Network Recon Payload with email exfiltration

Network Recon Payload with email exfiltration
Download Copy
Title: Network Recon Payload with email exfiltration
Author: Topknot

Performs an nmap ping scan of the local subnet and logs it to a text file. Pulls LLDP neighbor and switch information and logs it to a text file. Performs an IFconfig and ip addr show and logs it to a text file. Performs a traceroute to 8.8.8.8 and logs it to a text file. Performs a public IP address lookup via curl and icanhazip.com and logs it to a text file. Optionally sends all of the created text files via email to the address set with MAIL_RCPT

Reconnaissance, or recon, is all about gathering information on a target — be it an individual computer or the network at large. Individual computers may be scanned using a hotplug tool like the Bash Bunny or USB Rubber Ducky coupled with keystroke injection techniques to obtain valuable information without the need to elevate privileges.

Network reconnaissance techniques involve active scans, which may be observed by intrusion detection systems, or passive scans, which may go quietly undetected. The information obtained in a recon operation may assist in the red team's audit plan for future missions such as phishing campaigns or exfiltration. On the network enumeration side, many techniques exist for scanning the network from the outside. The same techniques may be applied to scanning inside the network, which is where hotplug Ethernet attack tools like the Shark Jack excel. See all recon payloads.

This payload is for the Shark Jack — a portable network attack tool. It's a pentesters best friend, optimized for social engineering engagements and opportunistic wired network auditing. Jack into a network an instantly run advanced sysadmin and pentest payloads.

Submit your own payload, or browse more featured Shark Jack Payloads.

 

 

Related Payloads

Exfiltrate NTLM Hash
Exfiltrate NTLM Hash
A payload used to exfiltrate the NTLM hash on a Windows machine.
Read More
Shark Net Sniff
Shark Net Sniff
uses tcpdump to capture network traffic for 1 minute and saves a pcap into loot storage folder
Read More
SSH proxy pivot
SSH proxy pivot
Creates Dynamic port forwarding available on Squirrel to allow for pivoting inside network from remote server.
Read More