search

OWASP / ZSC

OWASP ZSC - Shellcode/Obfuscate Code Generator https://www.secologist.com/
https://www.secologist.com/
Other
647 stars 217 forks source link

windows (10): ZSC -l does not work in Windows #94

Closed jowasp closed 8 years ago

jowasp commented 8 years ago

The command:

zsc -l

works fine in Mac but in windows it goes immediately to the interactive ZSC shell without displaying any payloads menu

In OSX I get: Johannas-iMac:~ johannacuriel$ zsc -l

/ \ \ / /\ / __| \ |_ // __|/ ___| | | | \ \ /\ / / \ | ( | |) | / /| (_ | |
| | | |\ \/ \/ / /\ \ | **/ / / ** | |
| || | \ /\ / __ \ __) | | / / ) | | **/ \/ \// __**/|| /____|/ |

    OWASP ZeroDay Cyber Research Shellcoder

[!] Note: Shellcode Payloads Sorted By OperatingSystem_Architecture/Function_Name/Encode_Name [!] Note: Programming Languages Payloads Sorted By ProgrammingLanguagesName/Encode_Name

[!] system('command_to_execute') [+] osx_x86/system/none

[!] exec('file_to_execute') [+] osx_x86/exec/none

[!] add_admin('username','password') [+] windows_x86/add_admin/none [+] windows_x86/add_admin/xor_random [+] windows_x86/add_admin/add_random [+] windows_x86/add_admin/sub_random [+] windows_x86/add_admin/xor_yourvalue

[!] download_exec('url','filename') [+] windows_x86/download_exec/none [+] windows_x86/download_exec/xor_random [+] windows_x86/download_exec/add_random [+] windows_x86/download_exec/sub_random [+] windows_x86/download_exec/xor_yourvalue

[!] exec('file_to_execute') [+] windows_x86/exec/none [+] windows_x86/exec/xor_random [+] windows_x86/exec/add_random [+] windows_x86/exec/sub_random [+] windows_x86/exec/xor_yourvalue

[!] disable_firewall() [+] windows_x86/disable_firewall/none [+] windows_x86/disable_firewall/xor_random [+] windows_x86/disable_firewall/add_random [+] windows_x86/disable_firewall/sub_random [+] windows_x86/disable_firewall/xor_yourvalue

[!] download_tofile('url','filename') [+] windows_x86/download_tofile/none [+] windows_x86/download_tofile/xor_random [+] windows_x86/download_tofile/add_random [+] windows_x86/download_tofile/sub_random [+] windows_x86/download_tofile/xor_yourvalue

[!] create_file('filename','content') [+] windows_x86/create_file/none [+] windows_x86/create_file/xor_random [+] windows_x86/create_file/add_random [+] windows_x86/create_file/sub_random [+] windows_x86/create_file/xor_yourvalue

[!] dir_create('directory_to_create') [+] windows_x86/dir_create/none [+] windows_x86/dir_create/xor_random [+] windows_x86/dir_create/add_random [+] windows_x86/dir_create/sub_random [+] windows_x86/dir_create/xor_yourvalue

[!] download_execute('download_url','filename','command_to_execute') [+] linux_x86/download_execute/none [+] linux_x86/download_execute/xor_random [+] linux_x86/download_execute/xor_yourvalue [+] linux_x86/download_execute/add_random [+] linux_x86/download_execute/add_yourvalue [+] linux_x86/download_execute/sub_random [+] linux_x86/download_execute/sub_yourvalue [+] linux_x86/download_execute/inc [+] linux_x86/download_execute/inc_timesyouwant [+] linux_x86/download_execute/dec [+] linux_x86/download_execute/dec_timesyouwant [+] linux_x86/download_execute/mix_all

[!] write('file_to_write','content') [+] linux_x86/write/none [+] linux_x86/write/xor_random [+] linux_x86/write/xor_yourvalue [+] linux_x86/write/add_random [+] linux_x86/write/add_yourvalue [+] linux_x86/write/sub_random [+] linux_x86/write/sub_yourvalue [+] linux_x86/write/inc [+] linux_x86/write/inc_timesyouwant [+] linux_x86/write/dec [+] linux_x86/write/dec_timesyouwant [+] linux_x86/write/mix_all

[!] file_create('filename','content') [+] linux_x86/file_create/none [+] linux_x86/file_create/xor_random [+] linux_x86/file_create/xor_yourvalue [+] linux_x86/file_create/add_random [+] linux_x86/file_create/add_yourvalue [+] linux_x86/file_create/sub_random [+] linux_x86/file_create/sub_yourvalue [+] linux_x86/file_create/inc [+] linux_x86/file_create/inc_timesyouwant [+] linux_x86/file_create/dec [+] linux_x86/file_create/dec_timesyouwant [+] linux_x86/file_create/mix_all

