Gecko [ 196.203.21.74 ]

Name	Size	Permission
GetADUsers.py	10.68 KB	-rw-rw-rw-
GetNPUsers.py	19.23 KB	-rw-rw-rw-
GetUserSPNs.py	24.97 KB	-rw-rw-rw-
addcomputer.py	31.22 KB	-rw-rw-rw-
atexec.py	12.5 KB	-rw-rw-rw-
dcomexec.py	26.16 KB	-rw-rw-rw-
dpapi.py	27.65 KB	-rw-rw-rw-
easy_install-2.7.exe	90.85 KB	-rwxrwxrwx
easy_install.exe	90.85 KB	-rwxrwxrwx
esentutl.py	3.55 KB	-rw-rw-rw-
exchanger.py	41.71 KB	-rw-rw-rw-
findDelegation.py	14.36 KB	-rw-rw-rw-
flask.exe	94.83 KB	-rwxrwxrwx
futurize-script.py	399 B	-rw-rw-rw-
futurize.exe	64 KB	-rwxrwxrwx
futurize.exe.manifest	643 B	-rw-rw-rw-
getArch.py	4.33 KB	-rw-rw-rw-
getPac.py	13.59 KB	-rw-rw-rw-
getST.py	19.81 KB	-rw-rw-rw-
getTGT.py	5.04 KB	-rw-rw-rw-
goldenPac.py	49.36 KB	-rw-rw-rw-
karmaSMB.py	28.32 KB	-rw-rw-rw-
kintercept.py	9.52 KB	-rw-rw-rw-
ldapdomaindump	69 B	-rw-rw-rw-
ldd2bloodhound	86 B	-rw-rw-rw-
ldd2pretty	74 B	-rw-rw-rw-
lookupsid.py	7.7 KB	-rw-rw-rw-
mimikatz.py	10.02 KB	-rw-rw-rw-
mqtt_check.py	3.15 KB	-rw-rw-rw-
mssqlclient.py	7.71 KB	-rw-rw-rw-
mssqlinstance.py	1.5 KB	-rw-rw-rw-
netview.py	22.64 KB	-rw-rw-rw-
nmapAnswerMachine.py	36.72 KB	-rw-rw-rw-
ntfs-read.py	40.73 KB	-rw-rw-rw-
ntlmrelayx.py	20.87 KB	-rw-rw-rw-
pasteurize-script.py	403 B	-rw-rw-rw-
pasteurize.exe	64 KB	-rwxrwxrwx
pasteurize.exe.manifest	645 B	-rw-rw-rw-
ping.py	2.63 KB	-rw-rw-rw-
ping6.py	2.45 KB	-rw-rw-rw-
pip.exe	94.84 KB	-rwxrwxrwx
pip2.7.exe	94.84 KB	-rwxrwxrwx
pip2.exe	94.84 KB	-rwxrwxrwx
psexec.py	20.78 KB	-rw-rw-rw-
raiseChild.py	60.47 KB	-rw-rw-rw-
rdp_check.py	23.15 KB	-rw-rw-rw-
reg.py	19.05 KB	-rw-rw-rw-
registry-read.py	5.23 KB	-rw-rw-rw-
rpcdump.py	8.43 KB	-rw-rw-rw-
rpcmap.py	17.08 KB	-rw-rw-rw-
sambaPipe.py	12.7 KB	-rw-rw-rw-
samrdump.py	10.86 KB	-rw-rw-rw-
secretsdump.py	20.65 KB	-rw-rw-rw-
services.py	17.08 KB	-rw-rw-rw-
smbclient.py	5.13 KB	-rw-rw-rw-
smbexec.py	15.8 KB	-rw-rw-rw-
smbrelayx.py	58.72 KB	-rw-rw-rw-
smbserver.py	4.29 KB	-rw-rw-rw-
sniff.py	3.23 KB	-rw-rw-rw-
sniffer.py	2.27 KB	-rw-rw-rw-
split.py	4.56 KB	-rw-rw-rw-
ticketConverter.py	2.06 KB	-rw-rw-rw-
ticketer.py	42.33 KB	-rw-rw-rw-
wmiexec.py	17.53 KB	-rw-rw-rw-
wmipersist.py	11.36 KB	-rw-rw-rw-
wmiquery.py	8.68 KB	-rw-rw-rw-

Name

Size

Permission

Action

GetADUsers.py

10.68 KB

-rw-rw-rw-

GetNPUsers.py

19.23 KB

-rw-rw-rw-

GetUserSPNs.py

24.97 KB

-rw-rw-rw-

addcomputer.py

31.22 KB

-rw-rw-rw-

atexec.py

12.5 KB

-rw-rw-rw-

dcomexec.py

26.16 KB

-rw-rw-rw-

dpapi.py

27.65 KB

-rw-rw-rw-

easy_install-2.7.exe

90.85 KB

-rwxrwxrwx

easy_install.exe

90.85 KB

-rwxrwxrwx

esentutl.py

3.55 KB

-rw-rw-rw-

exchanger.py

41.71 KB

-rw-rw-rw-

findDelegation.py

14.36 KB

-rw-rw-rw-

flask.exe

94.83 KB

-rwxrwxrwx

futurize-script.py

399 B

-rw-rw-rw-

futurize.exe

64 KB

-rwxrwxrwx

futurize.exe.manifest

643 B

-rw-rw-rw-

getArch.py

4.33 KB

-rw-rw-rw-

getPac.py

13.59 KB

-rw-rw-rw-

getST.py

19.81 KB

-rw-rw-rw-

getTGT.py

5.04 KB

-rw-rw-rw-

goldenPac.py

49.36 KB

-rw-rw-rw-

karmaSMB.py

28.32 KB

-rw-rw-rw-

kintercept.py

9.52 KB

-rw-rw-rw-

ldapdomaindump

69 B

-rw-rw-rw-

ldd2bloodhound

86 B

-rw-rw-rw-

ldd2pretty

74 B

-rw-rw-rw-

lookupsid.py

7.7 KB

-rw-rw-rw-

mimikatz.py

10.02 KB

-rw-rw-rw-

mqtt_check.py

3.15 KB

-rw-rw-rw-

mssqlclient.py

7.71 KB

-rw-rw-rw-

mssqlinstance.py

1.5 KB

-rw-rw-rw-

netview.py

22.64 KB

-rw-rw-rw-

nmapAnswerMachine.py

36.72 KB

-rw-rw-rw-

ntfs-read.py

40.73 KB

-rw-rw-rw-

ntlmrelayx.py

20.87 KB

-rw-rw-rw-

pasteurize-script.py

403 B

-rw-rw-rw-

pasteurize.exe

64 KB

-rwxrwxrwx

pasteurize.exe.manifest

645 B

-rw-rw-rw-

ping.py

2.63 KB

-rw-rw-rw-

ping6.py

2.45 KB

-rw-rw-rw-

pip.exe

94.84 KB

-rwxrwxrwx

pip2.7.exe

94.84 KB

-rwxrwxrwx

pip2.exe

94.84 KB

-rwxrwxrwx

psexec.py

20.78 KB

-rw-rw-rw-

raiseChild.py

60.47 KB

-rw-rw-rw-

rdp_check.py

23.15 KB

-rw-rw-rw-

reg.py

19.05 KB

-rw-rw-rw-

registry-read.py

5.23 KB

-rw-rw-rw-

rpcdump.py

8.43 KB

-rw-rw-rw-

rpcmap.py

17.08 KB

-rw-rw-rw-

sambaPipe.py

12.7 KB

-rw-rw-rw-

samrdump.py

10.86 KB

-rw-rw-rw-

secretsdump.py

20.65 KB

-rw-rw-rw-

services.py

17.08 KB

-rw-rw-rw-

smbclient.py

5.13 KB

-rw-rw-rw-

smbexec.py

15.8 KB

-rw-rw-rw-

smbrelayx.py

58.72 KB

-rw-rw-rw-

smbserver.py

4.29 KB

-rw-rw-rw-

sniff.py

3.23 KB

-rw-rw-rw-

sniffer.py

2.27 KB

-rw-rw-rw-

split.py

4.56 KB

-rw-rw-rw-

ticketConverter.py

2.06 KB

-rw-rw-rw-

ticketer.py

42.33 KB

-rw-rw-rw-

wmiexec.py

17.53 KB

-rw-rw-rw-

wmipersist.py

11.36 KB

-rw-rw-rw-

wmiquery.py

8.68 KB

-rw-rw-rw-

Code Editor : sniff.py

#!C:\Python27\python.exe
