diff --git a/docs/en/module/Execution_CommandAndScriptingInterpreter_DeployKit.md b/docs/en/module/Execution_CommandAndScriptingInterpreter_DeployKit.md index 952c204..05679aa 100644 --- a/docs/en/module/Execution_CommandAndScriptingInterpreter_DeployKit.md +++ b/docs/en/module/Execution_CommandAndScriptingInterpreter_DeployKit.md @@ -1,10 +1,10 @@ -# Deploy Kit Suite to Target Host +# Deploy Kit Package to Linux Host ![img.png](img/Execution_CommandAndScriptingInterpreter_DeployKit/img.png) ## Main Features -The Kit suite currently includes the following tools: +The Kit package currently includes the following tools: - nmap (includes fingerprint identification/OS detection) - python3.12 (includes impacket) @@ -12,7 +12,9 @@ The Kit suite currently includes the following tools: ## Operation Method -- After successful module execution, you can run the tools from the kit suite on the target host +- After the module is executed successfully, you can use the tools in the kit package on the target host +- After the Kit package is deployed, it will automatically add the Python Interpreter to the host information, which can be viewed in the host information. When running related modules, this Python Interpreter will be used automatically + - nmap ![img_1.png](img/Execution_CommandAndScriptingInterpreter_DeployKit/img_1.png) @@ -23,4 +25,4 @@ The Kit suite currently includes the following tools: - socat -![img_3.png](img/Execution_CommandAndScriptingInterpreter_DeployKit/img_3.png) \ No newline at end of file +![img_3.png](img/Execution_CommandAndScriptingInterpreter_DeployKit/img_3.png) diff --git a/docs/en/module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md b/docs/en/module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md index ef22abb..906f0bd 100644 --- a/docs/en/module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md +++ b/docs/en/module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md @@ -1,6 +1,7 @@ # Deploy Kit Package to Windows Host -![img.png](img/Execution_CommandAndScriptingInterpreter_DeployKitWindows/img.png) +![img_2.png](img/Execution_CommandAndScriptingInterpreter_DeployKitWindows/img_2.png) + ## Main Features The Kit package currently includes the following tools: @@ -9,8 +10,8 @@ The Kit package currently includes the following tools: ## Operation Method -- After the module is successfully executed, you can run the tools in the kit package on the target host -- python3.13 +- After the module is executed successfully, you can use the tools in the kit package on the target host +- After the Kit package is deployed, it will automatically add the Python Interpreter to the host information, which can be viewed in the host information. When running related modules, this Python Interpreter will be used automatically -![img.png](img/Execution_CommandAndScriptingInterpreter_DeployKitWindows/img_1.png) -![img.png](img/Execution_CommandAndScriptingInterpreter_DeployKitWindows/img_2.png) +![img.png](img/Execution_CommandAndScriptingInterpreter_DeployKitWindows/img.png) +![img_1.png](img/Execution_CommandAndScriptingInterpreter_DeployKitWindows/img_1.png) diff --git a/docs/en/module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md b/docs/en/module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md index 1203fa3..04af3b2 100644 --- a/docs/en/module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md +++ b/docs/en/module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md @@ -14,7 +14,7 @@ The script to be executed can be uploaded to the server via the `File Explorer`. - Upload