-
Notifications
You must be signed in to change notification settings - Fork 46
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add basic netstat functionality #40
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is awesome thank you so much! I added a little bit of minor feedback on some things. I tested this on Windows and it was working great.
I can throw together a browser script for the output to make it display better in the Mythic console.
Payload_Type/thanatos/thanatos/mythic/agent_functions/netstat.py
Outdated
Show resolved
Hide resolved
Appreciate the feedback here @MEhrn00 ! I'll get some updates pushed up in the next day or two. First time working with Rust so definitely some gaps on my end 😅 |
…ec<u32>, remove itertools
Updates have been pushed. As with the original code, some testing on Linux looks positive 🤞 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sweet! This looks great. I have a browser script for this ready and can get it all merged in 👍🏻
Add basic netstat functionality
Okay I merged it in and added it to the latest release Thanatos v0.1.10. Thanks for this! 🙏 |
This PR adds basic
netstat
functionality to Thanatos in order to facilitate enumeration of local network connections and sockets. This is accomplished using https://github.com/ohadravid/netstat2-rs, and data is returned to Mythic in JSON format for easy manipulation.Invocation does not currently accept any additional parameters, and output is returned to Mythic in a JSON format so it can be easily dumped for further external automation/manipulation. Example:
Please note that I have not been able to properly test this on Windows, however this has been validated through testing on multiple Linux systems.
<3 from GitHub's Red Team