@users.noreply.github.com> Date: Tue, 2 Jul 2024 15:20:10 +0000 Subject: [PATCH 02/10] Create toboggan history file --- sources/assets/shells/history.d/toboggan | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 sources/assets/shells/history.d/toboggan diff --git a/sources/assets/shells/history.d/toboggan b/sources/assets/shells/history.d/toboggan new file mode 100644 index 000000000..c06932f48 --- /dev/null +++ b/sources/assets/shells/history.d/toboggan @@ -0,0 +1,2 @@ +toboggan -u 'http://$TARGET/webshell.php?cmd' +toboggan -u 'http://$TARGET/webshell.php?cmd' -p 'password'='exegol4thewin' From d852674a19a23c560cbb177b61b7cfa1f601eacd Mon Sep 17 00:00:00 2001 From: Ranma <54248704+cHJlaXpoZXI@users.noreply.github.com> Date: Sun, 13 Oct 2024 12:20:39 +0000 Subject: [PATCH 03/10] Add MitmProxy Tool added in network --- sources/install/package_network.sh | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/sources/install/package_network.sh b/sources/install/package_network.sh index 3cdc5d79c..cf12c1084 100644 --- a/sources/install/package_network.sh +++ b/sources/install/package_network.sh @@ -8,7 +8,7 @@ function install_network_apt_tools() { colorecho "Installing network apt tools" export DEBIAN_FRONTEND=noninteractive fapt wireshark tshark hping3 masscan netdiscover tcpdump iptables traceroute dns2tcp freerdp2-x11 \ - rdesktop xtightvncviewer hydra mariadb-client redis-tools + rdesktop xtightvncviewer hydra mariadb-client redis-tools mitmproxy add-history wireshark add-history tshark @@ -21,6 +21,7 @@ function install_network_apt_tools() { add-history rdesktop add-history hydra add-history xfreerdp + add-history mitmproxy add-test-command "wireshark --help" # Wireshark packet sniffer add-test-command "tshark --version" # Tshark packet sniffer @@ -37,7 +38,8 @@ function install_network_apt_tools() { add-test-command "hydra -h |& grep 'more command line options'" # Login scanner add-test-command "mariadb --version" # Mariadb client add-test-command "redis-cli --version" # Redis protocol - + add-test-command "mitmproxy --help" # MITMProxy + add-to-list "wireshark,https://github.com/wireshark/wireshark,Wireshark is a network protocol analyzer that lets you see what’s happening on your network at a microscopic level." add-to-list "tshark,https://github.com/wireshark/wireshark,TShark is a terminal version of Wireshark." add-to-list "hping3,https://github.com/antirez/hping,A network tool able to send custom TCP/IP packets" @@ -53,6 +55,7 @@ function install_network_apt_tools() { add-to-list "hydra,https://github.com/vanhauser-thc/thc-hydra,Hydra is a parallelized login cracker which supports numerous protocols to attack." add-to-list "mariadb-client,https://github.com/MariaDB/server,MariaDB is a community-developed fork of the MySQL relational database management system. The mariadb-client package includes command-line utilities for interacting with a MariaDB server." add-to-list "redis-tools,https://github.com/antirez/redis-tools,redis-tools is a collection of Redis client utilities including redis-cli and redis-benchmark." + add-to-list "mitmproxy,https://github.com/mitmproxy/mitmproxy,mitmproxy is an interactive SSL/TLS-capable intercepting proxy with a console interface for HTTP/1 HTTP/2 and WebSockets." } function install_proxychains() { From c147f1af01afa21586df298fbc00923c4da9bab3 Mon Sep 17 00:00:00 2001 From: Ranma <54248704+cHJlaXpoZXI@users.noreply.github.com> Date: Sun, 13 Oct 2024 12:25:37 +0000 Subject: [PATCH 04/10] Add mitmproxy history command --- sources/assets/shells/aliases.d/mitmproxy | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 sources/assets/shells/aliases.d/mitmproxy diff --git a/sources/assets/shells/aliases.d/mitmproxy b/sources/assets/shells/aliases.d/mitmproxy new file mode 100644 index 000000000..78d1bf519 --- /dev/null +++ b/sources/assets/shells/aliases.d/mitmproxy @@ -0,0 +1,2 @@ +mitmproxy +mitmproxy --listen-host $LHOST --listen-port $LPORT From bc5fab886427c0707c4155b582b5272c6e13a5b1 Mon Sep 17 00:00:00 2001 From: Ranma <54248704+cHJlaXpoZXI@users.noreply.github.com> Date: Sun, 13 Oct 2024 12:31:36 +0000 Subject: [PATCH 05/10] Remove old PR --- sources/install/package_web.sh | 9 --------- 1 file changed, 9 deletions(-) diff --git a/sources/install/package_web.sh b/sources/install/package_web.sh index 9f156a3bf..2e65ce996 100644 --- a/sources/install/package_web.sh +++ b/sources/install/package_web.sh @@ -896,14 +896,6 @@ function install_postman() { add-to-list "postman,https://www.postman.com/,API platform for testing APIs" } -function install_toboggan() { - colorecho "Installing Toboggan" - pipx install 