Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/herwonowr/slackhell
Slackhell is a simple tool for generating and controlling web shell backdoor using Slack Bot.
https://github.com/herwonowr/slackhell
asp backdoor bot c2 php slack webshell
Last synced: about 1 month ago
JSON representation
Slackhell is a simple tool for generating and controlling web shell backdoor using Slack Bot.
- Host: GitHub
- URL: https://github.com/herwonowr/slackhell
- Owner: herwonowr
- License: gpl-3.0
- Created: 2019-12-22T15:28:33.000Z (about 5 years ago)
- Default Branch: master
- Last Pushed: 2020-01-02T11:24:48.000Z (about 5 years ago)
- Last Synced: 2024-06-20T05:27:13.948Z (7 months ago)
- Topics: asp, backdoor, bot, c2, php, slack, webshell
- Language: Go
- Homepage:
- Size: 55.7 KB
- Stars: 14
- Watchers: 2
- Forks: 7
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
README
# SlackHell C2
Slack Web Shell C2 for Fun and Profit
## Introduction
Slackhell is a simple tool for generating and controlling web shell backdoor using Slack Bot.
## Features
* Slack C2
* User management
* Access control
* Generate web shell backdoor
* Supported web shell `php` and `asp`
* Web shell backdoor password protected
* Shell session
## Available Commands
* `help` - Show help commands
* `cmd ` - Execute command on the target client
* `generate ` - Generate shellcode, valid type `php` and `asp`
* `shellcodes` - List generated shellcodes
* `shellupdate ` - Update shellcode endpoint
* `shelldel ` - Delete shellcode
* `user ` - Get authorized user information
* `users` - List authorized users
* `useradd ` - Add authorized user, valid role `admin` and `agent`
* `userupdate ` - Update authorized user, valid role `admin` and `agent`
* `userdel ` - Delete authorized user
* `session` - Get active session
* `sessionset ` - Set active shell session
* `sessionkill` - Kill active shell session
## Getting Started
These instructions will get you a copy of the project up and running on your local machine.
### Prerequisites
* Before using Slackhell make sure you have created Slack Bot, by following this guide, [create slack app](https://api.slack.com/start/overview).
* Install [golang](https://golang.org/doc/install)
### Build from Source
```bash
$ git clone https://github.com/herwonowr/slackhell.git
$ cd slackhell
$ go build -o slackhell cmd/main.go
```
### Change the Configuration
```bash
$ vim ./data/config/slackhell.toml
```
```toml
[account]
# Slackhell initial admin account
# id e.g: UR*******
# realname e.g: Vulncode
id = "UR*******"
realname = "Vulncode"
[slack]
token = "xoxb-yourslackbottoken"
[database]
path = "./data/db/slackhell.db"
[log]
debug = false
```
Configuration:
* **Account** - Initial admin account for Slackhell
* id - your slack id
* realname - your slack realname
* **Slack** - Slack bot token
* token - your slack bot token (xoxb-*)
* **Database** - Slackhell database path
* path - database path
* **Log** - Log debug
* debug - set verbose log
### Start Slackhell
```bash
$ slackhell run
```
### Build Docker Image
```bash
$ git clone https://github.com/herwonowr/slackhell.git
$ cd slackhell
$ docker build -t reponame/slackhell:version .
```
### Start Slackhell Docker Image
```bash
$ docker run --rm -v $(pwd)/data/config/slackhell.toml:/slackhell/data/config/slackhell.toml -v $(pwd)/data/db:/slackhell/data/db reponame/slackhell:tagname
```
### Start Slackhell Pre Build Docker Image
```bash
$ docker run --rm -v $(pwd)/data/config/slackhell.toml:/slackhell/data/config/slackhell.toml -v $(pwd)/data/db:/slackhell/data/db herwonowr/slackhell:v1.0.0
```
## Contributing
Please read [CODE OF CONDUCT](CODE_OF_CONDUCT.md) and [CONTRIBUTING](CONTRIBUTING.md) for details on our code of conduct, and the process for submitting pull requests to us.
## Versioning
We use [SemVer](http://semver.org/) for versioning.
## Authors
* **Herwono W. Wijaya** - *Initial work* - [Slackhell](https://github.com/herwonowr/slackhell)
## License
This project is licensed under the GNU GPLv3 License - see the [LICENSE](LICENSE) file for details
## Disclaimer
THIS TOOL IS BEING PROVIDED FOR EDUCATIONAL PURPOSES ONLY, WITH THE INTENT FOR RESEARCH PURPOSES ONLY.
You may not use this software for any illegal or unethical purpose; including activities which would give rise to criminal or civil liability.
USE ON YOUR OWN RISK. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER OR CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES.
## Acknowledgments
* [Go Slack API](https://github.com/nlopes/slack)
* [Slacker](https://github.com/shomali11/slacker)