pendora-box/README.md

53 lines
1.4 KiB
Markdown
Raw Permalink Normal View History

2022-04-16 18:48:42 +02:00
# Pendora Box
This too has several functions:
2022-04-20 16:55:25 +02:00
* Keep your pentesting scripts, binaries hosted on Github up-to-date.
2022-04-16 18:48:42 +02:00
* Listen on HTTP or SMB to easily share your files to the victims
## To-Do
2022-05-20 12:58:03 +02:00
* Add chisel x64
* Integrate msfvenom
* Add Webshells sync
* Ability to add comments or description
2022-04-24 03:08:34 +02:00
* Prettier code
2022-04-16 18:48:42 +02:00
* Adding more services to listen to ?
2022-04-27 15:25:51 +02:00
## Pre-requisites
2022-04-16 18:48:42 +02:00
* requests python module
2022-04-27 15:25:51 +02:00
* rpmfile python module
2022-04-16 18:48:42 +02:00
* impacket smbserver.py must be in PATH
2022-04-27 15:25:51 +02:00
2022-04-16 18:48:42 +02:00
## Usage
[Create a Github personal access token](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token), and create the file `credz.json`:
```json
{
"username": "DwightSchrute",
"token": "ghp_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
}
```
2022-05-20 12:58:03 +02:00
```
user@wow$ python pendora-box.py -h
usage: pendora-box.py [-h] [-u]
Sync your files and starts a listener on HTTP, SMB or SMB2.
options:
-h, --help show this help message and exit
-u, --update update your files (described in config.json)
```
2022-04-16 18:48:42 +02:00
## Adding a file to track
2022-04-20 16:55:25 +02:00
Simply add the informations to [config.json](./config.json), for a release set "local_version" to a random value and run the script.
2022-04-16 18:48:42 +02:00
The file is gonna be automatically downloaded.
2022-04-27 15:25:51 +02:00
## Share a file temporarly
You can add a file you wish to share once in `files/tmp`.
Every time you start the script, you will be asked if you want to clear the folder (if not empty).