Red Team Operations | Backdoor Finder

[MoonL1gth Emerald Member Posts:94 Threads:63 Reputation 0]

1. Establishes a Remote Destop session (RDP) with the specified hosts and sends key presses to launch the accessibility tools within the Windows Login screen. -  https://github.com/linuz/Stic
   
2. This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result - https://github.com/ztgrace/sticky_keys_hunter
   
3. A set of python2 scripts for sweeping a list of IPs for the presence of both SMB and RDP versions of the DOUBLEPULSAR implant that was released by the Shadow Brokers. Supports both single IP checking and a list of IPs in a file with multi-threading support. -  https://github.com/WithSecureLabs/double...ion-script