'git+https://github.com/n3rada/toboggan.git' - add-history toboggan - add-test-command "toboggan -h" - add-to-list "toboggan,https://github.com/n3rada/toboggan, Toboggan is your go-to tool that wraps your remote command execution into a semi-interactive shell" -} - # Package dedicated to applicative and active web pentest tools function package_web() { set_env @@ -983,7 +975,6 @@ function package_web() { install_jsluice # Extract URLs, paths, secrets, and other interesting data from JavaScript source code install_katana # A next-generation crawling and spidering framework install_postman # Postman - API platform for testing APIs - install_toboggan # Toboggan is a wrapper to change your remote command execution into a semi-interactive shell end_time=$(date +%s) local elapsed_time=$((end_time - start_time)) colorecho "Package web completed in $elapsed_time seconds." From 78ffd3df59d42e23c5822fc2aca8d08426de8965 Mon Sep 17 00:00:00 2001 From: Ranma <54248704+cHJlaXpoZXI@users.noreply.github.com> Date: Sun, 13 Oct 2024 12:33:13 +0000 Subject: [PATCH 06/10] Remove old PR --- sources/assets/shells/history.d/toboggan | 2 -- 1 file changed, 2 deletions(-) delete mode 100644 sources/assets/shells/history.d/toboggan diff --git a/sources/assets/shells/history.d/toboggan b/sources/assets/shells/history.d/toboggan deleted file mode 100644 index c06932f48..000000000 --- a/sources/assets/shells/history.d/toboggan +++ /dev/null @@ -1,2 +0,0 @@ -toboggan -u 'http://$TARGET/webshell.php?cmd' -toboggan -u 'http://$TARGET/webshell.php?cmd' -p 'password'='exegol4thewin' From 38cfccca18d95bb1fd2242269123a263cb03d47f Mon Sep 17 00:00:00 2001 From: Ranma <54248704+cHJlaXpoZXI@users.noreply.github.com> Date: Sun, 13 Oct 2024 12:34:12 +0000 Subject: [PATCH 07/10] Change aliases.d to history.d --- sources/assets/shells/aliases.d/mitmproxy | 2 -- 1 file changed, 2 deletions(-) delete mode 100644 sources/assets/shells/aliases.d/mitmproxy diff --git a/sources/assets/shells/aliases.d/mitmproxy b/sources/assets/shells/aliases.d/mitmproxy deleted file mode 100644 index 78d1bf519..000000000 --- a/sources/assets/shells/aliases.d/mitmproxy +++ /dev/null @@ -1,2 +0,0 @@ -mitmproxy -mitmproxy --listen-host $LHOST --listen-port $LPORT From 39ea870b0da68132f9d72d03a12eef82f61b21f5 Mon Sep 17 00:00:00 2001 From: Ranma <54248704+cHJlaXpoZXI@users.noreply.github.com> Date: Sun, 13 Oct 2024 12:34:41 +0000 Subject: [PATCH 08/10] Create mitmproxy history file --- sources/assets/shells/history.d/mitmproxy | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 sources/assets/shells/history.d/mitmproxy diff --git a/sources/assets/shells/history.d/mitmproxy b/sources/assets/shells/history.d/mitmproxy new file mode 100644 index 000000000..78d1bf519 --- /dev/null +++ b/sources/assets/shells/history.d/mitmproxy @@ -0,0 +1,2 @@ +mitmproxy +mitmproxy --listen-host $LHOST --listen-port $LPORT From 6ce3aef95239180509c5ef782816aa3cc4812de8 Mon Sep 17 00:00:00 2001 From: Ranma <54248704+cHJlaXpoZXI@users.noreply.github.com> Date: Fri, 18 Oct 2024 13:12:07 +0000 Subject: [PATCH 09/10] Correct check command --- sources/install/package_network.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sources/install/package_network.sh b/sources/install/package_network.sh index cf12c1084..8a2e04884 100644 --- a/sources/install/package_network.sh +++ b/sources/install/package_network.sh @@ -38,7 +38,7 @@ function install_network_apt_tools() { add-test-command "hydra -h |& grep 'more command line options'" # Login scanner add-test-command "mariadb --version" # Mariadb client add-test-command "redis-cli --version" # Redis protocol - add-test-command "mitmproxy --help" # MITMProxy + add-test-command "mitmproxy --version" # MITMProxy add-to-list "wireshark,https://github.com/wireshark/wireshark,Wireshark is a network protocol analyzer that lets you see what’s happening on your network at a microscopic level." add-to-list "tshark,https://github.com/wireshark/wireshark,TShark is a terminal version of Wireshark." From 6c972f8b8fbc7fad27be56033fb46bc7b7428b5d Mon Sep 17 00:00:00 2001 From: Charlie Bromberg <40902872+ShutdownRepo@users.noreply.github.com> Date: Wed, 23 Oct 2024 22:02:13 +0200 Subject: [PATCH 10/10] Update mitmproxy --- sources/assets/shells/history.d/mitmproxy | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sources/assets/shells/history.d/mitmproxy b/sources/assets/shells/history.d/mitmproxy index 78d1bf519..824f2bbbd 100644 --- a/sources/assets/shells/history.d/mitmproxy +++ b/sources/assets/shells/history.d/mitmproxy @@ -1,2 +1,2 @@ mitmproxy -mitmproxy --listen-host $LHOST --listen-port $LPORT +mitmproxy --listen-host "$LHOST" --listen-port "$LPORT"