Skip to content

Update README.md #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
TheBeastofwar wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update README.md #11

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 2 additions & 7 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,8 @@
# icfh-13

# thebeastofwar
- 项目名称:webshell管理工具 中国鼠妇 测试项目地址:https://github.com/TheBeastofwar/SCL-Progress
- 刚开始我看到学长在群里发了一个有关什么poc的教程,以为要开发武器之类的,没想到是底层；然后,我们在5月19日搞了个教育部攻防演练,我测试了多个网站,但是只有6个网站符合0-day利用条件,其中别的师傅在两个网站写了马,但是因为webshell特征太明显了(不论从静态代码层面,还是从动态流量层面),所以分别只给了我们十几分钟的时间进行利用,导致那次RCE得到的分数既然和后台弱口令分数一样,都是100分。这是一个遗憾,学长要我们写一些底层代码,但我这个项目在常规的三大主流webshell管理工具(蚁剑,冰蝎,哥斯拉)有多了些新点子,也基于一些协议,隧道,系统,二进制等相对底层的知识,所以打算先把这个项目先用python基本完成一些常用功能,然后再看一些webshell研究的文章之类的
- 至于这个工具为什么叫鼠妇,一个原因是因为蚁剑和冰蝎都是昆虫,另一个原因是这个工具相对蚁剑和冰蝎比较垃圾。
- 目前,针对webshell检测研究,我打算通过配备ip代理池绕过ip访问频率检查,并发中量或大量垃圾访问数据包绕过检测文件访问频率统计,效仿cobaltstrike那样的流量加密,学习一点webshell的免杀技巧(虽然另一个学长说没人研究这个),尽量实现无感渗透(尽量),还有其他等等
- 因为我主要想学习webshell的隐匿术,所以在功能上相对比较少,只有命令执行功能,后续打算添加文件管理,内网穿透,数据库管理,二进制木马(像cs那样)等功能,如果还有精力的话打算用别的语言重构
- 7.12 冰蝎2.0流量分析

- linuxhacker [linuxhacker](https://github.com/TheBeastofwar/linuxhacker)
- 2023 11-12 v1.0.0
# moonflowersl

# SabYic
Expand Down