the Python script you want to execute to the `File Explorer` -> Only single script are supported, and script arguments are not supported +> Only single script are supported - Select the Python script you want to execute and run it diff --git a/docs/en/release/3_1_7_Python_Is_All_Your_Need.md b/docs/en/release/3_1_7_Python_Is_All_Your_Need.md new file mode 100644 index 0000000..3fb9deb --- /dev/null +++ b/docs/en/release/3_1_7_Python_Is_All_Your_Need.md @@ -0,0 +1,79 @@ +--- +title: 3.1.7 - Python Is All You Need +description: +cover: /og/img_7.png +--- + +# 3.1.7 - Python Is All You Need + +![img.png](3_1_7_Python_Is_All_Your_Need/img.png) + +## Multiple Kit Suite Modules + +- Added `Deploy Kit Suite to Windows Host` module, for detailed information refer + to [Deploy Kit Suite to Windows Host](../module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md) +- Updated `Deploy Kit Suite to Linux Host` module, for detailed information refer + to [Deploy Kit Suite to Linux Host](../module/Execution_CommandAndScriptingInterpreter_DeployKit.md) +- Added `Windows Host Information Collection (Kit)` module, for detailed information refer + to [Windows Host Information Collection (Kit)](../module/Discovery_Multi_LocalWindowsInfoCollect.md) +- Added `Internal Network Port Scanning (Kit)` module, for detailed information refer + to [Internal Network Port Scanning (Kit)](../module/Discovery_NetworkServiceScanning_PortScanByPythonKit.md) +- Added `Internal Network Port Scanning and Service Recognition (Kit)` module, for detailed information refer + to [Internal Network Port Scanning and Service Recognition (Kit)](../module/Discovery_NetworkServiceScanning_PortScanWithServiceByPythonKit.md) +- Added `Execute Python Script (Kit)` module, for detailed information refer + to [Execute Python Script (Kit)](../module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md) + +## Intelligence Analysis Agent + +- Updated agent prompts +- Intelligence information collected by `Deploy Kit Suite to Windows Host` can be analyzed by the agent to provide next-step action plans + +## Phishing Simulation Agent + +- Updated agent prompts to better align with real-world phishing simulations targeting specific company employees +- Now supports sending emails to multiple addresses at once + +## Agent Command Center + +- Added `Command Center` feature, allowing users to quickly input preset instructions (prompts) or custom instructions (prompts) and send them to agents for execution + +![img.png](3_1_7_Python_Is_All_Your_Need/img_2.png) + +## Optimizations + +- UI/UX improvements +- Updated metasploit-framework to the latest version (6.4.70) + +## Bug Fixes + +- Fixed `Session Monitor` notification issue [issues 249](https://github.com/FunnyWolf/Viper/issues/249) + +## Developer Notes + +The major update in this version is the support for deploying Kit Suite on Windows, enabling Python usage on Windows hosts. The implementation involves packaging a prepared Python +interpreter using 7zip into a Kit Suite, which can then be extracted and used on Windows hosts. + +Compared to the previous method of executing Python scripts in memory, this approach allows the use of more Python libraries such as requests, wmi, etc., with the potential to add +even more Python libraries in the future. It also offers high stability, and running scripts won't affect the Session. + +If Python scripts don't involve sensitive information like Shellcode, they generally won't trigger antivirus software even when saved to disk. + +The current Viper version now supports Python