str4thus / jarvis Goto Github PK

• create abstraction for modules (classes?)
• plug-and-play-ish

-> jarvis.py gobust dir [dirb, seclists] [small,medium,large] -p [-x , --backups]

• jarvis.py gobust dir dirb small php,ini
• jarvis.py gobust dir dirb large /api/v2/users -p 1337 -x php,html,txt
• jarvis.py gobust dir seclists large /api/v2/users --backups

Log Files:

• /api/v2/users-31337-10.10.104

-> gobuster dir -u 'http://:' -w /usr/share/seclists/Discovery/Web-Content/raft-<?>-words.txt -o gobuster/---[ext].gobust -x [ext]'

• handles clean up of tmux session
  ( - disconnects from vpn -> maybe already achieved by killing tmux session)
• removes .jarvis.brain file

• when used, don't try to connect to the default vpn from the conf file

• jarvis.py nmap default
• jarvis.py nmap fast

nmap default -> (nmap -sC -sV -p- -vvv -A -oN nmap/default.nmap -oX nmap/default.xml )
nmap fast -> (nmap -p- -vvv -oN nmap/fast.nmap -oX nmap/fast.xml )

-> jarvis.py vhost [small, medium, large] [domain] (--gobuster --wfuzz ?)

• jarvis.py vhost medium blue.htb

Gobuster and/or wfuzz?

e.g. gobuster vhost -u -w /usr/share/seclists/.. -o vhost-<domain but replace . with - >.gobust

• target ip, target name, current box root folder, used vpn

-> useful for pwnbooks integration later on?

• adds extensibility for more kinds of ctf

• setup via conf? -> jarvis.py config add_kind

• prompts for root dir and vpn dir

• read available kinds from config -> _vpn and _dir have to be present

a module to generate files/payloads easily

e.g.:

• jarvis.py generate _shell [--lhost --lport] (uses target ip from brain-file per default)
• jarvis.py generate magicbytes

• manages jarvis sessions in a tempfile (.jarvis.brain?)

a session contains:

• box directory (e.g. /ctf/htb/boxes/blue)
• vpn path (e.g. /ctf/htb/str4thus.ovpn)
• lab name
• box name
• target ip (via jarvis.py join htb blue --target 10.10.10.210 or jarvis.py brain target 10.10.10.210)
• lhost (jarvis.py brain lhost 127.0.0.1)
• lport (jarvis.py brain lport 31337)
• active attribute (do distinguish between active and inactive)

• $target env variable which contains the ip
• $boxname env variable contains the hostname/boxname

• create the working directory in the tmp folder
• useful for labs/boxes that dont need to be stored permanently