Skip to content

Instantly share code, notes, and snippets.

@Strazzom
Created September 22, 2018 22:26
Show Gist options
  • Save Strazzom/913f30fe86c424e9b1fe3b904a487f50 to your computer and use it in GitHub Desktop.
Save Strazzom/913f30fe86c424e9b1fe3b904a487f50 to your computer and use it in GitHub Desktop.
root@c827a7fa36a2:/opt/pupy# ./pupysh.py --loglevel DEBUG
2018-09-22 22:22:19,888| LIBS_AUTHORIZED_PATHS=['/opt/pupy/library_patches', '/opt/pupy', '/usr/lib/python2.7', '/usr/lib/python2.7/plat-x86_64-linux-gnu', '/usr/lib/python2.7/lib-tk', '/usr/lib/python2.7/lib-old', '/usr/lib/python2.7/lib-dynload', '/usr/local/lib/python2.7/dist-packages', '/opt/pupy/external/pykcp', '/usr/lib/python2.7/dist-packages', '/opt/pupy/packages/all', '/opt/pupy/packages', 'packages']
2018-09-22 22:22:23,359| Transports loading from files
2018-09-22 22:22:23,371| Transport loaded: ec4
2018-09-22 22:22:23,401| Transport loaded: ecm
2018-09-22 22:22:23,405| Transport loaded: http
2018-09-22 22:22:23,407| Transport loaded: kc4
2018-09-22 22:22:23,413| Transport loaded: obfs3
2018-09-22 22:22:23,418| Transport loaded: rsa
2018-09-22 22:22:23,440| Transport loaded: scramblesuit
2018-09-22 22:22:23,451| Transport loaded: ssl
2018-09-22 22:22:23,460| Transport loaded: ssl_rsa
2018-09-22 22:22:23,470| Transport loaded: tcp_cleartext
2018-09-22 22:22:23,479| Transport loaded: udp_cleartext
2018-09-22 22:22:23,482| Transport loaded: udp_secure
2018-09-22 22:22:23,490| Transport loaded: websocket
2018-09-22 22:22:23,573| Generating credentials to /opt/pupy/crypto/credentials.py
.............................................................................++
.........................++
.............................................................................................................++
.....................++
................++++++
.......................++++++
......................................................................++++++
..++++++
......++++++
...........++++++
......++++++
...............++++++
..................................++++++
.......................++++++
[I] Credentials password:
2018-09-22 22:22:44,893| Reading credentials from /opt/pupy/pupylib/../crypto/credentials.py
2018-09-22 22:22:44,894| Reading credentials from /opt/pupy/crypto/credentials.py
2018-09-22 22:22:44,945| Load module shares
2018-09-22 22:22:45,095| Load module getsystem
2018-09-22 22:22:45,098| Load module loot_memory
2018-09-22 22:22:45,113| Load module getpid
2018-09-22 22:22:45,119| Load module bypassuac
2018-09-22 22:22:45,163| Load module psh
2018-09-22 22:22:45,174| Load module port_scan
2018-09-22 22:22:45,177| Load module keylogger
2018-09-22 22:22:45,192| Load module socks5proxy
2018-09-22 22:22:45,216| Load module ssh
2018-09-22 22:22:45,219| Load module text_to_speach
2018-09-22 22:22:45,516| Load module rfs
2018-09-22 22:22:45,519| Load module edit
2018-09-22 22:22:45,523| Load module upload
2018-09-22 22:22:45,541| Load module smbspider
2018-09-22 22:22:45,546| Load module shell_exec
2018-09-22 22:22:45,549| Load module become
2018-09-22 22:22:45,556| Load module linux_stealth
2018-09-22 22:22:45,573| Load module hide_process
2018-09-22 22:22:45,577| Load module alive
2018-09-22 22:22:45,604| Load module hashmon
2018-09-22 22:22:45,680| Load module rdesktop
2018-09-22 22:22:45,715| Load module get_info
2018-09-22 22:22:45,839| Load module download
2018-09-22 22:22:46,161| Load module creddump
2018-09-22 22:22:46,171| Load module cp
2018-09-22 22:22:46,175| Load module interactive_shell
2018-09-22 22:22:46,180| Load module contacts
2018-09-22 22:22:46,194| Load module lazagne
2018-09-22 22:22:46,197| Load module getprivs
2018-09-22 22:22:46,206| Load module portfwd
2018-09-22 22:22:46,213| Load module exit
2018-09-22 22:22:46,217| Load module rm
2018-09-22 22:22:46,233| Load module smb
2018-09-22 22:22:46,237| Load module netstat
