خرید بک لینک

درود به همه ی دوستان
توی این تاپیک OWASP ZCR رو میخوام بهتون معرفی کنم
این ابزار که به زبان پایتون نوشته شده مجموعه ای از شل کدها رو در خودش جا داده که میتونیم اونا رو دستکاری یا کاستومایز کنیم
برای دوستانی که نمیدونن شل کد چیه عرض کنم که :
shellcode : شل کد تکه کدی به زبان اسمبلی هست که کار خاصی را برای ما در اکسپلویت نویسی برنامه ها انجام میده در واقع هدف از اکسپلویت نویسی اجرا شدن شل کد هست

و اینکه این ابزار قابلیت Encode کردن شل کد ها رو به روش های مختلفی داره که باعث میشه انتی ویروس ها قادر به تشخیص کد مخرب ما یا همون شل کد نشن و یه سری APi هم برای برنامه نویس ها قرار داده که توی پروزه هاشون میتونن استفاده کنن

پست بعدی اموزش استفاده از این ابزار در ویندوز هست که در حال اپلود شدن و برای استفاده در لینوکس هم ویدیو خود سازنده رو براتون پیوست میکنم
اسکرین شات از محیط برنامه
شل کدهای موجود در ابزار

کد:

[!] add_admin('username','password')
[+] windows_x86/add_admin/none
[+] windows_x86/add_admin/xor_random
[+] windows_x86/add_admin/add_random
[+] windows_x86/add_admin/sub_random
[+] windows_x86/add_admin/xor_yourvalue
[+] windows_x86/add_admin/inc
[+] windows_x86/add_admin/dec
[+] windows_x86/add_admin/inc_timesyouwant
[+] windows_x86/add_admin/dec_timesyouwant
[+] windows_x86/add_admin/add_yourvalue
[+] windows_x86/add_admin/sub_yourvalue

[!] download_exec('url','filename')
[+] windows_x86/download_exec/none
[+] windows_x86/download_exec/xor_random
[+] windows_x86/download_exec/add_random
[+] windows_x86/download_exec/sub_random
[+] windows_x86/download_exec/xor_yourvalue
[+] windows_x86/download_exec/inc
[+] windows_x86/download_exec/dec
[+] windows_x86/download_exec/inc_timesyouwant
[+] windows_x86/download_exec/dec_timesyouwant
[+] windows_x86/download_exec/add_yourvalue
[+] windows_x86/download_exec/sub_yourvalue

[!] exec('file_to_execute')
[+] windows_x86/exec/none
[+] windows_x86/exec/xor_random
[+] windows_x86/exec/add_random
[+] windows_x86/exec/sub_random
[+] windows_x86/exec/xor_yourvalue
[+] windows_x86/exec/inc
[+] windows_x86/exec/dec
[+] windows_x86/exec/inc_timesyouwant
[+] windows_x86/exec/dec_timesyouwant
[+] windows_x86/exec/add_yourvalue
[+] windows_x86/exec/sub_yourvalue

[!] disable_firewall()
[+] windows_x86/disable_firewall/none
[+] windows_x86/disable_firewall/xor_random
[+] windows_x86/disable_firewall/add_random
[+] windows_x86/disable_firewall/sub_random
[+] windows_x86/disable_firewall/xor_yourvalue
[+] windows_x86/disable_firewall/inc
[+] windows_x86/disable_firewall/dec
[+] windows_x86/disable_firewall/inc_timesyouwant
[+] windows_x86/disable_firewall/dec_timesyouwant
[+] windows_x86/disable_firewall/add_yourvalue
[+] windows_x86/disable_firewall/sub_yourvalue

[!] download_tofile('url','filename')
[+] windows_x86/download_tofile/none
[+] windows_x86/download_tofile/xor_random
[+] windows_x86/download_tofile/add_random
[+] windows_x86/download_tofile/sub_random
[+] windows_x86/download_tofile/xor_yourvalue
[+] windows_x86/download_tofile/inc
[+] windows_x86/download_tofile/dec
[+] windows_x86/download_tofile/inc_timesyouwant
[+] windows_x86/download_tofile/dec_timesyouwant
[+] windows_x86/download_tofile/add_yourvalue
[+] windows_x86/download_tofile/sub_yourvalue

