درود به همه ی دوستان
توی این تاپیک OWASP ZCR رو میخوام بهتون معرفی کنم
این ابزار که به زبان پایتون نوشته شده مجموعه ای از شل کدها رو در خودش جا داده که میتونیم اونا رو دستکاری یا کاستومایز کنیم
برای دوستانی که نمیدونن شل کد چیه عرض کنم که :
shellcode : شل کد تکه کدی به زبان اسمبلی هست که کار خاصی را برای ما در اکسپلویت نویسی برنامه ها انجام میده در واقع هدف از اکسپلویت نویسی اجرا شدن شل کد هست
و اینکه این ابزار قابلیت Encode کردن شل کد ها رو به روش های مختلفی داره که باعث میشه انتی ویروس ها قادر به تشخیص کد مخرب ما یا همون شل کد نشن و یه سری APi هم برای برنامه نویس ها قرار داده که توی پروزه هاشون میتونن استفاده کنن
پست بعدی اموزش استفاده از این ابزار در ویندوز هست که در حال اپلود شدن و برای استفاده در لینوکس هم ویدیو خود سازنده رو براتون پیوست میکنم
اسکرین شات از محیط برنامه
شل کدهای موجود در ابزار
کد:
[!] add_admin('username','password')
[+] windows_x86/add_admin/none
[+] windows_x86/add_admin/xor_random
[+] windows_x86/add_admin/add_random
[+] windows_x86/add_admin/sub_random
[+] windows_x86/add_admin/xor_yourvalue
[+] windows_x86/add_admin/inc
[+] windows_x86/add_admin/dec
[+] windows_x86/add_admin/inc_timesyouwant
[+] windows_x86/add_admin/dec_timesyouwant
[+] windows_x86/add_admin/add_yourvalue
[+] windows_x86/add_admin/sub_yourvalue
[!] download_exec('url','filename')
[+] windows_x86/download_exec/none
[+] windows_x86/download_exec/xor_random
[+] windows_x86/download_exec/add_random
[+] windows_x86/download_exec/sub_random
[+] windows_x86/download_exec/xor_yourvalue
[+] windows_x86/download_exec/inc
[+] windows_x86/download_exec/dec
[+] windows_x86/download_exec/inc_timesyouwant
[+] windows_x86/download_exec/dec_timesyouwant
[+] windows_x86/download_exec/add_yourvalue
[+] windows_x86/download_exec/sub_yourvalue
[!] exec('file_to_execute')
[+] windows_x86/exec/none
[+] windows_x86/exec/xor_random
[+] windows_x86/exec/add_random
[+] windows_x86/exec/sub_random
[+] windows_x86/exec/xor_yourvalue
[+] windows_x86/exec/inc
[+] windows_x86/exec/dec
[+] windows_x86/exec/inc_timesyouwant
[+] windows_x86/exec/dec_timesyouwant
[+] windows_x86/exec/add_yourvalue
[+] windows_x86/exec/sub_yourvalue
[!] disable_firewall()
[+] windows_x86/disable_firewall/none
[+] windows_x86/disable_firewall/xor_random
[+] windows_x86/disable_firewall/add_random
[+] windows_x86/disable_firewall/sub_random
[+] windows_x86/disable_firewall/xor_yourvalue
[+] windows_x86/disable_firewall/inc
[+] windows_x86/disable_firewall/dec
[+] windows_x86/disable_firewall/inc_timesyouwant
[+] windows_x86/disable_firewall/dec_timesyouwant
[+] windows_x86/disable_firewall/add_yourvalue
[+] windows_x86/disable_firewall/sub_yourvalue
[!] download_tofile('url','filename')
[+] windows_x86/download_tofile/none
[+] windows_x86/download_tofile/xor_random
[+] windows_x86/download_tofile/add_random
[+] windows_x86/download_tofile/sub_random
[+] windows_x86/download_tofile/xor_yourvalue
[+] windows_x86/download_tofile/inc
[+] windows_x86/download_tofile/dec
[+] windows_x86/download_tofile/inc_timesyouwant
