This commit is contained in:
SkyperTHC 2022-10-16 18:41:27 +01:00
parent a3ffd7529e
commit d667b583b5
No known key found for this signature in database
GPG Key ID: A9BD386DF9113CD6
3 changed files with 15 additions and 6 deletions

@ -64,6 +64,7 @@ RUN apt-get update -y \
&& /pkg-install.sh NET apt-get install -y --no-install-recommends \
dnsutils \
ftp \
iftop \
iputils-tracepath \
gsocket \
nano \
@ -72,10 +73,13 @@ RUN apt-get update -y \
manpages-dev \
rsync \
sudo \
tcpdump \
traceroute \
wireguard-tools \
wget \
whois \
&& /pkg-install.sh HACK apt-get install -y --no-install-recommends \
&& DEBIAN_FRONTEND=noninteractive /pkg-install.sh HACK apt-get install -y --no-install-recommends \
dnsmap \
hydra \
irssi \
nbtscan \
@ -85,6 +89,7 @@ RUN apt-get update -y \
snmpcheck \
socat \
thc-ipv6 \
tshark \
webshells \
weevely \
&& /pkg-install.sh LARGE apt-get install -y --no-install-recommends \
@ -99,6 +104,7 @@ RUN apt-get update -y \
dotnet-runtime-6.0 \
dstat \
duf \
emacs \
emailharvester \
enum4linux \
exiftool \
@ -114,6 +120,7 @@ RUN apt-get update -y \
mc \
mtr \
most \
neofetch \
nikto \
ngrep \
openssh-client \
@ -136,6 +143,7 @@ RUN apt-get update -y \
unzip \
virtualenv \
w3m \
weechat weechat-plugins weechat-matrix \
whatweb \
wipe \
wpscan \
@ -152,6 +160,7 @@ RUN apt-get update -y \
ruby \
x11-apps \
&& /pkg-install.sh HUGE go install -v github.com/projectdiscovery/uncover/cmd/uncover@latest \
&& /pkg-install.sh HUGE go install -v github.com/sagernet/sing-box/cmd/sing-box@latest \
&& /pkg-install.sh LARGE pip install --pre 'scapy[basic]' \
&& /pkg-install.sh WEB pip install \
'pelican[Markdown]' \

@ -159,7 +159,7 @@ init_emu()
SF_CONFIG_DIR="${SF_BASEDIR}/emu/config"
SF_ETCSF_DIR="${SF_BASEDIR}/config/etc/sf"
SF_HOST_FS_ROOT="${SF_BASEDIR}/host/fs-root"
SF_WWW_ROOT_DIR="${SF_EMU_DIR}/encfs-sec/www-root"
# SF_WWW_ROOT_DIR="${SF_EMU_DIR}/encfs-sec/www-root"
[[ ! -d $SF_EMU_DIR ]] && mkdir "${SF_EMU_DIR}"
@ -495,7 +495,7 @@ check_limit_server_by_ip()
### Check if anyone of the shells is still alive
exec_devnull docker container inspect "lg-${lid}" -f '{{.State.Status}}' || continue
((n++))
arr_new+=($lid)
arr_new+=("$lid")
done
## Eyy, good idea to check if they are idle?
@ -659,7 +659,7 @@ echo_pty -n "...."
DEBUGF "Attaching to existing instance lg-${LID}..."
exec_devnull docker container inspect "lg-${LID}" -f '{{.State.Status}}' && {
echo_pty -e "..........[${CG}Ok${CN}]"
spawn_shell_exit
spawn_shell_exit "$@"
# NOT REACHED
}
echo_pty -n ".."
@ -770,6 +770,6 @@ echo_pty -e "......[${CG}OK${CN}]"
DEBUGF "Status: $(docker container inspect "lg-${LID}" -f '{{.State.Status}}')"
# Spawn shell
spawn_shell_exit
spawn_shell_exit "$@"
# NOT REACHED

@ -201,7 +201,7 @@ iptables --new-chain SYN-LIMIT
iptables -I FORWARD 1 -i "${DEV}" -o "${DEV_GW}" -p tcp --syn -j SYN-LIMIT
# Refill bucket at a speed of 20/sec and take out max of 64k at one time.
# 64k are taken and thereafter limit to 20syn/second (as fast as the bucket refills)
iptables -A SYN-LIMIT -m limit --limit "20/sec" --limit-burst 65536 -j RETURN
iptables -A SYN-LIMIT -m limit --limit "20/sec" --limit-burst 10000 -j RETURN
iptables -A SYN-LIMIT -j DROP
# -----END TCP SYN RATE LIMIT-----