LazyOwn/payload1.json at main · clcthulhu/LazyOwn · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
{
  "binary_name": "bash",
  "api_key": "I_had_created_an_APIkey_and_published_it_for_free..._but,_someone_misused,_and_I_had_to_revoke_it...",
  "prompt": "Presentate como Lazy OWN OneLiner assistant",
  "url": "http://prueba.htb/",
  "method": "POST",
  "headers": "{\"Content-Type\": \"application/json\"}",
  "params": "{\"param1\": \"LAZYFUZZ\"}",
  "data": "{\"key\": \"LAZYFUZZ\"}",
  "json_data": "{\"json_key\": \"json_value\"}",
  "proxy_port": 8888,
  "wordlist": "/usr/share/wordlists/rockyou.txt",
  "usrwordlist": "/usr/share/wordlists/SecLists-master/Usernames/xato-net-10-million-usernames.txt",
  "dirworlist": "/usr/share/wordlists/SecLists-master/Discovery/Web-Content/directory-list-2.3-medium.txt",
  "dnswordlist": "/usr/share/wordlists/SecLists-master/Discovery/DNS/subdomains-top1million-110000.txt",
  "iiswordlist": "/usr/share/wordlists/SecLists-master/Discovery/Web-Content/IIS.fuzz.txt",
  "hide_code": 404,
  "exploitdb": "/usr/share/exploitdb/exploits/",
  "mode": "attack",
  "reverse_shell_port": 4444,
  "path": "/example/path",
  "rhost": "10.10.11.69",
  "lhost": "10.10.14.9",
  "rport": 5555,
  "lport": 5555,
  "rat_key": "82e672ae054aa4de6f042c888111686a",
  "startip": "10.129.144.1",
  "endip": "10.129.144.255",
  "device": "tun0",
  "email_from": "email@gmail.com",
  "email_to": "email@gmail.com",
  "email_username": "email@gmail.com",
  "email_password": "pa$$w0rd",
  "smtp_server": "smtp.server.com",
  "smtp_port": "587",
  "field": "page",
  "headers_file": "modules/headers.json",
  "data_file": "modules/data.json",
  "params_file": "modules/params.json",
  "json_data_file": "modules/json_data.json",
  "file": "file_to_operate.ext"
}