Code Monkey home page Code Monkey logo

19年1月写的代码，当时的一个想法就顺手写了个半成品，后来找不到了，今天又翻出来了，有空了要推倒重写（提示代码质量😢）

攻击

目标主机管理

• 主机发现，（端口探测），手动添加/nmap扫描
• 按服务分类主机，定时检测是否在线
• 显示端口信息，编辑备注
• 定时检测主机是否在线，shell是否还在
• 在思考：端口扫描如果每个主机都进行一次，频率像检测是否在线一样的话会花费大量的时间。端口扫描一遍会花费不少时间，是开始每个主机扫一遍就记录还是经常扫描只是每个服务只扫一个主机呢？

shell管理

• shell管理
• 批量种内存马（骑一句话）
• 上大马

flag提交

• 目前思考有三种方式的flag提交（获取flag内容本机提交，目标机提交，payload一把梭）
• 1.flag提交方式多样2.多种方式的处理 3.效率可能不如写脚本（这是目前在思考的问题，所以这个模块不是很完善）

防御

文件监控

• 监控和保护维护主机的文件变化，显示文件的变化日志
• 考虑遇到被写马等危险情况进行弹警告。

流量log

• 在思考：1.访问流量很大，只是记录日志没意义（量大在平台分析不如直接看文件） 2.考虑只对非正常访问（攻击，带flag等）记录并转发过来\

进程log

• 记录进程的变化情况

LANVNAL's Projects

cdk icon cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

ew icon ew

内网穿透(跨平台)

javasecinterview icon javasecinterview

打造最强的Java安全研究与安全开发面试题库，包含问题和详细的答案，帮助师傅们找到满意的工作

jjjjjjjjjjjjjs icon jjjjjjjjjjjjjs

爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应

l-dbms icon l-dbms

数据库课程设计，数据库系统

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.