2026-03-05 00:04:26 -06:00
|
|
|
<!doctype html>
|
|
|
|
|
<html lang="en" class="dark">
|
|
|
|
|
<head>
|
|
|
|
|
<meta charset="UTF-8" />
|
|
|
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
|
|
|
<title>Script Execution - Overlord</title>
|
2026-03-05 15:25:52 -06:00
|
|
|
<link rel="icon" type="image/x-icon" href="/assets/favicon.ico" />
|
2026-03-05 00:04:26 -06:00
|
|
|
<link rel="stylesheet" href="/assets/tailwind.css" />
|
|
|
|
|
<link
|
|
|
|
|
rel="stylesheet"
|
|
|
|
|
href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css"
|
|
|
|
|
crossorigin="anonymous"
|
|
|
|
|
referrerpolicy="no-referrer"
|
|
|
|
|
/>
|
|
|
|
|
<link
|
|
|
|
|
rel="stylesheet"
|
|
|
|
|
href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/codemirror.min.css"
|
|
|
|
|
/>
|
|
|
|
|
<link
|
|
|
|
|
rel="stylesheet"
|
|
|
|
|
href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/theme/material-darker.min.css"
|
|
|
|
|
/>
|
|
|
|
|
<style>
|
|
|
|
|
.CodeMirror {
|
|
|
|
|
height: 100%;
|
|
|
|
|
}
|
|
|
|
|
</style>
|
|
|
|
|
<link rel="stylesheet" href="/assets/main.css" />
|
|
|
|
|
<script src="/assets/toast.js"></script>
|
|
|
|
|
<script src="/assets/ripple.js"></script>
|
|
|
|
|
</head>
|
|
|
|
|
<body class="min-h-screen bg-slate-950 text-slate-100">
|
|
|
|
|
<header id="top-nav"></header>
|
|
|
|
|
|
|
|
|
|
<main class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-8">
|
|
|
|
|
<div class="grid grid-cols-1 lg:grid-cols-3 gap-6">
|
|
|
|
|
<!-- Client Selector -->
|
|
|
|
|
<div class="lg:col-span-3">
|
|
|
|
|
<div class="bg-slate-900/70 rounded-xl border border-slate-800 p-6">
|
|
|
|
|
<div class="flex items-center justify-between mb-4">
|
|
|
|
|
<h2 class="text-xl font-semibold">Select Target Clients</h2>
|
|
|
|
|
<div class="flex items-center gap-2 text-sm text-slate-400">
|
|
|
|
|
<span id="selected-count">0 selected</span>
|
|
|
|
|
<button id="clear-selection-btn" class="px-3 py-1 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors">
|
|
|
|
|
<i class="fa-solid fa-xmark"></i> Clear
|
|
|
|
|
</button>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<!-- Search and Filters -->
|
|
|
|
|
<div class="flex gap-3 mb-4">
|
|
|
|
|
<div class="flex-1 relative">
|
|
|
|
|
<i class="fa-solid fa-search absolute left-3 top-1/2 -translate-y-1/2 text-slate-500"></i>
|
|
|
|
|
<input
|
|
|
|
|
id="client-search"
|
|
|
|
|
type="text"
|
|
|
|
|
placeholder="Search by hostname, ID, or OS..."
