Gray-World.net Team

GRAY-WORLD.NET TEAM
¼ÆËã»úÍøÂç°²È«¼¼Êõ ²»Í¬Ñ°³£µÄÍøÂç·ÃÎÊ¿ØÖÆÏµÍ³ÓØ»Ø¼¼Êõ

Soon her eye fell on a little glass box that was lying under the table: she opened it, and found in it a very small cake, on which the words "EAT ME" were beautifully marked in currants. "Well, I'll eat it," said Alice, "and if it makes me grow larger, I can reach the key; and if it makes me grow smaller, I can creep under the door: so either way I'll get into the garden, and I don't care which happens!"

Lewis Carroll "Alice In Wonderland"

	ÍøÕ¾Ê×Ò³ \| ¿ª·¢ÏîÄ¿ \| ¼¼ÊõÂÛÎÄ \| ×ÔÓÉÂÛÌ³ \| ¹ØÓÚÎÒÃÇ \| ÈÈÃÅÁª½Ó \| ÔÞÖúÖ§³Ö
		¿ª·¢ÏîÄ¿

¿ª·¢ÏîÄ¿

Active port forwarder ÔËÓÃ°²È«Ì×½Ó×ÖÐÒéÊµÏÖ°²È«ËíµÀ¡£ÕâÊÇ×¨ÎªÄÇÐ©²»¾ßÓÐÍâ²¿IPµØÖ·È´ÈÔÏëÊµÏÖ»¥ÁªÍø·þÎñµÄÈËÉè¼ÆµÄ¡

Cctt, "Covert Channel Tunneling Tool" - ¹ËÃûË¼Òå£¬ÕâÊÇÒ»ÖÖÒþ²ØÍ¨µÀ¹¤¾ß¡£ËûÌá¹©¼¸ÖÖ¿ÉÐÐ·½·¨À´ÊµÏÖÔÊÐíÔÚÒÑ±»ÍøÂç·ÃÎÊ¿ØÖÆÏµÍ³ÊÚÈ¨µÄÊý¾ÝÁ÷ÉÏ´´½¨²¢½¨Á¢ÈÎÒâÊý¾ÝÁ÷´«ÊäÐÅµÀ¡£

Cooking channels - from the paper How to cook a covert channel is a set of two python scripts (CGI and client) allowing to build a communication channel over HTTP cookies.

Firepass - Ò»ÖÖËíµÀ¼¼Êõ¹¤¾ß£¬Í¨¹ýËü¿ÉÒÔ±Ü¿ª·À»ðÇ½µÄ¹æÔòÔ¼Êø£¬½«Êý¾ÝÁ÷·â×°ÔÚºÏ·¨µÄHTTP POSTÇëÇóÖÐ¡£ÈÎºÎ»ùÓÚTCP/UDPÐÒéµÄ×ÓÐÒé¿ÉÒÔÍ¨¹ýËüÀ´´©Ô½HTTP´úÀí·þÎñÆ÷¶ÔHTTPÐÒéµÄÑÏ¸ñÉó²é¡£µ½Ä¿Ç°ÎªÖ¹£¬¿Í»§¶ËºÍ·þÎñÆ÷¶Ë½öÓÃPerlÓïÑÔ±àÐ´¡£·þÎñÆ÷¶Ë×÷ÎªÒ»¸öCGI½Å±¾ÔËÐÐÔÚWEB·þÎñÆ÷ÉÏ¡£

g00gle CrewBots - from the paper g00gle CrewBots is a set of two POC python scripts allowing set up communication channels over the g00gle.

MsnShell - Ò»ÖÖÒþ²ØÍ¨µÀ¹¤¾ß£¬ÍâÍøµÄ¼ÆËã»ú¿ÉÒÔ±Ü¿ª·À»ðÇ½µÄÑÏ¸ñÊý¾ÝÉó²é£¬Ô¶³Ì¿ØÖÆÒ»Ì¨ÄÚÍø¼ÆËã»ú¡£Ëü°ÑShellÃüÁî/ÏìÓ¦Òþ±ÎµØ·â×°ÔÚMSNÐÒéÖÐ´«ËÍ³öÈ¥¡£±ØÒªÊ±»¹¿ÉÒÔ½«MSNÐÒé°ü·â×°ÔÚHTTPÐÒéÖÐ´«ËÍ³öÈ¥¡£ËüÎÞÐè°²×°¿Í»§¶Ë£¬Ö»ÓÉÒ»¸ö¿ÉÖ´ÐÐ³ÌÐò×é³É·þÎñ¶Ë¡£