environment deployment on both Windows and Linux, so existing port scanning scripts have been optimized and related modules have been +added to utilize the Python environment in the Kit Suite. + +`Windows Host Information Collection (Kit)` is a pure Python implementation for local information gathering module that can collect basic information from Windows hosts in one go, +including system information, process list, network connections, desktop file list, installed software list, etc. The collected information can be analyzed by agents to provide +next-step action plans. + +Additionally, the `Execute Python Script (Kit)` module has been added to facilitate users in executing custom scripts using the Python environment in the Kit Suite. + +The `Intelligence Analysis Agent` mainly adapted prompts for information collected by `Windows Host Information Collection (Kit)`, adding more targeted instructions to help the +agent better analyze intelligence information and provide next-step action plans. + +To make the `Phishing Simulation Agent` more practical, company-related prompts were added to the instructions, and the email sending API now includes the ability to send to +multiple email addresses at once, avoiding multiple Tools calls by the agent. + +The `Command Center` feature is new, allowing users to quickly input preset instructions (prompts) or custom instructions (prompts) and send them to agents for execution. This +feature can improve user work efficiency and reduce repetitive operations. + +Finally, there are regular UI/UX optimizations and bug fixes, as well as an update to the latest version of metasploit-framework. diff --git a/docs/en/release/3_1_7_Python_Is_All_Your_Need/img.png b/docs/en/release/3_1_7_Python_Is_All_Your_Need/img.png new file mode 100644 index 0000000..2b86723 Binary files /dev/null and b/docs/en/release/3_1_7_Python_Is_All_Your_Need/img.png differ diff --git a/docs/en/release/3_1_7_Python_Is_All_Your_Need/img_2.png b/docs/en/release/3_1_7_Python_Is_All_Your_Need/img_2.png new file mode 100644 index 0000000..b1e5559 Binary files /dev/null and b/docs/en/release/3_1_7_Python_Is_All_Your_Need/img_2.png differ diff --git a/docs/public/og/img_7.png b/docs/public/og/img_7.png new file mode 100644 index 0000000..2b86723 Binary files /dev/null and b/docs/public/og/img_7.png differ diff --git a/docs/zh/module/Execution_CommandAndScriptingInterpreter_DeployKit.md b/docs/zh/module/Execution_CommandAndScriptingInterpreter_DeployKit.md index 2474196..1a38f27 100644 --- a/docs/zh/module/Execution_CommandAndScriptingInterpreter_DeployKit.md +++ b/docs/zh/module/Execution_CommandAndScriptingInterpreter_DeployKit.md @@ -13,6 +13,8 @@ Kit套件当前包含以下工具: ## 操作方法 - 模块执行成功后,即可在目标主机中执行kit套件中的工具 +- Kit套件部署后,会自动将Python Interpreter添加到主机信息中,可以在主机信息中查看,运行相关模块时会自动使用该Python Interpreter + - nmap ![img_1.png](img/Execution_CommandAndScriptingInterpreter_DeployKit/img_1.png) diff --git a/docs/zh/module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md b/docs/zh/module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md index 96cad23..a630374 100644 --- a/docs/zh/module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md +++ b/docs/zh/module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md @@ -1,6 +1,7 @@ # 部署Kit套件到Windows主机 ![img_2.png](img/Execution_CommandAndScriptingInterpreter_DeployKitWindows/img_2.png) + ## 主要功能 Kit套件当前包含以下工具: @@ -10,7 +11,7 @@ Kit套件当前包含以下工具: ## 操作方法 - 模块执行成功后,即可在目标主机中执行kit套件中的工具 -- python3.13 +- Kit套件部署后,会自动将Python Interpreter添加到主机信息中,可以在主机信息中查看,运行相关模块时会自动使用该Python Interpreter ![img.png](img/Execution_CommandAndScriptingInterpreter_DeployKitWindows/img.png) ![img_1.png](img/Execution_CommandAndScriptingInterpreter_DeployKitWindows/img_1.png) \ No newline at end of file diff --git a/docs/zh/module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md b/docs/zh/module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md index fe4cb68..b95a4fd 100644 --- a/docs/zh/module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md +++ b/docs/zh/module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md @@ -14,6 +14,6 @@ - 上传需要执行的Python脚本到`文件列表` -> 只支持执行单个脚本且不支持脚本参数 +> 只支持执行单个脚本 - 选择需要执行的Python脚本并运行 diff --git a/docs/zh/release/3_1_7_Python_Is_All_Your_Need.md b/docs/zh/release/3_1_7_Python_Is_All_Your_Need.md new file mode 100644 index 0000000..2f80a52 --- /dev/null +++ b/docs/zh/release/3_1_7_Python_Is_All_Your_Need.md @@ -0,0 +1,65 @@ +--- +title: 3.1.7 - 有Python就够了 +description: +cover: /og/img_7.png +--- + +# 3.1.7 - 有 Python 就够了 + +![img.png](3_1_7_Python_Is_All_Your_Need/img.png) + +## 多个 Kit 套件模块 + +- 新增`部署Kit套件到Windows主机`模块,详细信息参考[部署Kit套件到Windows主机](../module/Execution_CommandAndScriptingInterpreter_DeployKitWindows.md) +- 更新`部署Kit套件到Linux主机`模块,详细信息参考[部署Kit套件到Linux主机](../module/Execution_CommandAndScriptingInterpreter_DeployKit.md) +- 新增`Windows主机信息收集 (Kit)`模块,详细信息参考[Windows主机信息收集 (Kit)](../module/Discovery_Multi_LocalWindowsInfoCollect.md) +- 新增`内网端口扫描 (Kit)`模块,详细信息参考[内网端口扫描 (Kit)](../module/Discovery_NetworkServiceScanning_PortScanByPythonKit.md) +- 新增`内网端口扫描与服务识别 (Kit)`模块,详细信息参考[内网端口扫描与服务识别 (Kit)](../module/Discovery_NetworkServiceScanning_PortScanWithServiceByPythonKit.md) +- 新增`执行Python脚本 (Kit)`模块,详细信息参考[执行Python脚本 (Kit)](../module/Execution_CommandAndScriptingInterpreter_RunPythonScriptByKit.md) + +## 情报分析智能体 + +- 更新智能体提示词 +- `部署Kit套件到Windows主机`收集到的情报信息可以使用智能体进行分析,并给出下一步行动计划 + +## 钓鱼模拟智能体 + +- 更新智能体提示词,更符合实战中针对固定公司员工的钓鱼模拟 +- 当前支持一次性给多个邮箱发送邮件 + +## 智能体-指令中心 + +- 新增`指令中心`功能,用户可以快捷输入预设指令(提示词)或自定义指令(提示词),并发送给智能体执行 + +![img.png](3_1_7_Python_Is_All_Your_Need/img_1.png) + +## 优化 + +- UI/UX优化 +- 更新metasploit-framework至最新版本(6.4.70) + +## Bug修复 + +- 修复`Session监控`不发送通知问题 [issues 249](https://github.com/FunnyWolf/Viper/issues/249) + +## 开发者笔记 + +新版本的一个大的更新是支持Windows部署Kit套件,也就是支持在Windows主机中使用python.实现方式是将准备好的Python解释器使用7zip打包成Kit套件,然后在Windows主机中解压即可使用. + +相比于之前内存执行Python脚本的方式,这种方式可以使用更多的Python库,比如requests,wmi等,后期还可以添加更多的Python库.而且有很高的稳定性,运行脚本不会对Session造成影响. + +如果Python脚本不涉及Shellcode等敏感信息,即使脚本落地也基本不会触发杀软. + +当前Viper版本已经支持Windows和Linux的Python环境部署,所以将已有的端口扫描脚本进行了优化,并添加了相关模块,使其可以使用Kit套件中的Python环境. + +`Windows主机信息收集 (Kit)`是一个纯python实现的本机信息收集模块,可以一次性收集到Windows主机的基本信息,包括系统信息、进程列表、网络连接、桌面文件列表、安装软件列表等.收集到的信息可以使用智能体进行分析,并给出下一步行动计划. + +另外添加了`执行Python脚本 (Kit)`模块,方便用户使用Kit套件中的Python环境执行自定义脚本. + +`情报分析智能体`主要是针对`Windows主机信息收集 (Kit)`收集到的信息进行了提示词适配工作,提示词加入了更有针对性的指示,使得智能体可以更好地分析情报信息,并给出下一步行动计划. + +`钓鱼模拟智能体`为了更加贴近实战,在提示词中加入了公司的相关提示,邮件发送API也加入一次性发送多个邮箱的功能,避免智能体多次调用Tools. + +`指令中心`功能是一个新的功能,用户可以快捷输入预设指令(提示词)或自定义指令(提示词),并发送给智能体执行.这个功能可以提高用户的工作效率,减少重复的操作. + +最后是常规的UI/UX优化和Bug修复,以及更新metasploit-framework至最新版本. diff --git a/docs/zh/release/3_1_7_Python_Is_All_Your_Need/img.png b/docs/zh/release/3_1_7_Python_Is_All_Your_Need/img.png new file mode 100644 index 0000000..2b86723 Binary files /dev/null and b/docs/zh/release/3_1_7_Python_Is_All_Your_Need/img.png differ diff --git a/docs/zh/release/3_1_7_Python_Is_All_Your_Need/img_1.png b/docs/zh/release/3_1_7_Python_Is_All_Your_Need/img_1.png new file mode 100644 index 0000000..f954a53 Binary files /dev/null and b/docs/zh/release/3_1_7_Python_Is_All_Your_Need/img_1.png differ