|
|
|
|
|
class="w-full pl-10 pr-4 py-2 rounded-lg border border-slate-700 bg-slate-800 text-slate-100 placeholder-slate-500 focus:outline-none focus:ring-2 focus:ring-emerald-500"
|
|
|
|
|
/>
|
|
|
|
|
</div>
|
|
|
|
|
<select
|
|
|
|
|
id="os-filter"
|
|
|
|
|
class="px-4 py-2 rounded-lg border border-slate-700 bg-slate-800 text-slate-100"
|
|
|
|
|
>
|
|
|
|
|
<option value="all">All OS</option>
|
|
|
|
|
</select>
|
|
|
|
|
<button
|
|
|
|
|
id="select-all-btn"
|
|
|
|
|
class="px-4 py-2 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors whitespace-nowrap"
|
|
|
|
|
>
|
|
|
|
|
<i class="fa-solid fa-check-double"></i> Select All
|
|
|
|
|
</button>
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<!-- Client List -->
|
|
|
|
|
<div id="client-list" class="max-h-64 overflow-y-auto border border-slate-700 rounded-lg bg-slate-950">
|
|
|
|
|
<div class="p-4 text-center text-slate-500">Loading clients...</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
|
2026-03-16 15:52:31 +01:00
|
|
|
<!-- Mode Toggle -->
|
|
|
|
|
<div class="lg:col-span-3">
|
|
|
|
|
<div class="flex items-center gap-2 bg-slate-900/70 rounded-xl border border-slate-800 p-3">
|
|
|
|
|
<button id="mode-toggle-code" class="flex-1 flex items-center justify-center gap-2 px-4 py-2 rounded-lg font-semibold text-sm transition-colors bg-emerald-600 text-white">
|
|
|
|
|
<i class="fa-solid fa-code"></i> Code Editor
|
|
|
|
|
</button>
|
|
|
|
|
<button id="mode-toggle-visual" class="flex-1 flex items-center justify-center gap-2 px-4 py-2 rounded-lg font-semibold text-sm transition-colors bg-slate-800 text-slate-300 hover:bg-slate-700">
|
|
|
|
|
<i class="fa-solid fa-puzzle-piece"></i> Visual Builder
|
|
|
|
|
</button>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<!-- Visual Builder (hidden by default) -->
|
|
|
|
|
<div id="visual-builder-section" class="lg:col-span-3 hidden">
|
|
|
|
|
<div class="bg-slate-900/70 rounded-xl border border-slate-800 p-6">
|
|
|
|
|
<div id="visual-builder-container"></div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
|
2026-03-05 00:04:26 -06:00
|
|
|
<!-- Script Editor -->
|
2026-03-16 15:52:31 +01:00
|
|
|
<div id="code-editor-section" class="lg:col-span-2">
|
2026-03-05 00:04:26 -06:00
|
|
|
<div class="bg-slate-900/70 rounded-xl border border-slate-800 p-6 h-full flex flex-col">
|
|
|
|
|
<div class="flex items-center justify-between mb-4">
|
|
|
|
|
<h2 class="text-xl font-semibold">Script Editor</h2>
|
|
|
|
|
<div class="flex items-center gap-2">
|
|
|
|
|
<select
|
|
|
|
|
id="script-type"
|
|
|
|
|
class="px-4 py-2 rounded-lg border border-slate-700 bg-slate-800 text-slate-100"
|
|
|
|
|
>
|
|
|
|
|
<option value="powershell">PowerShell</option>
|
|
|
|
|
<option value="bash">Bash</option>
|
|
|
|
|
<option value="cmd">CMD</option>
|
|
|
|
|
<option value="python">Python</option>
|
|
|
|
|
<option value="sh">Shell (sh)</option>
|
|
|
|
|
</select>
|
|
|
|
|
<button
|
|
|
|
|
id="execute-btn"
|
|
|
|
|
class="px-6 py-2 rounded-lg bg-emerald-600 hover:bg-emerald-700 text-white font-semibold disabled:opacity-50 disabled:cursor-not-allowed flex items-center gap-2"
|
|
|
|
|
>
|
|
|
|
|
<i class="fa-solid fa-play"></i> Execute
|
|
|
|
|
</button>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
<textarea
|
|
|
|
|
id="script-editor"
|
|
|
|
|
class="w-full flex-1 min-h-[24rem] px-4 py-3 rounded-lg border border-slate-700 bg-slate-950 text-slate-100 font-mono text-sm resize-none focus:outline-none focus:ring-2 focus:ring-emerald-500"
|
|
|
|
|
placeholder="Enter your script here..."