[+] windows_x86/download_tofile/dec_timesyouwant
[+] windows_x86/download_tofile/add_yourvalue
[+] windows_x86/download_tofile/sub_yourvalue
[!] create_file('filename','content')
[+] windows_x86/create_file/none
[+] windows_x86/create_file/xor_random
[+] windows_x86/create_file/add_random
[+] windows_x86/create_file/sub_random
[+] windows_x86/create_file/xor_yourvalue
[+] windows_x86/create_file/inc
[+] windows_x86/create_file/dec
[+] windows_x86/create_file/inc_timesyouwant
[+] windows_x86/create_file/dec_timesyouwant
[+] windows_x86/create_file/add_yourvalue
[+] windows_x86/create_file/sub_yourvalue
[!] dir_create('directory_to_create')
[+] windows_x86/dir_create/none
[+] windows_x86/dir_create/xor_random
[+] windows_x86/dir_create/add_random
[+] windows_x86/dir_create/sub_random
[+] windows_x86/dir_create/xor_yourvalue
[+] windows_x86/dir_create/inc
[+] windows_x86/dir_create/dec
[+] windows_x86/dir_create/inc_timesyouwant
[+] windows_x86/dir_create/dec_timesyouwant
[+] windows_x86/dir_create/add_yourvalue
[+] windows_x86/dir_create/sub_yourvalue
[!] download_execute('download_url','filename','command_to_execute')
[+] linux_x86/download_execute/none
[+] linux_x86/download_execute/xor_random
[+] linux_x86/download_execute/xor_yourvalue
[+] linux_x86/download_execute/add_random
[+] linux_x86/download_execute/add_yourvalue
[+] linux_x86/download_execute/sub_random
[+] linux_x86/download_execute/sub_yourvalue
[+] linux_x86/download_execute/inc
[+] linux_x86/download_execute/inc_timesyouwant
[+] linux_x86/download_execute/dec
[+] linux_x86/download_execute/dec_timesyouwant
[+] linux_x86/download_execute/mix_all
[!] write('file_to_write','content')
[+] linux_x86/write/none
[+] linux_x86/write/xor_random
[+] linux_x86/write/xor_yourvalue
[+] linux_x86/write/add_random
[+] linux_x86/write/add_yourvalue
[+] linux_x86/write/sub_random
[+] linux_x86/write/sub_yourvalue
[+] linux_x86/write/inc
[+] linux_x86/write/inc_timesyouwant
[+] linux_x86/write/dec
[+] linux_x86/write/dec_timesyouwant
[+] linux_x86/write/mix_all
[!] file_create('filename','content')
[+] linux_x86/file_create/none
[+] linux_x86/file_create/xor_random
[+] linux_x86/file_create/xor_yourvalue
[+] linux_x86/file_create/add_random
[+] linux_x86/file_create/add_yourvalue
[+] linux_x86/file_create/sub_random
[+] linux_x86/file_create/sub_yourvalue
[+] linux_x86/file_create/inc
[+] linux_x86/file_create/inc_timesyouwant
[+] linux_x86/file_create/dec
[+] linux_x86/file_create/dec_timesyouwant
[+] linux_x86/file_create/mix_all
[!] dir_create('directory_to_create')
[+] linux_x86/dir_create/none
[+] linux_x86/dir_create/xor_random
[+] linux_x86/dir_create/xor_yourvalue
[+] linux_x86/dir_create/add_random
[+] linux_x86/dir_create/add_yourvalue
[+] linux_x86/dir_create/sub_random
[+] linux_x86/dir_create/sub_yourvalue
[+] linux_x86/dir_create/inc
[+] linux_x86/dir_create/inc_timesyouwant
[+] linux_x86/dir_create/dec
[+] linux_x86/dir_create/dec_timesyouwant
[+] linux_x86/dir_create/mix_all