[!] create_file('filename','content')
[+] windows_x86/create_file/none
[+] windows_x86/create_file/xor_random
[+] windows_x86/create_file/add_random
[+] windows_x86/create_file/sub_random
[+] windows_x86/create_file/xor_yourvalue
[+] windows_x86/create_file/inc
[+] windows_x86/create_file/dec
[+] windows_x86/create_file/inc_timesyouwant
[+] windows_x86/create_file/dec_timesyouwant
[+] windows_x86/create_file/add_yourvalue
[+] windows_x86/create_file/sub_yourvalue

[!] dir_create('directory_to_create')
[+] windows_x86/dir_create/none
[+] windows_x86/dir_create/xor_random
[+] windows_x86/dir_create/add_random
[+] windows_x86/dir_create/sub_random
[+] windows_x86/dir_create/xor_yourvalue
[+] windows_x86/dir_create/inc
[+] windows_x86/dir_create/dec
[+] windows_x86/dir_create/inc_timesyouwant
[+] windows_x86/dir_create/dec_timesyouwant
[+] windows_x86/dir_create/add_yourvalue
[+] windows_x86/dir_create/sub_yourvalue

[!] download_execute('download_url','filename','command_to_execute')
[+] linux_x86/download_execute/none
[+] linux_x86/download_execute/xor_random
[+] linux_x86/download_execute/xor_yourvalue
[+] linux_x86/download_execute/add_random
[+] linux_x86/download_execute/add_yourvalue
[+] linux_x86/download_execute/sub_random
[+] linux_x86/download_execute/sub_yourvalue
[+] linux_x86/download_execute/inc
[+] linux_x86/download_execute/inc_timesyouwant
[+] linux_x86/download_execute/dec
[+] linux_x86/download_execute/dec_timesyouwant
[+] linux_x86/download_execute/mix_all

[!] write('file_to_write','content')
[+] linux_x86/write/none
[+] linux_x86/write/xor_random
[+] linux_x86/write/xor_yourvalue
[+] linux_x86/write/add_random
[+] linux_x86/write/add_yourvalue
[+] linux_x86/write/sub_random
[+] linux_x86/write/sub_yourvalue
[+] linux_x86/write/inc
[+] linux_x86/write/inc_timesyouwant
[+] linux_x86/write/dec
[+] linux_x86/write/dec_timesyouwant
[+] linux_x86/write/mix_all

[!] file_create('filename','content')
[+] linux_x86/file_create/none
[+] linux_x86/file_create/xor_random
[+] linux_x86/file_create/xor_yourvalue
[+] linux_x86/file_create/add_random
[+] linux_x86/file_create/add_yourvalue
[+] linux_x86/file_create/sub_random
[+] linux_x86/file_create/sub_yourvalue
[+] linux_x86/file_create/inc
[+] linux_x86/file_create/inc_timesyouwant
[+] linux_x86/file_create/dec
[+] linux_x86/file_create/dec_timesyouwant
[+] linux_x86/file_create/mix_all

[!] dir_create('directory_to_create')
[+] linux_x86/dir_create/none
[+] linux_x86/dir_create/xor_random
[+] linux_x86/dir_create/xor_yourvalue
[+] linux_x86/dir_create/add_random
[+] linux_x86/dir_create/add_yourvalue
[+] linux_x86/dir_create/sub_random
[+] linux_x86/dir_create/sub_yourvalue
[+] linux_x86/dir_create/inc
[+] linux_x86/dir_create/inc_timesyouwant
[+] linux_x86/dir_create/dec
[+] linux_x86/dir_create/dec_timesyouwant
[+] linux_x86/dir_create/mix_all