|
|
|
|
|
></textarea>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<!-- Saved Scripts + Templates (right column) -->
|
|
|
|
|
<div class="lg:col-span-1">
|
|
|
|
|
<div class="bg-slate-900/70 rounded-xl border border-slate-800 p-6 mb-6">
|
|
|
|
|
<h2 class="text-xl font-semibold mb-4">Saved Scripts</h2>
|
|
|
|
|
<div class="flex gap-2 mb-3">
|
|
|
|
|
<input
|
|
|
|
|
id="script-save-name"
|
|
|
|
|
type="text"
|
|
|
|
|
placeholder="Name this script"
|
|
|
|
|
class="flex-1 px-3 py-2 rounded-lg border border-slate-700 bg-slate-800 text-slate-100 placeholder-slate-500 focus:outline-none focus:ring-2 focus:ring-emerald-500"
|
|
|
|
|
/>
|
|
|
|
|
<button
|
|
|
|
|
id="save-script-btn"
|
|
|
|
|
class="px-3 py-2 rounded-lg bg-emerald-600 hover:bg-emerald-700 text-white text-sm font-semibold"
|
|
|
|
|
>
|
|
|
|
|
<i class="fa-solid fa-save"></i>
|
|
|
|
|
</button>
|
|
|
|
|
</div>
|
|
|
|
|
<div id="saved-scripts-list" class="space-y-2 max-h-64 overflow-auto">
|
|
|
|
|
<div class="text-slate-500 text-sm">No saved scripts yet.</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<div class="bg-slate-900/70 rounded-xl border border-slate-800 p-6 mb-6">
|
|
|
|
|
<h2 class="text-xl font-semibold mb-2">Auto Tasks</h2>
|
|
|
|
|
<p class="text-sm text-slate-400 mb-4">
|
|
|
|
|
Automatically execute the current editor script when clients connect. Use with care.
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
<div class="space-y-3">
|
|
|
|
|
<input
|
|
|
|
|
id="auto-task-name"
|
|
|
|
|
type="text"
|
|
|
|
|
placeholder="Task name"
|
|
|
|
|
class="w-full px-3 py-2 rounded-lg border border-slate-700 bg-slate-800 text-slate-100 placeholder-slate-500 focus:outline-none focus:ring-2 focus:ring-emerald-500"
|
|
|
|
|
/>
|
|
|
|
|
|
|
|
|
|
<select
|
|
|
|
|
id="auto-task-trigger"
|
|
|
|
|
class="w-full px-3 py-2 rounded-lg border border-slate-700 bg-slate-800 text-slate-100"
|
|
|
|
|
>
|
|
|
|
|
<option value="on_connect">On connect (every session)</option>
|
|
|
|
|
<option value="on_connect_once">On connect (only once per client)</option>
|
|
|
|
|
<option value="on_first_connect">On first connect (new clients only)</option>
|
|
|
|
|
</select>
|
|
|
|
|
|
|
|
|
|
<div class="flex items-center gap-2">
|
|
|
|
|
<button
|
|
|
|
|
id="auto-task-save-btn"
|
|
|
|
|
class="px-3 py-2 rounded-lg bg-emerald-600 hover:bg-emerald-700 text-white text-sm font-semibold"
|
|
|
|
|
>
|
|
|
|
|
<i class="fa-solid fa-bolt"></i> Save Auto Task
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
id="auto-task-cancel-btn"
|
|
|
|
|
class="px-3 py-2 rounded-lg bg-slate-700 hover:bg-slate-600 text-white text-sm font-semibold hidden"
|
|
|
|
|
>
|
|
|
|
|
Cancel
|
|
|
|
|
</button>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<div class="mt-4">
|
|
|
|
|
<div class="text-sm text-slate-400 mb-2">Active Auto Tasks</div>
|
|
|
|
|
<div id="auto-task-list" class="space-y-2 max-h-64 overflow-auto">
|
|
|
|
|
<div class="text-slate-500 text-sm">Loading auto tasks...</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<div class="bg-slate-900/70 rounded-xl border border-slate-800 p-6">
|
|
|
|
|
<h2 class="text-xl font-semibold mb-4">Script Templates</h2>
|
|
|
|
|
<div class="space-y-2">
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Get-ComputerInfo | Select-Object CsName, WindowsVersion, OsArchitecture, CsProcessors"
|
|
|
|
|
>
|
2026-03-09 23:44:45 -05:00
|
|
|
<div class="font-semibold">[Windows] System Info</div>
|
2026-03-05 00:04:26 -06:00
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Get computer information
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Get-Process | Sort-Object CPU -Descending | Select-Object -First 10 Name, CPU, WorkingSet"
|
|
|
|
|
>
|
2026-03-09 23:44:45 -05:00
|
|
|
<div class="font-semibold">[Windows] Top Processes</div>
|
2026-03-05 00:04:26 -06:00
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show top 10 processes by CPU
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Get-NetIPAddress | Where-Object {$_.AddressFamily -eq 'IPv4'} | Select-Object IPAddress, InterfaceAlias"
|
|
|
|
|
>
|
2026-03-09 23:44:45 -05:00
|
|
|
<div class="font-semibold">[Windows] Network Info</div>
|
2026-03-05 00:04:26 -06:00
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
List network adapters and IPs
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
2026-03-09 23:44:45 -05:00
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="$av = Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntiVirusProduct -ErrorAction SilentlyContinue; if ($av) { $av | Select-Object displayName, pathToSignedProductExe, timestamp } else { Write-Output 'No AV product data returned from SecurityCenter2' }"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows] AV Status Check</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Query registered antivirus products
