• Stars
    star
    306
  • Rank 133,489 (Top 3 %)
  • Language
    Shell
  • License
    BSD 3-Clause "New...
  • Created over 7 years ago
  • Updated over 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Post-exploitation framework (and an interactive shell) developed in Bash shell scripting

PWND.SH

pwnd.sh is a post-exploitation framework (and an interactive shell) developed in Bash shell scripting. It aims to be cross-platform (Linux, Mac OS X, Solaris etc.) and with little to no external dependencies.

Slides from SkyDogCon 2016 are available here

Install:

$ cd bin/
$ ./compile_pwnd_sh.sh

This will generate a file called pwnd.sh

$ ls -la pwnd.sh
-rw-r--r--@ 1 ikotler  staff  7823 Oct 19 16:55 pwnd.sh

Now let's get pwnd!

$ source pwnd.sh
Pwnd v1.0.0, Itzik Kotler (@itzikkotler)]
Type `help' to display all the pwnd commands.
Type `help name' to find out more about the pwnd command `name'.

(pwnd)$

Tested:

  • Mac OS X El Captian (10.11.3) using GNU bash, version 3.2.57(1)-release (x86_64-apple-darwin15)
  • Ubuntu 14.04.3 LTS using GNU bash, version 4.3.11(1)-release (x86_64-pc-linux-gnu)
  • Oracle Solaris 11.3 X86 using GNU bash, version 4.1.17(1)-release (i386-pc-solaris2.11)

Features/Bugs:

Found a bug? Have a good idea for improving PWND.SH? Head over to PWND.SH's github page and create a new ticket or fork. If you want to contact us please email: labs (at) safebreach (dot) com.

License:

BSD 3-Clause

More Repositories

1

pinjectra

Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
C++
761
star
2

SirepRAT

Remote Command Execution as SYSTEM on Windows IoT Core (releases available for Python2.7 & Python3)
Python
366
star
3

EDRaser

EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual.
Python
306
star
4

pacdoor

Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File
Python
152
star
5

pyekaboo

Proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable
Python
148
star
6

Back2TheFuture

Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in order to find the patterns.
C
146
star
7

hAFL2

A kAFL based hypervisor fuzzer which fully supports nested VMs
Python
129
star
8

CloudMiner

Execute code using Azure Automation service without getting charged
Python
127
star
9

wd-pretender

Python
113
star
10

SimpleBITSServer

A simple python implementation of a BITS server.
Python
97
star
11

BITSInject

A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as the NT AUTHORITY/SYSTEM account
Python
97
star
12

mkmalwarefrom

Proof-of-concept two-stage dropper generator that uses bits from external sources
Python
96
star
13

spacebin

Spacebin is a proof-of-concept malware that exfiltrates data (from No Direct Internet Access environments) via triggering AV on the endpoint and then communicating back from the AV's cloud component.
Python
85
star
14

CortexVortex

Python
68
star
15

backdoros

backdorOS is an in-memory OS written in Python 2.7 with a built-in in-memory filesystem, hooks for open() calls and imports, Python REPL etc.
Python
65
star
16

aikido_wiper

Python
63
star
17

Spooler

C
57
star
18

DoubleDrive

A fully-undetectable ransomware that utilizes OneDrive to encrypt target files
Python
54
star
19

AltFS

The Alternative Fileless File System
Python
54
star
20

RSFW

Request Smuggling Firewall
C++
43
star
21

HRS

Perl
43
star
22

cachetalk

Proof-of-concept program that is able to read and write arbitrary bits using HTTP server-side caching
Python
36
star
23

BACE

Mapping of Binaries that allows Arbitrary Code Execution
24
star
24

CoWTools

Tools for analyzing Windows containers and break container's isolation
C++
21
star
25

blog-snippets

Repository of Code Snippets from various SafeBreach Blog posts
Python
5
star