Jump to content

REDD

Active Members
  • Posts

    144
  • Joined

  • Last visited

  • Days Won

    9

6 Followers

Profile Information

  • Gender
    Male
  • Location
    4f 6d 61 6b 2c 20 57 41
  • Interests
    Bash, Batch, PowerShell, C\C++, Perl, Python, Node.js, DHTML, PHP, MySQL, XML, and tiny bit of Ruby.

Recent Profile Visitors

2,055 profile views

REDD's Achievements

Newbie

Newbie (1/14)

  1. Very interesting, I can insert both straight into the Ethernet Port or via USB Adapter and get responses from both.. I just reinstalled the firmware on the spare SharkJack I have and no issues. I think this issue is due to your setup.
  2. Should be able to "Connect to SSH" and "Connect to WebUI" if your SharkJack is updated.
  3. And the WebUI is the IP of the SharkJack (1.1.0+ Firmware) in your browser once the device is in Arming Mode and detected by the machine. Aka. http://172.16.24.1/
  4. Use the PowerShell Script and tell me if it even detects it in Arming Mode and what options don't work (besides SharkLib options - it's obsolete since the patch). https://forums.hak5.org/topic/51075-tool-sharkjackps1-powershell-version-of-sharkjacksh/
  5. We are gonna need a little more information about: - How you have it connected to the machine? - Are you able to connect to the WebUI at all when in Arming mode while connected? - Have you factory reset the device and still have the same issues?
  6. I think you are misunderstanding what the SharkJack is.. It's a tiny OpenWRT box with a 5-15 min battery.. It only has about 27MB of free space to store Payloads on so you're pretty limited to the extent of the device. There's a bunch of tools, Payloads and opinions on the forums and GitHubs.
  7. @wulf I added a terminal version to the patch. Let me know what you think.. Download version 1.11 of the patch, "Remove Patch", then "Install Patch" again.. It will give you a library command via SSH. Enjoy!
  8. "Enhanced Version" will be released in 24-48 hours. - I like the idea. And thanks!
  9. Thanks! I try to just make the device as easy as I can for everyone.. 😁
  10. If you try to add this with the Web UI, it wont work.. You'll have to follow the "Workaround" for adding this Payload into the Payload Library.. It contains characters the "Payload" tab doesn't like.. Lol
  11. Feb 3rd, 2021: Version 1.11 - Minor fixes to patcher-win.cmd file. Fixes errors with some Windows users having errors with script seeing local files. Feb 3rd, 2021: Version 1.1 - Adds Shell "library" command to the patch. (Formly SharkLib) Adds fixes to library command to make compatible with Patch WebUI Library. Jan 29th, 2021: Version 1.0d - Public Release of Patch.
  12. Payload Library for Web UI/SSH (Unofficial Patch) This (unofficial) Patch provides the Official SharkJack Web UI with a additional Tab on the Web UI (http://172.16.24.1/) to maintain your payloads on the Device itself rather than relying on a PC to switch to your prior used payloads. I personally figured since the SharkJack has not received any Love in over a year, I'd give it a little attention. Since it was missing a Payload Management System on the device (That is accessible via Web UI), I decided to make one. I attempted to "copy" the original style of the original Web UI. - Taking the POST methods and programming style of the previous developer to try to bring features without "adding" dependencies to the SharkJack. I have also included a Patcher for both Windows Machines and Unix/Mac's (Utilizing the current sharkjack.sh tool from Hak5 - Kudos Devs) to make this feature available to everyone. Enjoy! Features: Backup your current Payload to the Library. Download any Payload in the Library. Restore any Payload in the Library. Delete any Payload in the Library. Adds "library" command to SharkJack. - Allows ALL the same features as the WebUI Library Tab and is CROSS-COMPATIABLE! Example Screenshot of the Library via WebUI: Screenshot of Library ("library" command) via SSH: What is needed to Install: Sharkjack with 1.1.0 firmware or higher installed. Ethernet Port on Local Machine to connect the SharkJack. Administrator/Root