Ali-Razmjoo commented 8 years ago

it works fine with me! I'm using windows 10 x64, python 2.7 

C:\Users\Ali\Documents\GitHub\OWASP-ZSC> python zsc.py -l

  ______          __      _____ _____    ______ _____  _____
 / __ \ \        / /\    / ____|  __ \  |___  // ____|/ ____|
| |  | \ \  /\  / /  \  | (___ | |__) |    / /| (___ | |
| |  | |\ \/  \/ / /\ \  \___ \|  ___/    / /  \___ \| |
| |__| | \  /\  / ____ \ ____) | |       / /__ ____) | |____
 \____/   \/  \/_/    \_\_____/|_|      /_____|_____/ \_____|

                OWASP ZeroDay Cyber Research Shellcoder

[!] Note: Shellcode Payloads Sorted By OperatingSystem_Architecture/Function_Name/Encode_Name
[!] Note: Programming Languages Payloads Sorted By ProgrammingLanguagesName/Encode_Name

[!] system('command_to_execute')
[+] osx_x86/system/none

[!] exec('file_to_execute')
[+] osx_x86/exec/none

[!] add_admin('username','password')
[+] windows_x86/add_admin/none
[+] windows_x86/add_admin/xor_random
[+] windows_x86/add_admin/add_random
[+] windows_x86/add_admin/sub_random
[+] windows_x86/add_admin/xor_yourvalue

[!] download_exec('url','filename')
[+] windows_x86/download_exec/none
[+] windows_x86/download_exec/xor_random
[+] windows_x86/download_exec/add_random
[+] windows_x86/download_exec/sub_random
[+] windows_x86/download_exec/xor_yourvalue

[!] exec('file_to_execute')
[+] windows_x86/exec/none
[+] windows_x86/exec/xor_random
[+] windows_x86/exec/add_random
[+] windows_x86/exec/sub_random
[+] windows_x86/exec/xor_yourvalue

[!] disable_firewall()
[+] windows_x86/disable_firewall/none
[+] windows_x86/disable_firewall/xor_random
[+] windows_x86/disable_firewall/add_random
[+] windows_x86/disable_firewall/sub_random
[+] windows_x86/disable_firewall/xor_yourvalue

[!] download_tofile('url','filename')
[+] windows_x86/download_tofile/none
[+] windows_x86/download_tofile/xor_random
[+] windows_x86/download_tofile/add_random
[+] windows_x86/download_tofile/sub_random
[+] windows_x86/download_tofile/xor_yourvalue

[!] create_file('filename','content')
[+] windows_x86/create_file/none
[+] windows_x86/create_file/xor_random
[+] windows_x86/create_file/add_random
[+] windows_x86/create_file/sub_random
[+] windows_x86/create_file/xor_yourvalue

[!] dir_create('directory_to_create')
[+] windows_x86/dir_create/none
[+] windows_x86/dir_create/xor_random
[+] windows_x86/dir_create/add_random
[+] windows_x86/dir_create/sub_random
[+] windows_x86/dir_create/xor_yourvalue

[!] download_execute('download_url','filename','command_to_execute')
[+] linux_x86/download_execute/none
[+] linux_x86/download_execute/xor_random
[+] linux_x86/download_execute/xor_yourvalue
[+] linux_x86/download_execute/add_random
[+] linux_x86/download_execute/add_yourvalue
[+] linux_x86/download_execute/sub_random
[+] linux_x86/download_execute/sub_yourvalue
[+] linux_x86/download_execute/inc
[+] linux_x86/download_execute/inc_timesyouwant
[+] linux_x86/download_execute/dec
[+] linux_x86/download_execute/dec_timesyouwant
[+] linux_x86/download_execute/mix_all

[!] write('file_to_write','content')
[+] linux_x86/write/none
[+] linux_x86/write/xor_random
[+] linux_x86/write/xor_yourvalue
[+] linux_x86/write/add_random
[+] linux_x86/write/add_yourvalue
[+] linux_x86/write/sub_random
[+] linux_x86/write/sub_yourvalue
[+] linux_x86/write/inc
[+] linux_x86/write/inc_timesyouwant
[+] linux_x86/write/dec
[+] linux_x86/write/dec_timesyouwant
[+] linux_x86/write/mix_all

[!] file_create('filename','content')
[+] linux_x86/file_create/none
[+] linux_x86/file_create/xor_random
[+] linux_x86/file_create/xor_yourvalue
[+] linux_x86/file_create/add_random
[+] linux_x86/file_create/add_yourvalue
[+] linux_x86/file_create/sub_random
[+] linux_x86/file_create/sub_yourvalue
[+] linux_x86/file_create/inc
[+] linux_x86/file_create/inc_timesyouwant
[+] linux_x86/file_create/dec
[+] linux_x86/file_create/dec_timesyouwant
[+] linux_x86/file_create/mix_all

