Sign in Join

Live chat for Free Pascal, Lazarus, Delphi and every Pascal programmer.

Catalog · How the catalog works

Random project

Revenant

View on GitHub

Anyone may press Interesting, signed in or not. It helps others find this project.

Member rating

No ratings yet.

Sign in to rate this project.

README

https://t.me/join0xsp https://www.lazarus-ide.org/ https://discord.gg/Xsdxxkm https://twitter.com/zux0x3a

Revenant

Considered as a reliable method for remotely accessing systems via the Server Message Block (SMB) protocol for both joined and non-joined domain computers. Used to execute command and payloads into other computers.

  • Establish an SMB connection into the chosen Driver Share.
  • Copy the desired payload and pushing it in to share. ( any Writeable share driver )
  • Using Lateral movement technique to execute a payload by tasking scheduling (OLE Objects)

In general, this tool will allow both users and administrators to push malicious payloads into compromised shares while using the Task Scheduling interface (OLE) to execute uploaded binaries or scripts,the tool commonly used to move east-west (Lateral Movement ) between joined domain computers.

features

  • undetectable by AV.
  • upload executable files or scripts into any writeable share.
  • moving laterally under the radar with some enhancement in Task Scheduling Library taskschd.dll
  • supports all windows operating systems.
  • supports automatic exploitation or custom date and time task scheduling.

usage

pascal
-h --remote hostname or IP Address.
-u --valid username for authentication
-p --valid account password 
-d --specify Domain name FQDN
-s --share folder or driver e.g c,d,admin,user,uploads..etc
-c --select local payload as executable format or script to upload into target host
-t --[OPTIONAL] use this option in order to run the payload at specific date and time
Example: Z:\home\zux0x3a\Revenant\project1.exe -h host -u test -p "admini" -d "0xsp" -s share -c payload.[EXE,BAT,VBS]
 
Manual Task: Z:\home\zux0x3a\Revenant\project1.exe -h host -u test -p "admini" -d "0xsp" -s share -c payload.[EXE,BAT,VBS] -t (2020\09\11 13:00:00)

Compiling

this project has been built using Lazarus IDE with FPC 3.2.0

  • Download Lazarus IDE and FPC
  • Load project folder into IDE
  • navigate into Run -> Build

Community

the project developed by Lawrence amer with much thanks to Lazarus Forums for imported Libraries to make this tool much powerful. for more upcoming research please make sure to bookmark https://0xsp.com as your favorite site.