Git Product home page Git Product logo

home-grown-red-team's Introduction

Home-Grown-Red-Team

This repo is a resource for various red teaming techniques and tools based on open source software and non-commerical tools.

All of the tools and tradecraft on this repo will be geared toward using Raspberry Pis and Raspberry Pi Zero Ws instead of commerical implants like the Rubbery Ducky, BashBunny or Wifi Pineapple.

home-grown-red-team's People

Contributors

assume-breach avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

home-grown-red-team's Issues

Error creating the exe file

I cannot create an executable file because an error "mv: cannot stat 'signedshellcode.exe': No such file or directory"
Any help?

Screenshot 2023-01-02 at 10 04 13 AM

Hi. There is a problem. Prompt that there is no Crypto module,But I have installed the Crypto module and Crypto.Cipher

Enter The Path To Your Shellcode File. ex: /home/user/Downloads/shellcode.bin

/root/desktop/payload.bin

Name Your Malware! ex: malware.exe

1.exe

+++Encrypting Payload+++

Traceback (most recent call last):
File "/root/desktop/Home-Grown-Red-Team-main/Harriet/Harriet/FULLAes/Resources/aesencrypt.py", line 8, in
from Crypto.Cipher import AES
ModuleNotFoundError: No module named 'Crypto'
Encryption Completed

+++Compiling Malware+++

Malware Compiled

+++Adding Binary Signature+++

mv: cannot stat 'signedwhatever.exe': No such file or directory
*Signature Added. Happy Hunting!

pip list
Package Version


certifi 2022.12.7
charset-normalizer 3.1.0
crypto 1.4.1
Crypto.Cipher 1
idna 3.4
Naked 0.1.32
pip 23.0
PyYAML 6.0
requests 2.28.2
setuptools 66.1.1
shellescape 3.8.1
urllib3 1.26.14

python
Python 3.11.2 (main, Feb 12 2023, 00:48:52) [GCC 12.2.0] on linux
Type "help", "copyright", "credits" or "license" for more information.

Having Issues with Harriet

I am having some issues with Harriet, I have read some similar issues, and supposed to be the path, but I checked and is still not working.
Thanks in advance

image

Having Issues with Harriet

This is an awesome repository!

I am having some issues with Harriet:

- sed: -e expression #1, char 42: unknown option to `s'
- mv: cannot stat 'signedwhatever.exe': No such file or directory
Name Your Malware! ex: malware.exe

whatever.exe

+++Encrypting Payload+++ 

***Encryption Completed***

sed: -e expression #1, char 42: unknown option to `s'
+++Compiling Malware+++

***Malware Compiled***

+++Adding Binary Signature+++

mv: cannot stat 'signedwhatever.exe': No such file or directory
***Signature Added. Happy Hunting!**

Evading AV

Hello, first and foremost I really appreciate your work and this is Amazing, I'm doing Sektor7 malware essentials course these days and still have long way to go.
By the way, I didn't know how to contact you so I made an issue here which isn't an issue.
The thing is that I did generate the payload using Harriet FULLAES methods but the payload is getting flagged by 3 AV's Here its:
https://antiscan.me/scan/new/result?id=kHYzABF71lGI

You already mentioned that if at some point the shellcode is flagged by AV's we can change variables and so on.... .
I did those steps did change the Virts_Alloc function name in template.cpp file and did change the binary that is used by SigTheif for signaturing except the one you mentioned about the perl script, did you meant bash scripts? because I can't see any Perl scripts.
BTW, do you know any other methods for bypassing those AVs as well ?
Best Regards.

Issue creating EXE

Hi,

Just been testing your tool and I am having issues creating EXEs from binary file.

I am getting the following errors

Enter The Path To Your Shellcode File. ex: /home/user/Downloads/shellcode.bin

/root/Downloads/Goliath.bin

Name Your Malware! ex: malware.exe

Teams.exe

+++Encrypting Payload+++

Encryption Completed

sed: -e expression #1, char 42: unknown option to `s'
+++Compiling Malware+++

Malware Compiled

+++Adding Binary Signature+++

mv: cannot stat 'signed.exe': No such file or directory
*Signature Added. Happy Hunting!

I have run setup.sh and it looks like everything is configured correctly but I'm not having any luck.

Any ideas?

Many thanks in advance.

Questions

First of all, congratulations on the tool. I have some doubts. What does each payload do.

  1. Fully-Automated AES Encryption w/ Process Injection
  2. Fully-Automated AES Encrypted QueueUserAPC Shellcode Execution
  3. Fully-Automated AES Encrypted NativeAPI Shellcode Execution
  4. Fully-Automated AES Encrypted Direct Syscall Execution

Could you please explain me what to use each one for. Thank you

Harriet is being detected now

Just updated my VM and tried to see if there's any difference and what I noticed was that dlls and executables encrypted by Harriet are starting to get detected by the newest update of Windows Defender as of writing this.

Hopefully this could also give me an insight on AES

Harriet ISSUE

when i run harriet i faced this error
bash: Harriet/DLLSyscalls/DLLSyscalls.sh: No such file or directory

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.