vonahisec / Leprechaun
Licence: mit
This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
Stars: ✭ 232
Programming Languages
ruby
36898 projects - #4 most used programming language
Projects that are alternatives of or similar to Leprechaun
Torat
ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication
Stars: ✭ 415 (+78.88%)
Mutual labels: post-exploitation, privilege-escalation
Proton
Proton Framework is a Windows post-exploitation framework similar to other Windows post-exploitation frameworks. The major difference is that the Proton Framework does most of its operations using Windows Script Host, with compatibility in the core to support a default installation of Windows 2000 with no service packs all the way through Windows 10.
Stars: ✭ 142 (-38.79%)
Mutual labels: post-exploitation, privilege-escalation
Gtfonow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries
Stars: ✭ 68 (-70.69%)
Mutual labels: post-exploitation, privilege-escalation
gtfo
Search for Unix binaries that can be exploited to bypass system security restrictions.
Stars: ✭ 88 (-62.07%)
Mutual labels: post-exploitation, privilege-escalation
Phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
Stars: ✭ 1,188 (+412.07%)
Mutual labels: post-exploitation, privilege-escalation
Mida Multitool
Bash script purposed for system enumeration, vulnerability identification and privilege escalation.
Stars: ✭ 144 (-37.93%)
Mutual labels: privilege-escalation
Evilosx
An evil RAT (Remote Administration Tool) for macOS / OS X.
Stars: ✭ 1,826 (+687.07%)
Mutual labels: post-exploitation
Awesome Hacking Resources
A collection of hacking / penetration testing resources to make you better!
Stars: ✭ 11,466 (+4842.24%)
Mutual labels: privilege-escalation
Enumy
Linux post exploitation privilege escalation enumeration
Stars: ✭ 210 (-9.48%)
Mutual labels: post-exploitation
Hrshell
HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
Stars: ✭ 193 (-16.81%)
Mutual labels: post-exploitation
Zombieant
Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.
Stars: ✭ 169 (-27.16%)
Mutual labels: post-exploitation
Mouse
Mouse Framework is an iOS and macOS post-exploitation framework that gives you a command line session with extra functionality between you and a target machine using only a simple Mouse payload. Mouse gives you the power and convenience of uploading and downloading files, tab completion, taking pictures, location tracking, shell command execution, escalating privileges, password retrieval, and much more.
Stars: ✭ 186 (-19.83%)
Mutual labels: post-exploitation
Herakeylogger
Chrome Keylogger Extension | Post Exploitation Tool
Stars: ✭ 138 (-40.52%)
Mutual labels: post-exploitation
Evasor
A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies
Stars: ✭ 134 (-42.24%)
Mutual labels: post-exploitation
Pe Linux
Linux Privilege Escalation Tool By WazeHell
Stars: ✭ 168 (-27.59%)
Mutual labels: privilege-escalation
Dns Persist
DNS-Persist is a post-exploitation agent which uses DNS for command and control.
Stars: ✭ 191 (-17.67%)
Mutual labels: post-exploitation
Enumdb
Relational database brute force and post exploitation tool for MySQL and MSSQL
Stars: ✭ 167 (-28.02%)
Mutual labels: post-exploitation
Oscp Pentest Methodologies
备考 OSCP 的各种干货资料/渗透测试干货资料
Stars: ✭ 166 (-28.45%)
Mutual labels: post-exploitation
Leprechaun
.-----.
/ V \
|__...__|
|_....._|
.-' ___ '-.
\_.-`. .`-._/
__ .--. _ (|\ (_) /|)
.-;.-"-.-;`_;-, ( \_=_/ )
.(_( `)-;___),-;_), _(_ _)_
(.( `\.-._)-.( ). ) /` ||'-'|| `\
,(_`'--;.__\ _).;--'`_) _ /_/ (_>o<_) \_\
// )`--..__ ``` _( o )'(';,)\_//| || : || |\\
\;' ````` `\\ '.\\--' |`"""""""`|//
/ ':.___// \___,___/\_(
| '---'| |__|__|
; Leprechaun ; ;""|"";
\ / [] | []
'. #vonahisec .' .' / \ '.
'-,.__ __.,-' `--' `--'
(___/`````````\___)
The purpose of this tool is to help penetration testers identify potentially valuable targets on the internal network environment. By aggregating netstat routes from multiple hosts, you can easily figure out what's going on within.
Getting Started
These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system.
Prerequisites
You'll need a few Ruby gems to get started - if you don't have them already, that is.
gem install 'securerandom'
gem install 'terminal-table'
gem install 'getopt'
Lastly, make sure you have Graphviz installed. You can install that with the following command:
apt install graphviz -y
Tool help menu
If you run the script without any arguments, you'll see the following help menu:
[root:vonahisec-kali:~/scripts/leprechaun]# ./leprechaun.rb
-------------------------------------------------------------
Leprechaun v1.0 - Alton Johnson (@altonjx)
-------------------------------------------------------------
Usage: ./leprechaun.rb -f /path/to/netstat_results.txt -p <port>
-f File containing the output of netstat results
-p Port you're interested in. e.g., 80. Specify "all", "common", or separate ports with commas
-e The type of destination IP addresses you want to see connections to (e.g. external/internal/all)
Example: ./leprechaun.rb -f netstat_output.txt -p 80
Example: ./leprechaun.rb -f netstat_output.txt -p all
Example: ./leprechaun.rb -f netstat_output.txt -p common
Example: ./leprechaun.rb -f netstat_output.txt -p 80,443 -t external
Example outputs
+--------------+-----------------------------+----------------------------------+
| Server | Number of connected clients | Highest traffic destination port |
+--------------+-----------------------------+----------------------------------+
| 192.12.70.71 | 4 | 80/tcp (4 clients) |
| 192.12.70.18 | 2 | 443/tcp (2 clients) |
| 192.12.70.45 | 1 | 445/tcp (1 clients) |
+--------------+-----------------------------+----------------------------------+
Additional References
Blog post: https://blog.vonahi.io/post-exploitation-with-leprechaun/
LinkedIn Article: https://www.linkedin.com/pulse/finding-gaps-your-network-segmentation-using-johnson-oscp-osce/
Authors
License
This project is licensed under the MIT License - see the LICENSE.md file for details
Acknowledgments & Credits
- Josh Stone - Influenced by Routehunter
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].