[!] exec('file_to_execute')
[+] linux_x86/exec/none
[+] linux_x86/exec/xor_random
[+] linux_x86/exec/xor_yourvalue
[+] linux_x86/exec/add_random
[+] linux_x86/exec/add_yourvalue
[+] linux_x86/exec/sub_random
[+] linux_x86/exec/sub_yourvalue
[+] linux_x86/exec/inc
[+] linux_x86/exec/inc_timesyouwant
[+] linux_x86/exec/dec
[+] linux_x86/exec/dec_timesyouwant
[+] linux_x86/exec/mix_all
[!] download('download_url','filename')
[+] linux_x86/download/none
[+] linux_x86/download/xor_random
[+] linux_x86/download/xor_yourvalue
[+] linux_x86/download/add_random
[+] linux_x86/download/add_yourvalue
[+] linux_x86/download/sub_random
[+] linux_x86/download/sub_yourvalue
[+] linux_x86/download/inc
[+] linux_x86/download/inc_timesyouwant
[+] linux_x86/download/dec
[+] linux_x86/download/dec_timesyouwant
[+] linux_x86/download/mix_all
[!] script_executor('name_of_script','name_of_your_script_in_your_pc'
[+] linux_x86/script_executor/none
[+] linux_x86/script_executor/xor_random
[+] linux_x86/script_executor/xor_yourvalue
[+] linux_x86/script_executor/add_random
[+] linux_x86/script_executor/add_yourvalue
[+] linux_x86/script_executor/sub_random
[+] linux_x86/script_executor/sub_yourvalue
[+] linux_x86/script_executor/inc
[+] linux_x86/script_executor/inc_timesyouwant
[+] linux_x86/script_executor/dec
[+] linux_x86/script_executor/dec_timesyouwant
[+] linux_x86/script_executor/mix_all
[!] system('command_to_execute')
[+] linux_x86/system/none
[+] linux_x86/system/xor_random
[+] linux_x86/system/xor_yourvalue
[+] linux_x86/system/add_random
[+] linux_x86/system/add_yourvalue
[+] linux_x86/system/sub_random
[+] linux_x86/system/sub_yourvalue
[+] linux_x86/system/inc
[+] linux_x86/system/inc_timesyouwant
[+] linux_x86/system/dec
[+] linux_x86/system/dec_timesyouwant
[+] linux_x86/system/mix_all
[!] chmod('file_to_perm','perm_number')
[+] linux_x86/chmod/none
[+] linux_x86/chmod/xor_random
[+] linux_x86/chmod/xor_yourvalue
[+] linux_x86/chmod/add_random
[+] linux_x86/chmod/add_yourvalue
[+] linux_x86/chmod/sub_random
[+] linux_x86/chmod/sub_yourvalue
[+] linux_x86/chmod/inc
[+] linux_x86/chmod/inc_timesyouwant
[+] linux_x86/chmod/dec
[+] linux_x86/chmod/dec_timesyouwant
[+] linux_x86/chmod/mix_all
[!] python
[+] python/simple_hex
[+] python/simple_hex_rev
[+] python/simple_base64_rev
[+] python/simple_ascii
[!] javascript
[+] javascript/simple_hex
[+] javascript/base64
[+] javascript/simple_hex_rev
[+] javascript/simple_base64_rev
[+] javascript/simple_ascii
[!] ruby
[+] ruby/simple_hex
[+] ruby/base64
[+] ruby/simple_hex_rev
[+] ruby/base64_rev
[+] ruby/simple_ascii
[!] php
[+] php/simple_hex
[+] php/base64
[+] php/simple_hex_rev
[+] php/base64_rev
[+] php/simple_ascii
[!] perl
[+] perl/simple_hex
[+] perl/base64
[+] perl/simple_hex_rev
[+] perl/simple_base64_rev
[+] perl/simple_ascii
کد:
https://github.com/zscproject/OWASP-ZSC
کد:
api.z3r0d4y.com. http://zsc.z3r0d4y.com/api/ #documention
کد:
https://www.owasp.org/index.php/OWASP_ZSC_Tool_Project
برچسب:
نویسنده: محمد رضا جوادیان