Skip to content
/ Viper Public
forked from FunnyWolf/Viper

Intranet pentesting tool with webui 开源图形化内网渗透工具

License

Notifications You must be signed in to change notification settings

geekjy/Viper

 
 

Repository files navigation

English | 简体中文

  • Viper is a graphical intranet penetration tool, which modularizes and weaponizes the tactics and technologies commonly used in the process of Intranet penetration
  • Viper integrates basic functions such as bypass anti-virus software, intranet tunnel, file management, command line and so on
  • Viper has integrated 80+ modules, covering Resource Development / Initial Access / Execution / Persistence / Privilege Escalation / Defense Evasion / Credential Access / Discovery / Lateral Movement / Collection and other categories
  • Viper's goal is to help red team engineers improve attack efficiency, simplify operation and reduce technical threshold
  • Viper supports running native msfconsole in browser and multi - person collaboration

image.png


image.png


image.png


image.png


image.png


image.png

Website

Installation manual

Updatelog

✨Click to expand

v1.5.7 20211115

Optimization

  • 'InternetScan' add debug interface
  • Webdelivery currently no longer forces binding of target and payload
  • Functional optimization of Puma and ipgeo
  • front-end interaction optimization
  • Merge Metasploit Framework version 6.1.15

Bugfix

  • Fix the handler exception caused by ipgeo exception
  • Fix the repeated addition of UDP handler after Viper restart

v1.5.6 20211031

New Features

  • Added 'Hander firewall' function
  • Added the module of "Direct windows syscall evasion technique"

Optimization

  • reverse_http(s) when the network is disconnected, the timeout is updated from 21 seconds (Windows default) to 3 seconds
  • The current session does not expire by default and will not exit automatically
  • Merge Metasploit Framework version 6.1.13

Bugfix

  • Repair reverse_tcp failed to connect when 'sessionexpirationtimeout' is 0
  • Fix failure to get default lhost parameter on ui

v1.5.5 20211024

New Features

  • Added CVE-2021-40449 LPE module
  • One click download all Viper logs from WEBUI

Optimization

  • Merged metasploit-framework 6.1.12

Bugfix

  • Fix the port occupancy problem after the socks is removed

v1.5.4 20211017

New Features

  • Added MS17-010 Exploit (CSharp) module

Optimization

  • Merged metasploit-framework 6.1.11

Bugfix

  • Fix duplicate add reverse_http(s) handler failed to deal with session online requests.

v1.5.3 20211010

Optimization

  • Optimize msfconsole user experience
  • Merged metasploit-framework 6.1.10

v1.5.2 20211007

Optimization

  • Login page multilingual support
  • Merged metasploit-framework 6.1.9

v1.5.1 20210926

New Features

  • Added Obtain Internet outbound IP module
  • New search filter for session process list

Optimization

  • Antivirus software display supports English version
  • Optimize the output format of the intranet scanning module
  • Optimize the performance and UI of the Run Module function
  • Merged metasploit-framework 6.1.8 version

Bugfix

  • Fix the problem that the name of antivirus software is not displayed

v1.5.0 20210919

New Features

  • VIPER now support English language

Optimization

  • Optimized the format of session online SMS
  • Merged metasploit-framework 6.1.7 version

Bugfix

  • Fixed the issue that ExitOnSession did not take effect
  • Fix the issue that the bind handler of the exploit module does not take effect

v1.4.2 20210822

New Features

  • Added Session online by SCF (Tencent API Gateway) module

Optimization

  • Use Unix socketpair to replace 127.0.0.1 socketpair to improve performance
  • Optimize the handler function, add HttpHostHeader parameter
  • Block ids check of session
  • Merged metasploit-framework 6.1.5 version

Bugfix

  • Fixed the problem that some module tasks could not be deleted
  • Fixed the issue of channel not being released in MSF
  • Fix the issue of Clone Https certificate certificate length, adapt to the new features of SSLVersion
  • Fix the issue that the session does not respond after the use of Linux intranet routing and command execution due to stream hang

FAQ

Issues

Modules

System architecture diagram

viper.png

Development

Source Code

  • viperjs (Frontend)

https://github.com/FunnyWolf/viperjs

  • viperpython (Backend)

https://github.com/FunnyWolf/viperpython

  • vipermsf (MSFRPC)

https://github.com/FunnyWolf/vipermsf

Thanks

Edward_Snowdeng exp Fnzer0 qingyun00 脸谱 NoobFTW Somd5-小宇 timwhitez ViCrack xiaobei97 yumusb

404StarLink 2.0 - Galaxy

Viper has joined 404Team 404StarLink 2.0 - Galaxy

About

Intranet pentesting tool with webui 开源图形化内网渗透工具

Resources

License

Stars

Watchers

Forks

Packages

No packages published