https://github.com/sensepost/reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
https://github.com/sensepost/reGeorg

Last synced: about 2 months ago
JSON representation

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

• Host: GitHub
• URL: https://github.com/sensepost/reGeorg
• Owner: sensepost
• License: other
• Created: 2014-08-08T00:58:12.000Z (about 10 years ago)
• Default Branch: master
• Last Pushed: 2020-11-04T10:36:24.000Z (almost 4 years ago)
• Last Synced: 2024-04-24T10:20:52.611Z (5 months ago)
• Language: Python
• Size: 27.3 KB
• Stars: 2,932
• Watchers: 121
• Forks: 813
• Open Issues: 18
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.html

Awesome Lists containing this project

• StarryDivineSky - sensepost/reGeorg
• awesome-hacking-lists - sensepost/reGeorg - The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn. (Python)

README

        
reGeorg

=========

```                    _____

  _____   ______  __|___  |__  ______  _____  _____   ______

 |     | |   ___||   ___|    ||   ___|/     \|     | |   ___|

 |     \ |   ___||   |  |    ||   ___||     ||     \ |   |  |

 |__|\__\|______||______|  __||______|\_____/|__|\__\|______|

                    |_____|

                    ... every office needs a tool like Georg

```

[email protected] / [@\_w\_m\_\_]

[email protected] / [@trowalts]

[email protected] / [@kamp_staaldraad]

Version

----

1.0

Dependencies

-----------

reGeorg requires Python 2.7 and the following modules:

* [urllib3] - HTTP library with thread-safe connection pooling, file post, and more.

 

Usage

--------------

```

$ reGeorgSocksProxy.py [-h] [-l] [-p] [-r] -u  [-v]

Socks server for reGeorg HTTP(s) tunneller

optional arguments:

  -h, --help           show this help message and exit

  -l , --listen-on     The default listening address

  -p , --listen-port   The default listening port

  -r , --read-buff     Local read buffer, max data to be sent per POST

  -u , --url           The url containing the tunnel script

  -v , --verbose       Verbose output[INFO|DEBUG]

```

* **Step 1.**

Upload tunnel.(aspx|ashx|jsp|php) to a webserver (How you do that is up to

you)

* **Step 2.**

Configure you tools to use a socks proxy, use the ip address and port you

specified when

you started the reGeorgSocksProxy.py

** Note, if you tools, such as NMap doesn't support socks proxies, use

[proxychains] (see wiki) 

* **Step 3.** Hack the planet :)

Example

---------

```

$ python reGeorgSocksProxy.py -p 8080 -u http://upload.sensepost.net:8080/tunnel/tunnel.jsp

```

License

----

MIT

[@\_w\_m\_\_]:http://twitter.com/_w_m__

[@trowalts]:http://twitter.com/trowalts

[@kamp_staaldraad]:http://twitter.com/kamp_staaldraad

[urllib3]:https://pypi.python.org/pypi/urllib3

[proxychains]:http://sourceforge.net/projects/proxychains/