Git Product home page Git Product logo

onionslicer's Introduction

onionslicer

A reverse shell wrapper for tor servers. Get a shell over tor via socat.

What the hell is this?

Onionslice is a shell script for exploiting linux systems running tor. It is essentially a bash wrapper to deploy a trojan using whatever is already on the system, with preference to python. It does the following things:

  • Checks for the presence of socat. If it's not there, download the binary.
  • Creates a wrapper script that inifinitely starts a reverse shell which connects to your .onion hidden service, where you receive your shell.
  • Checks for python, ruby, or ncat or nc, or netcat perl, or telnet to use for the reverse shell. The target sytem likely has one of these on it.
  • Checks for root, and if we have root, installs the wrapper as a boot service (via ./etc/rc.local) to make it persistent.
  • Finally, excutes your shellcode.

What is that shellcode doing?

  • Connecting to the localhost on port 4430 (where socat is listening).
  • The connection is than forwarded to your hidden service.

Usage:

  • Edit the variable 'onion' to reflect where your .onion url
  • Edit the variable 'orPrt' to reflect which port you're listeing on
  • Start a handler with nc (nc -lp 127.0.0.1 12345) or use the handler.
  • Upload to target tor server somehow and execute (there's always the exploit db ...)
  • Receive your torified reverse shell.

onionslicer's People

Contributors

isdrupter avatar

Watchers

Polaris avatar

Forkers

polsec

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.