Cyber security

Offensive Lua – Unveiling Lua Scripts For Windows Security Exploration

Offensive Lua is a collection of offensive security scripts written in Lua with FFI. The scripts run with LuaJIT (v2.0.5) on Microsoft Windows to perform common tasks.

  • Run an EXE
  • Bypass UAC
  • File, Networking or Registry
  • Common Tasks (e.g. bind a shell)

Lua is a lesser used but very useful choice for post-exploitation scripting language. It’s flexible, lightweight, easy to embed, runs interpreted or as bytecode from memory and allows for JIT to interact with the host OS libraries.

FilenameDescription
bin2hex.luaConvert a binary to hex for binrun.lua
binrun.luaWrites a hex of EXE to a random location and exec’s
bindshell.luabind a shell on TCP port 5000
ComputerDefaultsUACBypass.luaBypass UAC restrictions via ms-settings
console.luaConsole App Example
downloadexec.luaDownload & Exec over HTTP
downloadexec_UACbypass.luaDownload & BypassUAC & Exec over HTTP
filewrite.luaWrite a file
luajit.exeLuaJIT compiled from our internal source tree.
messagebox.luaMessageBox Example
regread.luaRead from Registry
regwrite.luaWrite to Registry
regwritedel.luaWrite and Delete from Registry
rickroll.luaOpen a browser on URL
runcmd.luaRun a command popen
runcmd2.luaRun a command os.execute
runswhide.luaRun a command via CreateProcess with SW_HIDE
uac_bypass_bluetooth_win10.luaBypass UAC via Bluetooth on Windows10
Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

Bash Scripting Best Practices Every Beginner Should Know

Introduction Bash scripting is a powerful way to automate Linux tasks, but writing a script…

20 hours ago

How To Create A Self-Signed SSL Certificate Using Bash And OpenSSL

Introduction A self-signed SSL certificate is a certificate that is created and signed by the…

21 hours ago

How To Debug Bash Scripts Using bash -x And set Commands

Introduction Debugging is an important part of Bash scripting. When a script does not work…

1 day ago

How To Use Cron Jobs With Bash Scripts For Automation

Introduction Cron jobs are used in Linux to run commands or Bash scripts automatically at…

1 day ago

How To Use Pipes In Bash Scripts For Command Chaining

Introduction Pipes are an important feature in Linux and Bash scripting. A pipe allows you…

1 day ago

How To Use grep, awk, And sed In Bash Scripts

Introduction The grep, awk, and sed commands are powerful text-processing tools in Linux. They are…

1 day ago