mirror of
https://github.com/calebstewart/pwncat.git
synced 2024-11-27 10:54:14 +01:00
27 lines
759 B
Python
Executable File
27 lines
759 B
Python
Executable File
#!./env/bin/python
|
|
import subprocess
|
|
|
|
import pwncat.manager
|
|
import pwncat.platform.windows
|
|
import time
|
|
|
|
# Create a manager
|
|
manager = pwncat.manager.Manager("data/pwncatrc")
|
|
|
|
# Establish a session
|
|
session = manager.create_session("windows", host="192.168.56.10", port=4444)
|
|
# session = manager.create_session("windows", host="192.168.122.11", port=4444)
|
|
|
|
hosts = (
|
|
session.platform.Path("C:\\") / "Windows" / "System32" / "drivers" / "etc" / "hosts"
|
|
)
|
|
with hosts.open() as filp:
|
|
manager.log("Read etc hosts:")
|
|
manager.log(filp.read())
|
|
|
|
p = session.platform.Popen(["whoami.exe"], stdout=subprocess.PIPE, text=True)
|
|
manager.log(f"Current user: {p.communicate()[0].strip()}")
|
|
manager.log(f"Process Exit Status: {p.returncode}")
|
|
|
|
manager.interactive()
|