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Get-MpComputerStatus | Select-Object AMServiceEnabled, AntivirusEnabled, RealTimeProtectionEnabled, AntivirusSignatureLastUpdated"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows] Defender Health</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show Microsoft Defender status
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Get-Service | Where-Object {$_.Status -eq 'Running'} | Sort-Object DisplayName | Select-Object -First 30 Name, DisplayName, Status"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows] Running Services</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
List active Windows services
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
2026-03-05 00:04:26 -06:00
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="df -h"
|
|
|
|
|
>
|
2026-03-09 23:44:45 -05:00
|
|
|
<div class="font-semibold">[Linux/macOS] Disk Usage</div>
|
2026-03-05 00:04:26 -06:00
|
|
|
<div class="text-sm text-slate-400">
|
2026-03-09 23:44:45 -05:00
|
|
|
Show mounted filesystem usage
|
2026-03-05 00:04:26 -06:00
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="top -bn1 | head -20"
|
|
|
|
|
>
|
2026-03-09 23:44:45 -05:00
|
|
|
<div class="font-semibold">[Linux] System Status</div>
|
2026-03-05 00:04:26 -06:00
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show system status (Linux)
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
2026-03-09 23:44:45 -05:00
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="uname -a; echo; lsb_release -a 2>/dev/null || cat /etc/os-release"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Linux] OS + Kernel Info</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show distro and kernel details
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="ps aux --sort=-%cpu | head -15"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Linux/macOS] Top Processes</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show top CPU-consuming processes
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="ip addr 2>/dev/null || ifconfig"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Linux/macOS] Network Interfaces</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
List interfaces and assigned IPs
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="systemctl --failed 2>/dev/null || service --status-all 2>/dev/null"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Linux] Failed Services</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show failing services if available
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="sw_vers; echo; system_profiler SPSoftwareDataType 2>/dev/null | head -40"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[macOS] System Info</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show macOS version and software details
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<div class="pt-3 pb-1 text-xs font-semibold uppercase tracking-wider text-slate-500 border-t border-slate-700 mt-2">Red Team</div>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="whoami /all"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows RT] Whoami + Privileges</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Current user identity, groups and token privileges
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Get-LocalUser | Select-Object Name,Enabled,LastLogon | Format-Table -AutoSize; Write-Host '--- Local Admins ---'; Get-LocalGroupMember -Group Administrators | Select-Object Name,ObjectClass,PrincipalSource"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows RT] Local Users & Admins</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Enumerate local accounts and administrator group members
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="$p = Get-MpPreference; 'Exclusion Paths:'; $p.ExclusionPath; ''; 'Exclusion Processes:'; $p.ExclusionProcess; ''; 'Exclusion Extensions:'; $p.ExclusionExtension"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows RT] Defender Exclusions</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show Defender exclusion paths, processes and extensions
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Write-Host 'Language Mode:' $ExecutionContext.SessionState.LanguageMode; Write-Host 'Script Block Logging:' (Get-ItemProperty 'HKLM:\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging' -ErrorAction SilentlyContinue).EnableScriptBlockLogging"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows RT] PS Language Mode</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Check PowerShell CLM and script block logging policy
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="cmdkey /list"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows RT] Credential Manager</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
