CharmingKitten
Exposing CharmingKitten's malicious activity for IRGC-IO Counterintelligence division (1500)
파일 탐색기
최종 버전 다운로드 (.zip)- 1403-06-25_MJD_DailyReport.pdf
- 1403-06-27_MJD_DailyReport.pdf
- 1403-06-28_MJD_DailyReport.pdf
- 1403-06-29_MJD_DailyReport.pdf
- 1403-07-01_MJD_DailyReport.pdf
- 1403-07-02_MJD_DailyReport.pdf
- 1403-07-03_MJD_DailyReport.pdf
- 1403-07-04_MJD_DailyReport.pdf
- 1403-07-07_MJD_DailyReport.pdf
- 1403-07-09_MJD_DailyReport.pdf
- 1403-07-10_MJD_DailyReport.pdf
- 1403-07-11_MJD_DailyReport.pdf
- 1403-07-14_MJD_DailyReport.pdf
- 1403-07-15_MJD_DailyReport.pdf
- 1403-07-16_MJD_DailyReport.pdf
- 1403-07-17_MJD_DailyReport.pdf
- 1403-07-18_MJD_DailyReport.pdf
- 1403-07-22_MJD_DailyReport.pdf
- 1403-07-23_MJD_DailyReport.pdf
- entry_exit_form.pdf
- گزارش کار مهر- MJD.pdf
- 1403-05-27-hsn_rtm_DailyReport.pdf
- 1403-05-28-hsn_rtm_DailyReport.pdf
- 1403-05-29-hsn_rtm_DailyReport.pdf
- 1403-05-30-hsn_rtm_DailyReport.pdf
- 1403-06-3-hsn_rtm_DailyReport.pdf
- 1403-06-5-hsn_rtm_DailyReport.pdf
- 1403-06-6-hsn_rtm_DailyReport.pdf
- 1403-05-27_MJD_DailyReport.pdf
- 1403-05-28_MJD_DailyReport.pdf
- 1403-05-29_MJD_DailyReport.pdf
- 1403-05-30_MJD_DailyReport.pdf
- 1403-06-03_MJD_DailyReport.pdf
- 1403-06-05_MJD_DailyReport.pdf
- 1403-06-06_MJD_DailyReport.pdf
- 02120dcf3b263702028a0441881d339ee4ff8e15_گزارش عملکرد ماهانه (بهمن ماه_REDACTED.pdf
- 4037e9382a99fdd96fe93eb0fd4380eea695bd3a_گزارش عملکرد ماهانه (بهمن ماه_REDACTED.pdf
- 834e8476d0e1e2b4b508cb3f6240b5ac03945f2e_CVE-2024-1709 - گزارش بررسی و_REDACTED.pdf
- 8e7931f9f51b48dcd4e4c95445325f4e6f19b236_CVE-2024-1709 - (امارت - ترکی_REDACTED.pdf
- e8ed42d00168744e408dd53c795008c76ee788e6_گزارش عملکرد ماهانه (بهمن ماه_REDACTED.pdf
- services.pdf
- گزارش اولیه دسترسی (wise.pdf
- گزارش عملکرد زمستان - 1403 Final.pdf
- IR_Proxyshell_target.txt
- IR_Proxyshell_target2.txt
- mail.barez.org.txt
- kw-proxyshell-target.kw
- KW_proxyshell_target.txt
- mail.kfmb.com.kw
- 212.12.165.155.yml
- 46.235.93.139.txt
- 77.240.93.43.txt
- mail1.solbsteel.com.txt
- SA_Proxyshell_target.txt
- hibrit.magmaweld.com.lua
- mail.dnstrade.com.tr.sql
- target turkey.tr
- TR_Exchange_target.txt
- AT_proxyshell_target.txt
- AU_Proxyshell_target.txt
- 20220509043739_default_89.147.201.146_ad.exchange.mail_652722.txt
- 20220509044804_default_93.88.82.228_ad.exchange.mail_591622.txt
- 20220509050029_default_85.132.107.206_ad.exchange.mail_710330.txt
- 20220509050823_default_217.64.20.92_ad.exchange.mail_720068.txt
- 20220509051001_default_89.147.205.122_ad.exchange.mail_177500.txt
- 20220509051255_default_94.20.81.41_ad.exchange.mail_202650.txt
- 20220509051411_default_85.132.39.131_ad.exchange.mail_124921.txt
- 20220509051745_default_89.147.205.100_ad.exchange.mail_249467.txt
- 20220509052441_default_89.147.205.106_ad.exchange.mail_134901.txt
- 20220509052603_default_94.20.74.71_ad.exchange.mail_215089.txt
- 20220509052840_default_85.132.79.220_ad.exchange.mail_098345.txt
- 20220509053645_default_185.118.50.123_ad.exchange.mail_872835.txt
- AZ_proxy_shell_target.txt
- OWA_site.csv
- p1-Sheet1.csv
- BE_Proxy_Shell_target.txt
- p1.csv
- p10.csv
- p11.csv
- p2.csv
- p3.csv
- p4.csv
- p5.csv
- p6.csv
- p7.csv
- p8.csv
- p9.csv
- Result_1.csv
- 20220511051022_default_37.131.21.238_ad.exchange.mail_817345.txt
- 20220511051206_default_80.95.221.227_ad.exchange.mail_604661.txt
