DeathMetal - Red team & penetration testing tools to exploit th

项目说明

DeathMetal

"We are here to make ~~coffee~~ APT metal. We will make e metal. Blacker than the blackest black times infinity."

DeathMetal is a suite of tools that interact with Intel AMT. Its kind of a foray into a world filled with intrigue and re puzzles with useful results.

Since this is super serious, tools are named after Metalocalypse characters.

Tools are prefixed with "dm_" to help with tab-completion and recognition.
* dm_pickles - Duckyscript interpreter that communicates over AMT KVM (vnc) and injects keystrokes.
* dm_toki - IDE-R implementation - lets you attach floopy and CD images remotely to the target computer.
* dm_nathan - Is a cli that allows for configuring AMT channel
* dm_rockso - Presence and scanner, can help you find AMT capable systems regardless of pro status. (works even if explicitly not-enabled)

Code that is common to more than one tool lives in a library called 'Charles', at the moment it can pretty much just help set up Redirection service stuff.

Getting Started

You may want to run in a env and install any dependencies that come up - the code is in python3.

Prerequisites

Python3 and pip

Installing

PIP

Built With

Contributing

Authors

* Teissler - *Initial work* - Teissler

See also the list of contributors who participated in this project.

License

This project is licensed under a modified MIT License - see the LICENSE file for details

Acknowledgments

* Jimmy Twotimes for pointing me at the scanning capabilities - this became rockso, thanks man!
* Clutchisback for the beef hooks and help with the blog post - greatly appreciated.
* Soen knows what he did.
* Coalfire for the opportunity

项目信息

开发语言：Python

Star 数：260

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Red team & penetration testing tools to exploit the capabilities of Intel AMT展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。