0x09AL/DropboxC2C

Stars
143
Rank 257,007 (Top 6 %)
Language
Python
License
MIT License
Created over 7 years ago
Updated over 1 year ago

0x09AL/DropboxC2C

0x09AL

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.

DropboxC2C

DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.

DO NOT USE THIS FOR MALICIOUS PURPOSES. THE AUTHOR IS NOT RESPONSIBLE FOR ANY MISUSE OF THIS PROGRAM.

Dropbox-C2C is an old project of mine to use a thirdparty for command and control. Since the guys at Empire implemented dropbox as a C2C i am releasing this.

Structure

main.py - The "server" part which manages all the agents.
agent.py - The "client" part which does what the server tells.

I have removed the keylogging functions so this doesn't get missused.

Requirements

Python 2.7
Libraries
- dropbox
- psutil
- pyinstaller

Installation

1-) Clone the repository.

2-) Modify the API Key on agent.py and main.py # The api key must be created from the dropbox web interface.

3-) Run setup.bat on a Windows Machine. You will get agent.exe which is the "compiled" agent.

4-) Run main.py and run the agent on the compromised server.

Video Coming Soon

Screenshots

Screenshot - 1

Screenshot - 2

Screenshot - 3

Screenshot - 4

RdpThief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

raven

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

IIS-Raid

A native backdoor module for Microsoft IIS (Internet Information Services)

WordSteal

This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.

DNS-Persist

DNS-Persist is a post-exploitation agent which uses DNS for command and control.

CVE-2018-8174-msf

CVE-2018-8174 - VBScript memory corruption exploit.

go-deliver

Go-deliver is a payload delivery tool coded in Go.

CVE-2017-11882-metasploit

This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.

Browser-C2

Post Exploitation agent which uses a browser to do C2 operations.

AzureCLI-Extractor

A tool to extract and abuse access tokens from AzureCLI for bypassing 2FA/MFA.

RsaTokenExtractor

A simple toolkit on extracting RSA Software Tokens from RSA SecureID

my-exploits

My public exploit collection.

0x09al.github.io