2018-09-22 22:22:46,442| Load module mimikatz
2018-09-22 22:22:46,444| Load module mimipy
2018-09-22 22:22:46,447| Load module nbnsspoof
2018-09-22 22:22:46,449| Load module creds
2018-09-22 22:22:46,454| Load module search
2018-09-22 22:22:46,458| Load module last
2018-09-22 22:22:46,465| Load module rdp
2018-09-22 22:22:46,470| Load module inveigh
2018-09-22 22:22:46,474| Load module w
2018-09-22 22:22:46,478| Load module check_vm
2018-09-22 22:22:46,481| Load module getdomain
2018-09-22 22:22:46,488| Load module outlook
2018-09-22 22:22:46,489| Load module tasks
2018-09-22 22:22:46,522| Load module record_mic
2018-09-22 22:22:46,524| Load module process_kill
2018-09-22 22:22:46,527| Load module exploit_suggester
2018-09-22 22:22:46,530| Load module cd
2018-09-22 22:22:46,533| Load module date
2018-09-22 22:22:46,534| Load module memory_exec
2018-09-22 22:22:46,545| Load module pexec
2018-09-22 22:22:46,607| Load module pywerview
2018-09-22 22:22:46,612| Load module lock_screen
2018-09-22 22:22:46,632| Load module ps
2018-09-22 22:22:46,635| Load module zip
2018-09-22 22:22:46,637| Load module apps
2018-09-22 22:22:46,641| Load module scapy_shell
2018-09-22 22:22:46,644| Load module mkdir
2018-09-22 22:22:46,647| Load module vibrate
2018-09-22 22:22:46,657| Load module duplicate
2018-09-22 22:22:46,698| Load module call
2018-09-22 22:22:46,702| Load module dns
2018-09-22 22:22:46,944| Load module forward
2018-09-22 22:22:46,946| Load module msgbox
2018-09-22 22:22:46,949| Load module clear_logs
2018-09-22 22:22:46,952| Load module psexec
2018-09-22 22:22:46,955| Load module load_package
2018-09-22 22:22:46,959| Load module gpstracker
2018-09-22 22:22:46,980| Load module pwd
2018-09-22 22:22:46,982| Load module privesc_checker
2018-09-22 22:22:46,988| Load module memstrings
2018-09-22 22:22:47,133| Can't open /etc/protocols file
2018-09-22 22:22:47,133| Can't open /etc/services file
2018-09-22 22:22:47,155| Cannot read wireshark manuf database
2018-09-22 22:22:48,161| Loading module scapy.layers.netflow
Traceback (most recent call last):
File "/usr/local/lib/python2.7/dist-packages/scapy/main.py", line 121, in _load
mod = importlib.import_module(module)
File "/usr/lib/python2.7/importlib/__init__.py", line 37, in import_module
__import__(name)
File "/usr/local/lib/python2.7/dist-packages/scapy/layers/netflow.py", line 86, in <module>
class NetflowRecordV5(Packet):
File "/usr/local/lib/python2.7/dist-packages/scapy/layers/netflow.py", line 101, in NetflowRecordV5
ByteEnumField("prot", IP_PROTOS["tcp"], IP_PROTOS),
File "/usr/local/lib/python2.7/dist-packages/scapy/dadict.py", line 38, in __getitem__
return getattr(self, attr)
AttributeError: DADict instance has no attribute 'tcp'
2018-09-22 22:22:48,826| Load module tcpdump
2018-09-22 22:22:48,831| Load module mouselogger
2018-09-22 22:22:48,847| Load module pyexec
2018-09-22 22:22:48,852| Load module beroot
2018-09-22 22:22:48,932| Load module cat
2018-09-22 22:22:48,936| Load module pyshell
2018-09-22 22:22:48,946| Load module mv
2018-09-22 22:22:48,956| Load module powerview
2018-09-22 22:22:48,960| Load module get_hwuuid
2018-09-22 22:22:48,964| Load module display
2018-09-22 22:22:49,523| Load module changeme
2018-09-22 22:22:49,526| Load module webcamsnap
2018-09-22 22:22:49,532| Load module migrate
2018-09-22 22:22:49,535| Load module ip
2018-09-22 22:22:49,540| Load module impersonate
2018-09-22 22:22:49,546| Load module usniper
2018-09-22 22:22:49,549| Load module sudo_alias
2018-09-22 22:22:49,551| Load module netcreds
2018-09-22 22:22:49,657| Load module igd
2018-09-22 22:22:49,692| Load module cloudinfo
2018-09-22 22:22:49,697| Load module persistence
2018-09-22 22:22:49,700| Load module http
2018-09-22 22:22:49,758| Load module users
2018-09-22 22:22:49,764| Load module screenshot
2018-09-22 22:22:49,769| Load module ttyrec
2018-09-22 22:22:49,771| Load module x509
2018-09-22 22:22:49,773| Load module getppid
