Skip to content

Commit 95b9a47

Browse files
committed
Adding support for easier 'decloaking' (AV something something)
1 parent e05f656 commit 95b9a47

File tree

7 files changed

+16
-2
lines changed

7 files changed

+16
-2
lines changed

data/shell/stagers/stager.asp_

0 Bytes
Binary file not shown.

data/shell/stagers/stager.aspx_

0 Bytes
Binary file not shown.

data/shell/stagers/stager.jsp_

0 Bytes
Binary file not shown.

data/shell/stagers/stager.php_

0 Bytes
Binary file not shown.

extra/cloak/cloak.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@
2121
xrange = range
2222
ord = lambda _: _
2323

24-
KEY = b"Beeth7hoyooleeF0"
24+
KEY = b"wXGWkn7KI0VhDOHS"
2525

2626
def xor(message, key):
2727
return b"".join(struct.pack('B', ord(message[i]) ^ ord(key[i % len(key)])) for i in range(len(message)))

extra/shutils/recloak.sh

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
#!/bin/bash
2+
3+
# NOTE: this script is for dev usage after AV something something
4+
5+
DIR=$(cd -P -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)
6+
7+
cd $DIR/../../data/shell
8+
find -regex ".*backdoor\.[a-z]*_" -or -regex ".*stager\.[a-z]*_" -type f -exec python ../../extra/cloak/cloak.py -d -i '{}' \;
9+
10+
cd $DIR/../cloak
11+
sed -i 's/KEY = .*/KEY = b"'`python -c 'import random; import string; print("".join(random.sample(string.ascii_letters + string.digits, 16)))'`'"/g' cloak.py
12+
13+
cd $DIR/../../data/shell
14+
find -regex ".*backdoor\.[a-z]*" -or -regex ".*stager\.[a-z]*" -type f -exec python ../../extra/cloak/cloak.py -i '{}' \;

lib/core/settings.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
from thirdparty.six import unichr as _unichr
1919

2020
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
21-
VERSION = "1.4.8.19"
21+
VERSION = "1.4.8.20"
2222
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2323
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
2424
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

0 commit comments

Comments
 (0)