[Kinanizer]

Ok. and if you want the scripting Environment, it's in a jar file that you run in command line. Available here http://sleep.dashnine.org/

---

Sleep looks something like what follows. This script is for Cortana which is a bot handler and script engine for Armitage but this isn't the only script, there are alot more available here

Code:

# This file is part of a stand-alone script environment that connects Cortana to # Metasploit, Armitage, and a postgresql database. It's a little complicated and # twisty turny in here. Here are the rough steps: # # 1. Connect to the database (&main) # 2. setup the default reverse handler (&setupHandlers) # 3. check for the collaboration server (&checkForCollaborationServer) # 4. setup collaboration (&setup_collaboration) # 5. call armitage.skip to push the event log pointer to the very end. # 6. send a flag back to the Cortana load that we're ready ([$loader passObject: ...]) # # If any of these steps fails, Cortana will exit with a hopefully helpful error # message. debug(7 | 34); import msf.*; import armitage.*; import console.*; import ssl.*; # create an RPC client for talking to the deconfliction server. sub c_client { # run this thing in its own thread to avoid really stupid deadlock situations local('$handle'); $handle = [[new SecureSocket: $1, int($2), $null] client]; return wait(fork({ local('$client'); $client = newInstance(^RpcConnection, lambda({ writeObject($handle, @_); [[$handle getOutputStream] flush]; return readObject($handle); }, \$handle)); return [new RpcAsync: $client]; }, \$handle)); } # this function sets up a default meterpreter reverse handler on a random port. Better tha # requiring the user to connect a client to make this happen. This function also fires the # loader ready function which tells the script loader that this script is done processing # and this Cortana container may continue loading and executing other scripts. sub setupHandlers { find_job("Exploit: multi/handler", { if ($1 == -1) { # setup a handler for meterpreter call($client, "core.setg", "LPORT", randomPort()); call($client, "module.execute", "exploit", "multi/handler", %( PAYLOAD => "windows/meterpreter/reverse_tcp", LHOST => "0.0.0.0", ExitOnSession => "false" )); } }); } sub main { global('$client $mclient'); local('%r $exception'); setField(^msf.MeterpreterSession, DEFAULT_WAIT => 20000L); try { # connect our first thread... $mclient = c_client($host, $port); # connect our second thread with an empty nickname $client = c_client($host, $port); } catch $exception { println("Could not connect to $host $+ : $+ $port ( $+ $exception $+ )"); [System exit: 0]; } # setup first thread... %r = call($mclient, "armitage.validate", $user, $pass, $nick, "armitage", 120326); if (%r["error"] eq "1") { println(%r['message']); [System exit: 0]; } # setup second thread. %r = call($client, "armitage.validate", $user, $pass, $null, "armitage", 120326); # pass some objects back yo. [$loader passObjects: $client, $mclient]; # don't make previous messages available... call($mclient, "armitage.skip"); # do some other setup stuff... setupBaseDirectory(); setupHandlers(); } invoke(&main);

Thanks, I'm going to check this out.

[Anon_Error]

No problem, and that github is the source for Armitage and cortana.

[Bannedshee]

No problem, and that github is the source for Armitage and cortana.

Lol so have you made anything custom with it?

[Anon_Error]

not really...kinda trying to mess with cna scripts for armitage to make bots

[WuhTehFuh]

I have never heard of it, I would be interested to hear more.

[Anon_Error]

there are links in the post i think ^^

[Prestige]

never heard of it, sounds kinda interesting

[Oni]

Woah, that actually looks pretty interesting. I might take a further look into it later.

[Anon_Error]

It's like having your own red team during a test...you can make bots to do different things...they have arp scanners, keyboard disablers, AV bypassing, bots to control attacks..the possibilities are quite large.