开源软件名称：

开源软件地址：

开源编程语言：

开源软件介绍：

Koadic

Koadic, or COM Command & Control, is a Windows post-exploitation rootkit similar to other penetration testing tools such as Meterpreter and Powershell Empire. The major difference is that Koadic does most of its operations using Windows Script Host (a.k.a. JScript/VBScript), with compatibility in the core to support a default installation of Windows 2000 with no service packs (and potentially even versions of NT4) all the way through Windows 10.

It is possible to serve payloads completely in memory from stage 0 to beyond, as well as use cryptographically secure communications over SSL and TLS (depending on what the victim OS has enabled).

Koadic also attempts to be compatible with both Python 2 and Python 3.

Install

# git clone https://github.com/zerosum0x0/koadic.git
# cd koadic
# pip install -r requirements.txt

Demo

1. Hooks a zombie
2. Elevates integrity (UAC Bypass)
3. Dumps SAM/SECURITY hive for passwords
4. Scans local network for open SMB
5. Pivots to another machine

Stagers

Stagers hook target zombies and allow you to use implants.

Implants

Implants start jobs on zombies.

Disclaimer

Code samples are provided for educational purposes. Adequate defenses can only be built by researching attack techniques available to malicious actors. Using this code against target systems without prior permission is illegal in most jurisdictions. The authors are not liable for any damages from misuse of this information or code.

Creators

• @Aleph___Naught
• @The_Naterz
• @JennaMagius
• @zerosum0x0

Contributors

• @vvalien1
• fbctf
• cclaus
• Arno0x
• delirious-lettuce

Acknowledgements

Special thanks to research done by the following individuals:

• @subTee
• @enigma0x3
• @tiraniddo
• @harmj0y
• @gentilkiwi
• @mattifestation
• clymb3r