List stored Windows credential manager entries
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Get-Content (Get-PSReadLineOption).HistorySavePath -ErrorAction SilentlyContinue | Select-Object -Last 50"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows RT] PS Command History</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show last 50 PowerShell history entries from PSReadLine
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Get-ScheduledTask | Where-Object {$_.TaskPath -notlike '\Microsoft*'} | Select-Object TaskName,TaskPath,State | Format-Table -AutoSize"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows RT] Scheduled Tasks (Non-MS)</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
List non-Microsoft scheduled tasks (persistence / privesc)
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="powershell"
|
|
|
|
|
data-script="Get-WmiObject Win32_Service | Where-Object {$_.PathName -like '* *' -and -not $_.PathName.StartsWith([char]34)} | Select-Object Name,PathName,State | Format-List"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Windows RT] Unquoted Service Paths</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Find services with unquoted paths (privilege escalation vector)
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="find / -perm -4000 -type f 2>/dev/null | sort"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Linux RT] SUID Binaries</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Find SUID binaries (potential privilege escalation)
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="sudo -l 2>/dev/null || echo 'No sudo access or sudo not available'"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Linux/macOS RT] Sudo Rules</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Show sudo permissions for the current user
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="getcap -r / 2>/dev/null || echo 'getcap not available'"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Linux RT] Capabilities</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Find binaries with elevated Linux capabilities
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="find /home /root /Users -maxdepth 4 \( -name 'id_rsa' -o -name 'id_ed25519' -o -name 'id_ecdsa' -o -name 'authorized_keys' \) 2>/dev/null"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Linux/macOS RT] SSH Keys Hunt</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Locate SSH private keys and authorized_keys files
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
|
|
|
|
<button
|
|
|
|
|
class="template-btn w-full text-left px-4 py-3 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 transition-colors"
|
|
|
|
|
data-type="bash"
|
|
|
|
|
data-script="echo '=== /etc/crontab ==='; cat /etc/crontab 2>/dev/null; echo '=== /etc/cron.d ==='; ls /etc/cron.d/ 2>/dev/null && cat /etc/cron.d/* 2>/dev/null; echo '=== User Crontabs ==='; ls /var/spool/cron/crontabs/ 2>/dev/null"
|
|
|
|
|
>
|
|
|
|
|
<div class="font-semibold">[Linux RT] Cron Jobs</div>
|
|
|
|
|
<div class="text-sm text-slate-400">
|
|
|
|
|
Enumerate system-wide and user cron jobs
|
|
|
|
|
</div>
|
|
|
|
|
</button>
|
2026-03-05 00:04:26 -06:00
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<!-- Output -->
|
|
|
|
|
<div class="lg:col-span-3">
|
|
|
|
|
<div class="bg-slate-900/70 rounded-xl border border-slate-800 p-6">
|
|
|
|
|
<div class="flex items-center justify-between mb-4">
|
|
|
|
|
<h2 class="text-xl font-semibold">Output</h2>
|
|
|
|
|
<button
|
|
|
|
|
id="clear-output-btn"
|
|
|
|
|
class="px-4 py-2 rounded-lg border border-slate-700 bg-slate-800/50 hover:bg-slate-700 text-sm"
|
|
|
|
|
>
|
|
|
|
|
<i class="fa-solid fa-trash"></i> Clear
|
|
|
|
|
</button>
|
|
|
|
|
</div>
|
|
|
|
|
<div
|
|
|
|
|
id="output-container"
|
|
|
|
|
class="min-h-64 max-h-96 overflow-auto px-4 py-3 rounded-lg border border-slate-700 bg-slate-950 text-slate-100 font-mono text-sm whitespace-pre-wrap"
|
|
|
|
|
>
|
|
|
|
|
<div class="text-slate-500">
|
|
|
|
|
No output yet. Execute a script to see results.
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
</main>
|
|
|
|
|
|
|
|
|
|
<script type="module" src="/assets/nav.js"></script>
|
|
|
|
|
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/codemirror.min.js"></script>
|
|
|
|
|
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/powershell/powershell.min.js"></script>
|
|
|
|
|
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/shell/shell.min.js"></script>
|
|
|
|
|
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/python/python.min.js"></script>
|
|
|
|
|
<script type="module" src="/assets/scripts.js"></script>
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|