导语:One-Lin3r是由Metasploit中的网络交付模块启发的简单轻量级框架。

【点击观看操作演示】
渗透测试操作流程:
- Reverser: Give it IP & port and it returns a reverse shell liner ready for copy & paste.
- Dropper: Give it an uploaded-backdoor URL and it returns a download-&-execute liner ready for copy & paste.
- Other: Holds liners with general purpose to help in penetration testing (ex: Mimikatz, Powerup, etc...) on the trending OSes (Windows, Linux, and macOS) "More OSes can be added too".
工具特性:
- 以完整名称或部分名称搜索数据库中的任意一行你想要查询的资料;
- 您可以按照以下步骤创建一个“.liner”文件。它将被添加到框架中;
- 自动完成任何框架命令和;
- 命令行参数可以用来给框架一个资源文件来加载和执行自动化;
- 如果添加了执行命令而不重启框架,则可以重新加载数据库。
- 只需在有效载荷文件夹中创建一个文件夹并在那里创建一个“.liner”文件,就可以将任何平台添加到有效载荷数据库。
有效载荷数据库现在并不大,因为这是第一版。

用法:
optional arguments:
-h, --help show this help message and exit
-r Execute a resource file (history file).
-q Quit mode (no banner).
-x Execute a specific command (use ; for multiples).
框架命令:
Command Description
-------- -------------
help/? Show this help menu
list/show List payloads you can use in the attack.
search <Keyword> Search payloads for a specific one
info <payload> Get information about an available payload
use <payload> Use an available payload
banner Display banner
check Prints the core version and database version then check for them online.
reload/refresh Reload the payloads database
save_history Save command line history to a file
history Display command line most important history from the beginning
exit/quit Exit the framework
安装和使用:
python2.x 和 python3.x 都兼容(还是推荐python3.x)
Linux/Windows
安装
对于Windows:
cd One-Lin3r-master
python -m pip install -r win_requirements.txt
python One-Lin3r.py -h
对于Linux:
git clone https://github.com/D4Vinci/One-Lin3r.git
chmod 777 -R One-Lin3r
cd One-Lin3r
pip install -r requirements.txt
python One-Lin3r.py -h
GitHub不定时更新:https://github.com/D4Vinci/One-Lin3r