lawrenceamer / 0xsp-mongoose

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

---

👨🏻‍💻  Who AMI

name: Lawrence Amer 
located_in: Netherlands
current_job: Red Team / Offsec Expert 
Certifications:
  [
    "OSCP",
    "OSEP",
    "OSCE",
    "CRTO"
  ]

fields_of_interests:
  [
    "Malware Development ",
    "Security Research ",
    "Threat Hunting",
  ]

---

🚀   I code to learn and enjoy the following

0xsp-mongoose's Issues

Quick instructions to compile

Hello, I'm interested in this project, but I know little to nothing about Pascal, I'd like to play with the code and recompile the application myself (I also do it for every project on github, I never use precompiled binaries, at least on my host machine...).
So my question is is it possible for you to add instructions on how to compile the code? Possibly dependencies also :-)
Thanks mate

Application Login Error

Hello,

I've tried to configure the application but I've been unsuccessful so far.
I copied web application folder's content into /var/www/html/0xsp/, then added mysql credentials into application/config/database.php, accessed into the login page with user admin and password 0xsp (found on file 0xsp.sql), but then the application crashes with an error:

I've looked forward to fix the issue but I didn't find any solution.
The dologin function seems to be in the file application/controllers/Login.php but the application looks for login/dologin which does not exists.

I also noticed that the webapp has been built with CodeIgniter (v1.0 ?), but I didn't find any solution looking at his source code.

So I'm stuck now..
Have you any solution to this?

Request: Manage agent from web ui

Can you please add the option for users to manage the agent from the web ui instead of the console if they prefer.

Post auth SQL injection in "scanresult"

It appears that there is a SQL injection in the catID and scanID parameters of the scanresult endpoint as can be seen on this line in the codebase - https://github.com/lawrenceamer/0xsp-Mongoose/blob/0xsp-red/routes/dashboard.js#L143

PoC - http://localhost:4000/scanresult/1/1%22%20union%20select%201,2,3,4,5,sqlite_version(),7,8,9,10,11,12,13,14,15%20--%20-

Linux agent source code ?

smb relay attack

Can you please add support for the smb relay attack.

https://cqureacademy.com/blog/penetration-testing/smb-relay-attack