- 20220511051251_default_80.95.213.101_ad.exchange.mail_394419.txt
- 20220511051330_default_37.131.21.238_ad.exchange.mail_812166.txt
- 20220511052933_default_80.95.211.36_ad.exchange.mail_461579.txt
- 20220511052954_default_80.95.222.211_ad.exchange.mail_381167.txt
- BH_proxy_Shell_target.txt
- Result_1.csv
- CA_Proxyshell_target.txt
- 20220529022837_default_104.193.39.246_ad.exchange.mail_984654.txt
- 20220529022946_default_142.112.97.21_ad.exchange.mail_694405.txt
- 20220529023021_default_142.116.36.81_ad.exchange.mail_878048.txt
- 20220529023054_default_147.253.137.66_ad.exchange.mail_547097.txt
- 20220529023120_default_148.66.252.244_ad.exchange.mail_744747.txt
- 20220529023509_default_162.223.123.173_ad.exchange.mail_600714.txt
- 20220529023533_default_173.231.107.67_ad.exchange.mail_095415.txt
- 20220529025352_default_173.255.16.195_ad.exchange.mail_253072.txt
- 20220529025416_default_184.67.163.11_ad.exchange.mail_097028.txt
- 20220529025440_default_184.67.163.13_ad.exchange.mail_572440.txt
- 20220529025551_default_184.69.14.118_ad.exchange.mail_344646.txt
- 20220529025625_default_184.69.37.34_ad.exchange.mail_383240.txt
- 20220529025822_default_192.159.177.233_ad.exchange.mail_699025.txt
- 20220529025856_default_192.186.64.178_ad.exchange.mail_846946.txt
- 20220529025924_default_198.72.29.119_ad.exchange.mail_438133.txt
- 20220529030009_default_199.16.112.155_ad.exchange.mail_521433.txt
- 20220529030118_default_199.34.12.86_ad.exchange.mail_872035.txt
- 20220529030154_default_204.19.134.200_ad.exchange.mail_853100.txt
- 20220529030834_default_204.19.141.48_ad.exchange.mail_533079.txt
- 20220529030912_default_204.19.142.48_ad.exchange.mail_016851.txt
- 20220529030946_default_204.239.141.9_ad.exchange.mail_379747.txt
- 20220529031024_default_206.47.210.219_ad.exchange.mail_054257.txt
- 20220529031101_default_207.162.105.105_ad.exchange.mail_158726.txt
- 20220529031310_default_207.164.13.67_ad.exchange.mail_346111.txt
- 20220529031354_default_207.164.136.200_ad.exchange.mail_077630.txt
- 20220529031551_default_207.228.101.218_ad.exchange.mail_943407.txt
- 20220529032318_default_207.34.121.108_ad.exchange.mail_367396.txt
- 20220529032538_default_207.61.155.93_ad.exchange.mail_629253.txt
- 20220529032611_default_209.104.122.168_ad.exchange.mail_998111.txt
- 20220529035432_default_209.15.208.34_ad.exchange.mail_836851.txt
- 20220529035433_default_209.15.93.199_ad.exchange.mail_012556.txt
- 20220529035457_default_209.171.241.242_ad.exchange.mail_960754.txt
- 20220529035926_default_209.202.114.226_ad.exchange.mail_253282.txt
- 20220529042703_default_209.226.27.68_ad.exchange.mail_355072.txt
- 20220529042759_default_209.52.48.212_ad.exchange.mail_512074.txt
- 20220529060519_default_209.91.187.3_ad.exchange.mail_105307.txt
- 20220529060555_default_216.113.75.51_ad.exchange.mail_402641.txt
- 20220529060629_default_216.113.56.51_ad.exchange.mail_474508.txt
- 20220529060653_default_216.209.35.26_ad.exchange.mail_498232.txt
- 20220529060826_default_24.37.88.226_ad.exchange.mail_985109.txt
- 20220529060857_default_24.37.96.50_ad.exchange.mail_893804.txt
- 20220529060939_default_24.37.97.62_ad.exchange.mail_581225.txt
- 20220529061138_default_3.96.32.149_ad.exchange.mail_702423.txt
- 20220529061214_default_35.182.188.95_ad.exchange.mail_823453.txt
