redcode-labs / bashark Goto Github PK

Testing bashark functions
bruteforce failing with simple test password protected archives (rar & zip) with basic dictionary file that includes the test password (WhiskeyTangoFoxtrot).
dictionary.txt
testData.txt
testData.zip

fndre fails on all test data including regex matching dummy credit card numbers and IP addresses.
fndre also has an error on line 718, fails on the re variable definition (if not quoted, system looks for re binary rather than defined parameter), but function still fails after repair.

Most newer Linux systems coming with "ip address" and no "ifconfig" pre-installed.
Might want to adjust the script to check and run command.

*edit - added:

" local_ip=ip address | grep -Eo 'inet (addr:)?([0-9]*\.){3}[0-9]*' | grep -Eo '([0-9]*\.){3}[0-9]*' | grep -v '127.0.0.1' "

as a second "local_ip=" variable and it produces results but still warns that ifconfig not installed.

Red Code Lab’s team is looking to expand Bashark. We’re looking for ideas and contributions from the community on what recon, pre-exploitation, and exploitation inclusions you’d like to see.

All feedback and contributions are welcome. Thank you.
Edit: please, just behave like civilized people and write non-offensive comments, thank you

This is a function specifically for Mac systems. You can use applescript to phish for user credentials. You can read about it here: https://www.n00py.io/2016/10/privilege-escalation-on-os-x-without-exploits/. Let me know if that's ok with you, and I'll start working on it.

When running "quit" at prompt, script will run cleanup but will not stop process. "crtl-c" fails to end script as well.