2018-09-22 22:22:49,777| Load module drives
2018-09-22 22:22:49,780| Load module services
2018-09-22 22:22:49,782| Load module getuid
2018-09-22 22:22:49,786| Load module shellcode_exec
2018-09-22 22:22:49,790| Load module ls
2018-09-22 22:22:49,791| Ignore dangerous module socks5proxy
2018-09-22 22:22:49,792| Ignore dangerous module nbnsspoof
2018-09-22 22:22:49,792| Ignore dangerous module linux_stealth
2018-09-22 22:22:49,793| Ignore dangerous module portfwd
2018-09-22 22:22:49,795| Ignore dangerous module scapy_shell
2018-09-22 22:22:49,796| Ignore dangerous module netcreds
2018-09-22 22:22:50,172| Ignore dangerous module socks5proxy
2018-09-22 22:22:50,172| Ignore dangerous module nbnsspoof
2018-09-22 22:22:50,173| Ignore dangerous module linux_stealth
2018-09-22 22:22:50,173| Ignore dangerous module portfwd
2018-09-22 22:22:50,174| Ignore dangerous module scapy_shell
2018-09-22 22:22:50,175| Ignore dangerous module netcreds
2018-09-22 22:22:50,176| adding alias: info => get_info
2018-09-22 22:22:50,176| adding alias: pyexec => pyexec
2018-09-22 22:22:50,176| adding alias: exec => shell_exec
2018-09-22 22:22:50,176| adding alias: ps => ps
2018-09-22 22:22:50,177| adding alias: migrate => migrate
2018-09-22 22:22:50,177| adding alias: shell => interactive_shell
2018-09-22 22:22:50,177| adding alias: kill => process_kill
2018-09-22 22:22:50,177| adding alias: mount => drives
2018-09-22 22:22:50,177| adding alias: du => download -S
2018-09-22 22:22:50,182| Reading credentials from /opt/pupy/pupylib/../crypto/credentials.py
2018-09-22 22:22:50,184| Reading credentials from /opt/pupy/crypto/credentials.py
2018-09-22 22:22:50,187| server started on [0.0.0.0]:8443
_____ _ _ _
___ ___ | _ |_ _ ___ _ _ ___| |_ ___| | | ___ ___
|___|___| | __| | | . | | | |_ -| | -_| | | |___|___|
|__| |___| _|_ | |___|_|_|___|_|_|
|_| |___|
v1.8 (Aug 2018)
Bleeding edge: https://github.com/n1nj4sec/pupy
The usage of this software to access any system,
service, or network without the owner's consent is
expressly forbidden.
Please follow https://www.eccouncil.org/code-of-ethics/
Good luck!
[*] IGDClient enabled
[*] Listen: ssl: 8443
>> config list
[pupyd]
transport = ssl
ipv6 = true
logs = false
webserver = false
listen = ssl
igd = false
httpd = false
dnscnc = false
recursor = false
allow_requests_to_external_services = false
use_gnome_keyring = false
ping = 0
ping_timeout = 10
enable_dangerous_modules = false
whitelist = false
allow_by_default = true
[dnscnc]
allow_v1 = true
whitelist = false
allow_by_default = true
[cids]
[listeners]
ssl = 443=8443
obfs3 = 9090
rsa = 9091
ec4 = 80=1234
kc4 = 123=1234
tcp_cleartext = 80=1234
udp_cleartext = 123=1234
websocket = 80=8081
http = 80=8080
ecm = 1235
[ssl]
client_cert_required = true
[httpd]
log = true
secret = false
[gen]
format = client
os = windows
arch = x86
external = false
packer =
[cmdline]
display_banner = yes
colors = yes
[paths]
prefer_workdir = no
downloads = data/downloads/%c
memstrings = data/memstrings/%c
searches = data/searches/%c
screenshots = data/screenshots/%c/%t
pcaps = data/pcaps/%c/%t.pcap
logs = data/logs/%c/%t-%M
creds = data/creds
crypto = crypto
wwwroot = data/wwwroot
records = data/%c
keystrokes = data/keylogger/%c/%t.log
mouseshots = data/mouselogger/%c/%w-%t.png
payload_output = output
[on_connect]
[on_connect_notifications]
any1 = !notify-send "New session: {hostname} / {os_name}"
[default_viewers]
image_viewer = eog
sound_player = totem
browser = firefox
[mimikatz]
exe_win32 = /usr/share/mimikatz/Win32/mimikatz.exe
exe_x64 = /usr/share/mimikatz/x64/mimikatz.exe
[aliases]
info = get_info
pyexec = pyexec
exec = shell_exec
ps = ps
migrate = migrate
shell = interactive_shell
kill = process_kill
mount = drives
du = download -S
[rubber_ducky]
encoder_path = TO_FILL
default_keyboard_layout_path = TO_FILL
[randoms]
>>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment