黑客技术
点击放大
evilgrade - Evilgrade is a modular framework that allows the u
项目说明
<p align="center" >
<a href=" target="_blank"><img src="
</p>
<p align="center" >
Faraday Security Research
-- | ISR-e | www.faradaysec.com | --
</p>
.:: [BRIEF O] ::.
E is a modular 框架 that allows the user to take ad of poor upgrade implementations by injecting fake updates.
It comes with pre-made binaries (agents), a working default configuration for fast pentests, and has it's own WebServer and DNSSer.
Easy to set up new settings, and has an autoconfiguration when new binary agents are set.
##### * When should I use e?
This 框架 comes into play when the attacker is able to make hostname redirections (manipulation of 's dns traffic), and such thing can be done on 2 scenarios:
##### Internal scenery:
##### External scenery:
##### * How does it work?
E works with modules, in each module there's an implemented structure which is needed to emulate a fake update for an specific application/system.
##### * What OS are supported?
ISR-E is crossplatform, it only depends of having an appropriate payload for the right target platform to be exploited.
#### Implemented modules:
-------------------
* /docs/CHANGES
.:: [MAIN USAGE] ::.
It works similar to an IOS console
List implemented modules
#### Configure a specified module
#### Show all .
#### field contains the domains that our webserver is going to emulate for us.
#### Show options of current module.
#### agent: This is our fake update binary, we have to set the path to where it's located or implement a dynamic fake update binary generation (see AD).
#### Start services (DNS 服务端 and WebServer)
#### Show status and logs
.:: [DEEP USAGE] ::.
Commands
#### configure / conf - Configure <module-name>
Example:
-------
Example:
-------
.:: [AD] ::.
Each module has special options, but the "agent" field is always present.
The agent is our fake update binary, we have to set the path to where it's located or implement a dynamic fake update binary generation.
[Dynamic fake update binary] allows the execution of an external command to generate our binary, for example using msfpayload of metasploit 框架.
With this feature we can generate any payload of metasploit or use an external interface to create the binary.
Example 1:
In this case for every required update binary we generate a fake update binary with the payload "windows/shell_re"
using a reverse shell to connect at address 192.168.233.2 port 4141.
The label <%OUT%><%OUT> is a special tag to detect where the output binary is going to be generated.
E detects the usage of "dynamic fake update binary feature" due to having a sentence between squared brackets '[]'
Inside that brackets we have a string that is also between brackets "" that is compiled using perl.
For example if we use:
then every time we get a binary request, e will compile the line and execute the final string "./generatebin -o /tmp/update(random).exe"
generating different agents.
An easy alternative, but not dynamically, could be to generate the payload directly from msfpayload on a terminal and assign it manually to the configuration of the module.
Example 2:
(Outside e)
(Inside e)
After our payload was generated, we leave a multi handler listening on the pre assigned LHOST.
(Outside e)
.:: [MODULE DE] ::.
Module de is very simple. Since e is based on modules, you just have to use a package .pm (perl module).
In this case we are going to describe the sunja module (comments with #):
.:: [TIPS] ::.
1) Don't forget to run e with an user that has pri to create listening sockets,
otherwise you won't be able to use e's Services.
2) E you modify a module with e running don't forget to 'reload' them.
3) Set the binary 'agents' before starting services because there are some fields that e
will fill out for you (agentmd5, agentsha256, and agentsize) that can't be done with them already running.
4) If you're using a dynamic response with such as: <%AGENTSIZE%>, <%AGENTMD5%>, <%URL\_FILE%>, <%URL\_FILE\_EXT%>, or custom ones defined at the options section, don't forget to set *parse* on 1.
5) Same goes for injecting an agent, you must enable de *bin* flag on 1.
6) If you want to make plaintext responses using HTTP use the *cheader* flag. Example below:
.:: [REQUIREMENTS] ::.
Perl Modules
.:: [MORE INFORMATION] ::.
This 框架 was presented in the following security conferences:
.:: [AUTHOR] ::.
Francisco Amato
famato+at+faradaysec+dot+com
项目信息
开发语言：Perl
Star 数：1328
技术要点
该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕E is a modular 框架 that allows the user to take ad of poor upgrade implementations by injecting fake updates.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包，解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证，避免影响生产系统。
免责声明
本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。
| 资源标题 | evilgrade - Evilgrade is a modular framework that allows the u |
| 所属分类 | 黑客技术 |
| 发布作者 | admin |
| 发布时间 | 2026-10-05 22:13:27 |
| 下载权限 | 免费下载 |
| 附件数量 | 2 个下载链接 |
| 浏览次数 | 111 |
| 讨论数量 | 0 |
| 主题状态 | 正常讨论中 |