[!] dir_create('directory_to_create')
[+] linux_x86/dir_create/none
[+] linux_x86/dir_create/xor_random
[+] linux_x86/dir_create/xor_yourvalue
[+] linux_x86/dir_create/add_random
[+] linux_x86/dir_create/add_yourvalue
[+] linux_x86/dir_create/sub_random
[+] linux_x86/dir_create/sub_yourvalue
[+] linux_x86/dir_create/inc
[+] linux_x86/dir_create/inc_timesyouwant
[+] linux_x86/dir_create/dec
[+] linux_x86/dir_create/dec_timesyouwant
[+] linux_x86/dir_create/mix_all

[!] exec('file_to_execute')
[+] linux_x86/exec/none
[+] linux_x86/exec/xor_random
[+] linux_x86/exec/xor_yourvalue
[+] linux_x86/exec/add_random
[+] linux_x86/exec/add_yourvalue
[+] linux_x86/exec/sub_random
[+] linux_x86/exec/sub_yourvalue
[+] linux_x86/exec/inc
[+] linux_x86/exec/inc_timesyouwant
[+] linux_x86/exec/dec
[+] linux_x86/exec/dec_timesyouwant
[+] linux_x86/exec/mix_all

[!] download('download_url','filename')
[+] linux_x86/download/none
[+] linux_x86/download/xor_random
[+] linux_x86/download/xor_yourvalue
[+] linux_x86/download/add_random
[+] linux_x86/download/add_yourvalue
[+] linux_x86/download/sub_random
[+] linux_x86/download/sub_yourvalue
[+] linux_x86/download/inc
[+] linux_x86/download/inc_timesyouwant
[+] linux_x86/download/dec
[+] linux_x86/download/dec_timesyouwant
[+] linux_x86/download/mix_all

[!] script_executor('name_of_script','name_of_your_script_in_your_pc','execute_to_command')
[+] linux_x86/script_executor/none
[+] linux_x86/script_executor/xor_random
[+] linux_x86/script_executor/xor_yourvalue
[+] linux_x86/script_executor/add_random
[+] linux_x86/script_executor/add_yourvalue
[+] linux_x86/script_executor/sub_random
[+] linux_x86/script_executor/sub_yourvalue
[+] linux_x86/script_executor/inc
[+] linux_x86/script_executor/inc_timesyouwant
[+] linux_x86/script_executor/dec
[+] linux_x86/script_executor/dec_timesyouwant
[+] linux_x86/script_executor/mix_all

[!] system('command_to_execute')
[+] linux_x86/system/none
[+] linux_x86/system/xor_random
[+] linux_x86/system/xor_yourvalue
[+] linux_x86/system/add_random
[+] linux_x86/system/add_yourvalue
[+] linux_x86/system/sub_random
[+] linux_x86/system/sub_yourvalue
[+] linux_x86/system/inc
[+] linux_x86/system/inc_timesyouwant
[+] linux_x86/system/dec
[+] linux_x86/system/dec_timesyouwant
[+] linux_x86/system/mix_all

[!] chmod('file_to_perm','perm_number')
[+] linux_x86/chmod/none
[+] linux_x86/chmod/xor_random
[+] linux_x86/chmod/xor_yourvalue
[+] linux_x86/chmod/add_random
[+] linux_x86/chmod/add_yourvalue
[+] linux_x86/chmod/sub_random
[+] linux_x86/chmod/sub_yourvalue
[+] linux_x86/chmod/inc
[+] linux_x86/chmod/inc_timesyouwant
[+] linux_x86/chmod/dec
[+] linux_x86/chmod/dec_timesyouwant
[+] linux_x86/chmod/mix_all

[!] python
[+] python/simple_hex
[+] python/simple_hex_rev
[+] python/simple_base64_rev

[!] javascript
[+] javascript/simple_hex
[+] javascript/base64
[+] javascript/simple_hex_rev
[+] javascript/simple_base64_rev

[!] ruby
[+] ruby/simple_hex
[+] ruby/base64
[+] ruby/simple_hex_rev
[+] ruby/base64_rev

[!] php
[+] php/simple_hex
[+] php/base64
[+] php/simple_hex_rev
[+] php/base64_rev

[!] perl
[+] perl/simple_hex
[+] perl/base64
[+] perl/simple_hex_rev
[+] perl/simple_base64_rev

C:\Users\Ali\Documents\GitHub\OWASP-ZSC>
jowasp commented 8 years ago

could you try: zsc -l

or is this command not supposed to be used this way?

Ali-Razmjoo commented 8 years ago

I also don't have problem with zsc -l it has same result and works. could you take screenshot please ?

Ali-Razmjoo commented 8 years ago

please check your version in interactive zsc shell on your version. maybe you are using old version.

jowasp commented 8 years ago

I download the version again, uninstall and install see printscreens but I get the same issue Keep in mind I'm downloading from master branch capture1 capture2 capture3

Ali-Razmjoo commented 8 years ago

Oh i didn't test the installed version, I got you now, I will fix it.

Ali-Razmjoo commented 8 years ago

It's fixed now, please check.

Ali-Razmjoo commented 8 years ago

I've tested it, works fine, @jowasp let me know if there is any more issues. thanks.