Commit 53bb913

Repositorybojemoi
Branchmain
AuthorBetty
Hash53bb913032eaf510d856276051054227cde91f27

Description

  • Restructure main loop: SEQ1 brute force (paramiko password-only) → SEQ2 vuln search
  • SEQ1 debug: reads host_debug sequentially, forced password auth via paramiko (look_for_keys=False, allow_agent=False)
  • deploy_c2_callback(): detect arch via uname -m, msfvenom ELF, SFTP to /var/tmp/.update-notifier, nohup exec, cron persistence (*/20 + @reboot)
  • SEQ2: per-service exploit loop (build_targeted_exploits per service, break on session)
  • Fix exploit selection: HTTP terms always added when ports 80/443/8080/8443 open
  • Fix build_profile_filter: HTTP path patterns added when HTTP ports open
  • Fix pivot: ShellSession.run_with_output() requires end_strs positional arg — branch on stype (meterpreter vs shell) for network enum calls
  • Rename faraday_ok → dojo_ok in uzi_scan_log (faraday removed, DefectDojo active)
  • Add paramiko pip install in Dockerfile.borodino-msf (after adduser, cache preserved)
  • Add dedicated uzi SEQ1/SEQ2 chapter in ARCHITECTURE.md

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

MMMAbbRooCrrHooIddTiiEnnCoT/UDtRohEce.kamerdrmf_iulzei.borodino-msf

Diff Summary

Abb3RooCrrfHooiIddlTiieEnnsCoT/cUDthRohaEcen.kagmeredrmdf_,iulz4ei8.7boirnosdeirntoi-omnssf(+,141599293+deletions(-)