- 20220529061712_default_3.96.32.149_ad.exchange.mail_895503.txt
- 20220529062112_default_38.110.76.189_ad.exchange.mail_585020.txt
- 20220529062153_default_38.117.68.191_ad.exchange.mail_377022.txt
- 20220529062839_default_38.99.147.3_ad.exchange.mail_431062.txt
- 20220529062913_default_50.71.147.49_ad.exchange.mail_120344.txt
- 20220529062946_default_52.228.33.23_ad.exchange.mail_589288.txt
- 20220529063637_default_54.39.238.87_ad.exchange.mail_504355.txt
- 20220529064219_default_64.119.215.10_ad.exchange.mail_527550.txt
- 20220529064256_default_64.201.165.98_ad.exchange.mail_063540.txt
- 20220529064831_default_64.4.74.142_ad.exchange.mail_863326.txt
- 20220529065131_default_66.199.35.253_ad.exchange.mail_494181.txt
- 20220529065142_default_66.70.167.75_ad.exchange.mail_306886.txt
- 20220529065221_default_67.71.254.21_ad.exchange.mail_255766.txt
- 20220529065434_default_68.179.89.90_ad.exchange.mail_620986.txt
- 20220529065648_default_69.46.96.25_ad.exchange.mail_542505.txt
- 20220529065804_default_69.70.76.86_ad.exchange.mail_860548.txt
- 20220529065954_default_70.35.216.179_ad.exchange.mail_827648.txt
- 20220529070957_default_72.138.165.154_ad.exchange.mail_585904.txt
- 20220529071241_default_72.138.21.130_ad.exchange.mail_505777.txt
- 20220529071313_default_72.138.32.11_ad.exchange.mail_913788.txt
- 20220529072656_default_72.138.60.69_ad.exchange.mail_571809.txt
- 20220529072856_default_72.38.186.117_ad.exchange.mail_175072.txt
- 20220529080952_default_74.216.250.166_ad.exchange.mail_062823.txt
- 20220529081017_default_96.53.16.34_ad.exchange.mail_750615.txt
- 20220529081042_default_99.245.20.84_ad.exchange.mail_223193.txt
- CA_Proxyshell_target.txt
- P10_500.csv
- P11_40_.csv
- P11_500.csv
- P11_500_.csv
- P1_500.csv
- P2_500.csv
- P3_500.csv
- P4_500.csv
- P5_500.csv
- P6_500.csv
- P7_500.csv
- P8_500.csv
- P9_500.csv
- Result_Exchange.csv
- test.csv
- EG_Proxyshell_target.txt
- p1.csv
- p2.csv
- Result_1.csv
- 20220529082712_default_85.75.34.43_ad.exchange.mail_549460.txt
- 20220529082741_default_87.203.88.242_ad.exchange.mail_817552.txt
- 20220529082934_default_62.103.28.62_ad.exchange.mail_232167.txt
- 20220529083045_default_85.74.94.209_ad.exchange.mail_849934.txt
- 20220529083205_default_85.74.94.209_ad.exchange.mail_306674.txt
- 20220529083432_default_85.74.94.209_ad.exchange.mail_872401.txt
- 20220529083930_default_213.140.144.122_ad.exchange.mail_399690.txt
- 20220529084013_default_62.103.74.102_ad.exchange.mail_631673.txt
- 20220529084431_default_62.74.232.193_ad.exchange.mail_396193.txt
- 20220529084510_default_84.254.50.203_ad.exchange.mail_492527.txt
- 20220529092648_default_83.235.188.199_ad.exchange.mail_287449.txt
- 20220529092717_default_62.1.6.153_ad.exchange.mail_729589.txt
- 20220529092746_default_85.72.41.81_ad.exchange.mail_091593.txt
- 20220529093028_default_79.129.38.207_ad.exchange.mail_040038.txt
- 20220529093450_default_85.72.57.26_ad.exchange.mail_051622.txt
- 20220529093555_default_84.254.41.33_ad.exchange.mail_422578.txt
- 20220529093618_default_62.38.51.180_ad.exchange.mail_313196.txt
- 20220529093656_default_85.73.22.169_ad.exchange.mail_720146.txt
- 20220530012104_default_195.46.29.225_ad.exchange.mail_390968.txt
- 20220530012133_default_62.38.92.182_ad.exchange.mail_210705.txt
- 20220530012158_default_185.180.38.203_ad.exchange.mail_541784.txt