[!] exec('file_to_execute')
[+] linux_x86/exec/none
[+] linux_x86/exec/xor_random
[+] linux_x86/exec/xor_yourvalue
[+] linux_x86/exec/add_random
[+] linux_x86/exec/add_yourvalue
[+] linux_x86/exec/sub_random
[+] linux_x86/exec/sub_yourvalue
[+] linux_x86/exec/inc
[+] linux_x86/exec/inc_timesyouwant
[+] linux_x86/exec/dec
[+] linux_x86/exec/dec_timesyouwant
[+] linux_x86/exec/mix_all

[!] download('download_url','filename')
[+] linux_x86/download/none
[+] linux_x86/download/xor_random
[+] linux_x86/download/xor_yourvalue
[+] linux_x86/download/add_random
[+] linux_x86/download/add_yourvalue
[+] linux_x86/download/sub_random
[+] linux_x86/download/sub_yourvalue
[+] linux_x86/download/inc
[+] linux_x86/download/inc_timesyouwant
[+] linux_x86/download/dec
[+] linux_x86/download/dec_timesyouwant
[+] linux_x86/download/mix_all

[!] script_executor('name_of_script','name_of_your_script_in_your_pc'
[+] linux_x86/script_executor/none
[+] linux_x86/script_executor/xor_random
[+] linux_x86/script_executor/xor_yourvalue
[+] linux_x86/script_executor/add_random
[+] linux_x86/script_executor/add_yourvalue
[+] linux_x86/script_executor/sub_random
[+] linux_x86/script_executor/sub_yourvalue
[+] linux_x86/script_executor/inc
[+] linux_x86/script_executor/inc_timesyouwant
[+] linux_x86/script_executor/dec
[+] linux_x86/script_executor/dec_timesyouwant
[+] linux_x86/script_executor/mix_all

[!] system('command_to_execute')
[+] linux_x86/system/none
[+] linux_x86/system/xor_random
[+] linux_x86/system/xor_yourvalue
[+] linux_x86/system/add_random
[+] linux_x86/system/add_yourvalue
[+] linux_x86/system/sub_random
[+] linux_x86/system/sub_yourvalue
[+] linux_x86/system/inc
[+] linux_x86/system/inc_timesyouwant
[+] linux_x86/system/dec
[+] linux_x86/system/dec_timesyouwant
[+] linux_x86/system/mix_all

[!] chmod('file_to_perm','perm_number')
[+] linux_x86/chmod/none
[+] linux_x86/chmod/xor_random
[+] linux_x86/chmod/xor_yourvalue
[+] linux_x86/chmod/add_random
[+] linux_x86/chmod/add_yourvalue
[+] linux_x86/chmod/sub_random
[+] linux_x86/chmod/sub_yourvalue
[+] linux_x86/chmod/inc
[+] linux_x86/chmod/inc_timesyouwant
[+] linux_x86/chmod/dec
[+] linux_x86/chmod/dec_timesyouwant
[+] linux_x86/chmod/mix_all

[!] python
[+] python/simple_hex
[+] python/simple_hex_rev
[+] python/simple_base64_rev
[+] python/simple_ascii


[!] javascript
[+] javascript/simple_hex
[+] javascript/base64
[+] javascript/simple_hex_rev
[+] javascript/simple_base64_rev
[+] javascript/simple_ascii


[!] ruby
[+] ruby/simple_hex
[+] ruby/base64
[+] ruby/simple_hex_rev
[+] ruby/base64_rev
[+] ruby/simple_ascii


[!] php
[+] php/simple_hex
[+] php/base64
[+] php/simple_hex_rev
[+] php/base64_rev
[+] php/simple_ascii


[!] perl
[+] perl/simple_hex
[+] perl/base64
[+] perl/simple_hex_rev
[+] perl/simple_base64_rev
[+] perl/simple_ascii
لینک دانلود OWASP ZCR(ZeroDay Cyber Research Shellcoder)

کد:

https://github.com/zscproject/OWASP-ZSC
API

کد:

api.z3r0d4y.com.
http://zsc.z3r0d4y.com/api/  #documention
OWASP Page

کد:

https://www.owasp.org/index.php/OWASP_ZSC_Tool_Project

برچسب: نویسنده: محمد رضا جوادیان تاريخ: پنجشنبه 28 مرداد 1395 ساعت: 6:42

صفحه بندی