Categories: Kali Linux

LinPwn : Interactive Post Exploitation Tool

LinPwn is a interactive tool created to assist you in post exploitation enumeration and privilege escalation.

Connection

  • Set your IP and port you want it to connect to in the Connection class.
  • Place the LinPwn binary on the target machine.
  • Run nc -lvp PORT on your machine and then run LinPwn on the target machine to get a connection.

Also Read – JSONBee : A Ready To Use JSONP Endpoints/Payloads To Help Bypass Content Security Policy Of Different Websites

Usage

  1. shell – This command Executes /bin/sh
    Example usage: (LinPwn: Shell) > id
    Type exit to return to LinPwn.
  2. readfile – This command will print the contents of a file.
    Example usage: (LinPwn: ReadFile)> /etc/passwd
    Type exit to return to LinPwn.
  3. enumerate – this command runs LinEnum.sh
    Example usage: (LinPwn) > enumerate
  4. download – This command downloads a file on the target machine
    Example usage: (LinPwn: Download) > https://exampleurl.com/file_to_download
  5. wificredz – This command gathers saved wifipasswords
  6. hashdump – This command gathers system password hashes

Compiling

I included a file called build.sh this is optional run bash build.sh to view the build options if you wish to use them.

R K

Recent Posts

Cybersecurity – Tools And Their Function

Cybersecurity tools play a critical role in safeguarding digital assets, systems, and networks from malicious…

15 hours ago

MODeflattener – Miasm’s OLLVM Deflattener

MODeflattener is a specialized tool designed to reverse OLLVM's control flow flattening obfuscation through static…

15 hours ago

My Awesome List : Tools And Their Functions

"My Awesome List" is a curated collection of tools, libraries, and resources spanning various domains…

15 hours ago

Chrome Browser Exploitation, Part 3 : Analyzing And Exploiting CVE-2018-17463

CVE-2018-17463, a type confusion vulnerability in Chrome’s V8 JavaScript engine, allowed attackers to execute arbitrary…

15 hours ago

Chrome Browser Exploitation, Part 1 : Introduction To V8 And JavaScript Internals

The blog post "Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals" provides…

16 hours ago

Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463

The exploitation of CVE-2018-17463, a type confusion vulnerability in Chrome’s V8 JavaScript engine, relies on…

18 hours ago