user on Local Machine. How to Install: Head to https://github.com/InfoSecREDD/sj-webui-patch/releases Download the most current release (.zip or .tar.gz). Unzip the downloaded file to a location of your choice. Connect your SharkJack in ARMING MODE to the Ethernet Port on your local machine. Run the appropriate Patcher for your OS. (Windows: patcher-win.cmd, Linux/Mac: patcher-linux.sh) Select "1" on the menu and follow the Patcher's Instructions. Once Patcher is finished, Head to the SharkJack Web UI to verify it has been installed. (http://172.16.24.1/) Enjoy! How to Remove: (If already downloaded & unzipped. Skip to Step #4) Head to https://github.com/InfoSecREDD/sj-webui-patch/releases Download the most current release (.zip or .tar.gz). Unzip the downloaded file to a location of your choice. Connect your SharkJack in ARMING MODE to the Ethernet Port on your local machine. Run the appropriate Patcher for your OS. (Windows: patcher-win.cmd, Linux/Mac: patcher-linux.sh) Select "2" on the menu and follow the Patcher's Instructions. Once Patcher is finished, Head to the SharkJack Web UI to verify it has been removed. (http://172.16.24.1/) (Your Payloads will remain saved on the device under /root/library/ - We don't want to delete your payloads without your confirmation.) How to use the Web UI Library: Connect the SharkJack in ARMING MODE to the Ethernet Port on your Local Machine. Open up your Browser of choice (Chrome, Firefox, Brave, Opera, Edge (🤮), etc) and go to "http://172.16.24.1/". Navigate to the "Library" tab on the Top Menu. Input your desired Payload Name in the Backup input field box and click the "BACKUP" button. Click "Ok" on the Window Alert. The Page will instantly refresh. (At this point you can choose to "Restore", "Download", and "Delete" that payload.) Enjoy! How to use the Terminal Extension: Connect the SharkJack in ARMING MODE to the Ethernet Port on your Local Machine. Open up your SSH Client of choice (PuTTy, Linux Terminal, PowerShell/CMD(if OpenSSH Client (Beta) Feature is installed on Windows 10)) and connect to 172.16.24.1 with your credentials. Type "library" and hit [Enter] in the shell and follow the prompted Menu. Enjoy! Known Issues: Payload Tab - Payload text that includes certain special characters do not translate in POST Method. (SharkJack 1.1.0 - 1.0.1 WebUI Issue.) This issue has nothing to do with this patcher or project. (See workaround below) Payload Tab - Payload text that exceeds certain character limit stalls and does not post payload content to correct location. (SharkJack 1.1.0 - 1.0.1 WebUI Issue.) This issue has nothing to do with this patcher or project. (See workaround below) Workaround for Payload Tab Issues: Connect to SharkJack via SSH and use SCP to transfer payloads to "/root/payload/payload.sh". It will appear in the "Payload Tab" and you'll be able to backup/restore the payload using the Library Tab. If using a SFTP Client, make sure your Text Editor is formatted for "UNIX Style Formatting" otherwise you will end up with "^M", etc, after each line. - Then transfer the appropriate Payload to "/root/payload/payload.sh". It will appear in the "Payload Tab" and you'll be able to backup/restore the payload using the Library Tab. Source GitHub Repo: https://github.com/InfoSecREDD/sj-webui-patch Patch.sh Source: https://github.com/InfoSecREDD/sj-webui-patch/blob/main/patch.sh Payload Library Source: https://github.com/InfoSecREDD/sj-webui-patch/blob/main/patch/library.sh Patcher-Win Source: https://github.com/InfoSecREDD/sj-webui-patch/blob/main/patcher-win.cmd Patcher-Linux Source: https://github.com/InfoSecREDD/sj-webui-patch/blob/main/patcher-linux.sh Payload Library Shell Extension: https://github.com/InfoSecREDD/sj-webui-patch/blob/main/patch/library
  13. Most likely Windows based if they're using a VBOX Kali VM, I would help but I've never passed a Ethernet port thru. But should be the same options for VirtualBox software cross platforms.
  14. When I use it on a VM or VBox setup, I use a USB to Ethernet Adapter and pass the USB through to the VM. Good Luck.
×
×
  • Create New...