Wsh, "Web Shell" - Ô¶³Ì¿ØÖÆUNIX/WIN SHELL£¬Ëü»ùÓÚHTTP/HTTPSÐÒé£¬´ËÈí¼þ°üº¬Á½¸ö·Ö±ð¶ÔÓ¦Æä¿Í»§¶Ë/·þÎñÆ÷¶ËµÄPERL½Å±¾ºÍÒ»¸ö·þÎñ¶ËCÓïÑÔ³ÌÐò¡£¿Í»§¶Ë½Å±¾Óë¿ØÖÆÌ¨ÖÕ¶ËÓÃ·¨ÏàËÆ¡£·þÎñÆ÷¶ËÒÔÒ»¸öCGI½Å±¾µÄÐÎÊ½³öÏÖÔÚÄ¿±ê£¨ÊÜ¿Ø£©Ö÷»úÉÏ¡£

ËíµÀ/Òþ²ØÍ¨µÀÌ½²â£º

Cctde - ÕâÊÇ¡°»ÒÉ«µÄÊÀ½ç¡±Ð¡×éµÄµÚÒ»¸öÒþ²ØÍ¨µÀÌ½²âÖ´ÐÐ³ÌÐò¡£´Ë³ÌÐòÊÇ´ËÇ°µÄÒ»ÆªÃûÎª¡°»ùÓÚHTTPÐÒéµÄÒþ²ØÍ¨µÀ/ËíµÀµÄÌ½²â¼¼Êõ£ºGWÖ´ÐÐÔÀíÉè¼Æ¡±Ä¿Ç°£¬Ëü±»Éè¼ÆÎªÒ»¸öSnortµÄºó¶Ë·ÖÎöÊØ»¤½ø³Ì¡£Snort - Ò»ÖÖÍøÂçÈëÇÖÌ½²âÏµÍ³¹¤¾ß£¬ÄÜ¹»Ìá¹©ÊµÊ±µÄ´«Êä·ÖÎöÒÔ¼°Êý¾Ý°ü¼ÍÂ¼»úÖÆ¡£Ëü»¹Ìá¹©ÐÒé·ÖÎöÀ´Âú×ã²éÕÒ/Æ¥Åä£¬Ëü±»ÓÃÓÚÌ½²â´óÁ¿µÄ¹¥»÷/Ì½²â¡£

NACS bypassing (Proof Of Concept)

Skeeve is a POC tool you can use to simply create an ICMP tunnel between two computers, which may be located in different networks and separated by a firewall. Skeeve utilizes ICMP packets and IP address spoofing technology to create a data channel in order to redirect TCP connections inside this channel.

HttPostNG is a funny poc to convert a text file into one or several png images and send them to a remote CGI in HTTP POST requests so that the network based "detector" has to figure if all POST images it monitors are legitimate or suspicious.

Trt-scapy is another implementation for the 0trace tool based on scapy.

ÆäËûÔÓÏî£º

etc/passwd - ´ÓÊÕ¼¯googleÉÏµÄ³£ÓÃ¶ñÒâÎÄ¼þÃû¹Ø¼ü×ÖÁÐ±í¡£

µ±Ç°ÏîÄ¿£º

ÈôÒªÁË½â¸ü¶à£¬Çë·ÃÎÊ:
http://team.gray-world.net/public/.

MsnShell - Ò»ÖÖÒþ²ØÍ¨µÀ¹¤¾ß£¬ÍâÍøµÄ¼ÆËã»ú¿ÉÒÔ±Ü¿ª·À»ðÇ½µÄÑÏ¸ñÊý¾ÝÉó²é£¬Ô¶ ³Ì¿ØÖÆÒ»Ì¨ÄÚÍø¼ÆËã»ú¡£Ëü°ÑShellÃüÁî/ÏìÓ¦Òþ±ÎµØ·â×°ÔÚMSNÐÒéÖÐ´«ËÍ³öÈ¥¡£±ØÒªÊ±»¹¿É ÒÔ½«MSNÐÒé°ü·â×°ÔÚHTTPÐÒéÖÐ´«ËÍ³öÈ¥¡£
[¸ü¶à]

Team member's sites: www.infosecwriters.com/ hhworld/ The Hitchhiker's World e-zine




	GNU General Public License GNU Free Documentation License	IRC://irc.0x557.org:3331/gray-world.net CHANGELOG, MIRRORS, LEGAL NOTICE