Skip to content

WIP: [DON'T MERGE] Laplongejr's experimental scripts

LaplongeJunior a demandé de fusionner laplongejr-experimental vers master

Being unable to play at the moment, I'll script directly in a separated branch then test everything later.
Some of those experimentals scripts got merged to master as the Unified Repo wasn't on master yet, but such additions won't affect the already working scripts
DON'T MERGE AS SAID MODIFICATIONS AREN'T TESTED YET!

Aims from upgrades in the near future:
#27 (tool to gather all useful resources)
Which closes #31 (standard for versioned files)
#41 (extract website's data)
#49 (virtual shell)
#51 (guest de-escalation)
#52 (admin backdoor)
#53 (GH-398 workaround, renamed/anonymous file transfer)
#55 (more secure setup.gs + create/rename user tools)

Also, splitting up file.inc to not include Looka's edit in the same file (to avoid losing it when pushing my local copy)
And cleaning up some oversights in the repo

Repo

  • Clean up the repo (there are still some oversights from the reunification)
  • Import my personal theme for peer review
  • Split file.inc to make sure Lookas's addon don't end lost with file.inc updates
  • Finalize the "private website" template
  • (Sub-task) Replace hack-styled shop by regular-styled shop to allow server renting
  • Reduce character count of libraries when reasonably possible
  • (Sub-task) Redesign of imports.temp (require changes in my private scripts too)

Development

  • New libs
  • Create a library to create fake shells (see 49)
  • Create a library to handle creating/wiping users (see 55)
  • Library to rollback some logs (especially the remote connexion ones)
  • Moved some abilities from file.inc to filesystem.inc (guessing the access-level of a file)
  • Versioning.inc should determine the version, either by file name or by scanning the .so files (see 27)
  • (Sub-task A) Move VersionedPath generation from file.inc to versioning.inc
  • (Sub-task B) Add version scanning for .so libraries (using metaxploit)
  • New tools
  • Tools to gather non-default tools and different versions of a non-default file (see 27)
  • Create a shell to navigate with a file or computer (see 49)
  • Proof of concept : create a fake FtpShell on top of a standard Shell
  • Create a prototype to add, use and close a local guest exploit (see 51)
  • Create a theorical tool to launch guest exploits (see 52)
  • Create tools to create/rename users outside setup.gs (see 55)
  • Replace user creation from setup.gs by the generation of several ghost users (see 55)
  • Create fake tools : ssh with access to LAN-only machines and sudo with root only (see 55)
  • New features
  • Update file transfers so both ways use a temporary folder (reduce the risk of name collision)
  • Link remote.inc to antilogs.inc (creating a remote connexion won't leave a log)
  • Update filereaper.inc to read /Public/htdocs/website.html
  • Allow utils.inc to auto-download a lib in not-mandatory mode
  • vshell and filereaper use the same filesystem.inc method to navigate within files
  • remote.inc now auto-injects the name of the user in the remote shell objects
  • remote.inc now accepts domains as ip adresses
  • Bug fixes
  • 398 workaround (see 53)
  • Stop creating users with write access (see 55)
  • filereaper.inc is accessing the password file backwards
  • Some remote-use contexts call get_shell and active_user
  • ... And probably other changes in laplonge's private scripts

Testing

(Requires to be able to play GreyHack)

  • Scripts requiring testing
  • vaccuum.gs
  • setup.gs
  • securesuseradd.gs
  • secureuserchange.gs
  • ftpoverssh.gs
  • wanssh.src (WAN/LAN) and rootdo.src (-s/-u)
  • Impossible to test guestdo.gs due to unknown library
  • hackport.gs (filereaper update)
  • Libs requiring testing (no reference scripts)
  • vshell.inc
  • utils.inc (remote IncludeLib)
  • file.inc (RemoveLib, IdentifyUser)
  • remote.inc (upload/download + lack of log on remote access)
  • versioning.inc : "versioned path" when provided versioned filenames or .so libs
Modification effectuée par LaplongeJunior

Rapports de requête de fusion

Chargement en cours