# SECUREAUTH LABS. Copyright 2018 SecureAuth Corporation. All rights reserved.
#
# This software is provided under under a slightly modified version
# of the Apache Software License. See the accompanying LICENSE file
# for more information.
#
# Simple packet sniffer.
#
# This packet sniffer uses the pcap library to listen for packets in
# transit over the specified interface. The returned packages can be
# filtered according to a BPF filter (see tcpdump(3) for further
# information on BPF filters).
#
# Note that the user might need special permissions to be able to use pcap.
#
# Authors:
#  Maximiliano Caceres <max@coresecurity.com>
#  Javier Kohen <jkohen@coresecurity.com>
#
# Reference for:
#  pcapy: findalldevs, open_live.
#  ImpactDecoder.

import sys
from threading import Thread
import pcapy
from pcapy import findalldevs, open_live

from impacket.ImpactDecoder import EthDecoder, LinuxSLLDecoder

class DecoderThread(Thread):
    def __init__(self, pcapObj):
        # Query the type of the link and instantiate a decoder accordingly.
        datalink = pcapObj.datalink()
        if pcapy.DLT_EN10MB == datalink:
            self.decoder = EthDecoder()
        elif pcapy.DLT_LINUX_SLL == datalink:
            self.decoder = LinuxSLLDecoder()
        else:
            raise Exception("Datalink type not supported: " % datalink)

self.pcap = pcapObj
        Thread.__init__(self)

def run(self):
        # Sniff ad infinitum.
        # PacketHandler shall be invoked by pcap for every packet.
        self.pcap.loop(0, self.packetHandler)

def packetHandler(self, hdr, data):
        # Use the ImpactDecoder to turn the rawpacket into a hierarchy
        # of ImpactPacket instances.
        # Display the packet in human-readable form.
        print(self.decoder.decode(data))

def getInterface():
    # Grab a list of interfaces that pcap is able to listen on.
    # The current user will be able to listen from all returned interfaces,
    # using open_live to open them.
    ifs = findalldevs()

# No interfaces available, abort.
    if 0 == len(ifs):
        print("You don't have enough permissions to open any interface on this system.")
        sys.exit(1)

# Only one interface available, use it.
    elif 1 == len(ifs):
        print('Only one interface present, defaulting to it.')
        return ifs[0]

# Ask the user to choose an interface from the list.
    count = 0
    for iface in ifs:
        print('%i - %s' % (count, iface))
        count += 1
    idx = int(input('Please select an interface: '))

return ifs[idx]

def main(filter):
    dev = getInterface()

# Open interface for catpuring.
    p = open_live(dev, 1500, 0, 100)

# Set the BPF filter. See tcpdump(3).
    p.setfilter(filter)

print("Listening on %s: net=%s, mask=%s, linktype=%d" % (dev, p.getnet(), p.getmask(), p.datalink()))

# Start sniffing thread and finish main thread.
    DecoderThread(p).start()

# Process command-line arguments. Take everything as a BPF filter to pass
# onto pcap. Default to the empty filter (match all).
filter = ''
if len(sys.argv) > 1:
    filter = ' '.join(sys.argv[1:])

main(filter)

${this.title}

Code Editor : sniff.py