jakobfriedl

#!/usr/bin/env python
# -*- Coding: UTF-8 -*-
# Author: Jakob Friedl
# Created on: Mon, 16. Oct 2023
# Description: Shhhloader support for Havoc C2 framework
# Usage: Load this script into Havoc: Scripts -> Scripts Manager -> Load to create Shhhloader Tab

import os, sys, subprocess
import threading
import havoc

jakobfriedl

import winim
import os
import httpclient, streams
import sequtils, strutils, strformat

# Status indicators
template success(s: varargs[untyped]): untyped = 
    when DEBUG:
        echo "[+] ", s
template fail(s: varargs[untyped]): untyped = 

jakobfriedl

#!/usr/bin/env python
# -*- Coding: UTF-8 -*-
# Author: Jakob Friedl
# Created on: Mon, 23. Oct 2023
# Description: Active Directory object enumeration for Havoc

import havocui 
import havoc 
import re

jakobfriedl

#!/usr/bin/env python
# -*- Coding: UTF-8 -*-
# Author: Jakob Friedl
# Created on: Mon, 30. Oct. 2023
# Description: Parses MITRE ATT&CK enterprise tactics, techniques and sub-techniques

from bs4 import BeautifulSoup
import requests
import re
import urllib3

jakobfriedl

#!/usr/bin/env python3
# Author: Jakob Friedl
# Description: Generate payloads

import sys
import argparse
import base64

parser = argparse.ArgumentParser(description="Payload generator v1")
# parser.add_argument('type', help='Type of payload to use.', choices=['revshell', 'shellcode'])

jakobfriedl

from scapy.all import rdpcap, IP, TCP, DNS, DNSQR
from collections import defaultdict
import argparse

def banner(): 
    print("""
╔═╗┌─┐┌─┐┌─┐  ╔═╗┌┐┌┌─┐┬ ┬ ┬┌─┐┌─┐┬─┐
╠═╝│  ├─┤├─┘  ╠═╣│││├─┤│ └┬┘┌─┘├┤ ├┬┘
╩  └─┘┴ ┴┴    ╩ ╩┘└┘┴ ┴┴─┘┴ └─┘└─┘┴└─                                
          """)

jakobfriedl

function ObfuscateString($inputString, $rotKey) {
    [string]$output = ""
    $inputString.ToString().ToCharArray() | %{
        [string]$thischar = [byte][char]$_ + $rotKey
        if($thischar.Length -eq 1) {
            $thischar = [string]"00" + $thischar
            $output += $thischar
        }
        elseif($thischar.Length -eq 2) {
            $thischar = [string]"0" + $thischar