- 20220530013627_default_195.167.110.233_ad.exchange.mail_336168.txt
- 20220530013713_default_195.97.126.97_ad.exchange.mail_233458.txt
- 20220530013828_default_80.106.185.234_ad.exchange.mail_529938.txt
- 20220530014028_default_62.103.243.184_ad.exchange.mail_686276.txt
- 20220530014234_default_83.235.251.119_ad.exchange.mail_591686.txt
- 20220530015424_default_62.74.228.94_ad.exchange.mail_006706.txt
- 20220530015509_default_195.97.6.157_ad.exchange.mail_524681.txt
- 20220530022511_default_195.46.13.225_ad.exchange.mail_058820.txt
- 20220530022530_default_79.129.36.92_ad.exchange.mail_411271.txt
- 20220530022600_default_94.65.84.78_ad.exchange.mail_956547.txt
- GR_ProxyShell_target.txt
- p2.csv
- Result_Exchange.csv
- 20220525060252_default_1.22.125.14_ad.exchange.mail_096870.txt
- 20220525060628_default_117.232.121.200_ad.exchange.mail_802251.txt
- 20220525060707_default_117.239.143.46_ad.exchange.mail_470404.txt
- 20220525060937_default_118.185.8.156_ad.exchange.mail_427612.txt
- 20220525070129_default_119.82.65.142_ad.exchange.mail_154891.txt
- 20220525070405_default_122.15.20.201_ad.exchange.mail_210359.txt
- 20220525070447_default_122.166.147.41_ad.exchange.mail_278569.txt
- 20220525071147_default_122.170.103.21_ad.exchange.mail_637090.txt
- 20220525071215_default_122.183.248.102_ad.exchange.mail_195939.txt
- 20220525071919_default_122.252.229.120_ad.exchange.mail_966226.txt
- 20220525071955_default_123.63.56.181_ad.exchange.mail_116079.txt
- 20220525072234_default_124.30.226.219_ad.exchange.mail_600633.txt
- 20220525074325_default_14.140.249.139_ad.exchange.mail_723356.txt
- 20220525074553_default_14.141.208.68_ad.exchange.mail_733145.txt
- 20220525082835_default_14.141.41.62_ad.exchange.mail_203049.txt
- 20220525082901_default_14.141.78.52_ad.exchange.mail_324302.txt
- 20220525083015_default_14.99.145.138_ad.exchange.mail_644051.txt
- 20220525085730_default_14.99.146.244_ad.exchange.mail_683408.txt
- 20220525085752_default_14.99.146.243_ad.exchange.mail_698751.txt
- 20220526024215_default_14.99.213.27_ad.exchange.mail_784012.txt
- 20220526024300_default_14.99.218.204_ad.exchange.mail_186313.txt
- 20220526024310_default_14.99.61.227_ad.exchange.mail_037138.txt
- 20220526025934_default_150.107.118.122_ad.exchange.mail_258475.txt
- 20220526030010_default_182.18.131.144_ad.exchange.mail_912052.txt
- 20220526030434_default_182.156.242.169_ad.exchange.mail_399703.txt
- 20220526030503_default_182.73.104.66_ad.exchange.mail_148562.txt
- 20220526030934_default_182.73.248.38_ad.exchange.mail_386358.txt
- 20220526031704_default_182.74.239.3_ad.exchange.mail_345393.txt
- 20220526031724_default_183.82.127.31_ad.exchange.mail_183399.txt
- 20220526031744_default_202.131.107.153_ad.exchange.mail_719019.txt
- 20220526031907_default_202.144.30.58_ad.exchange.mail_202932.txt
- 20220526032031_default_203.101.89.17_ad.exchange.mail_745950.txt
- 20220526032314_default_203.112.142.165_ad.exchange.mail_257115.txt
- 20220526035437_default_203.123.134.141_ad.exchange.mail_628991.txt
- 20220526035810_default_210.212.97.24_ad.exchange.mail_866215.txt
- 20220526035826_default_219.65.73.131_ad.exchange.mail_029199.txt
- 20220526040008_default_221.135.84.164_ad.exchange.mail_015511.txt
- 20220526060900_default_27.54.170.53_ad.exchange.mail_825762.txt
- 20220526060932_default_43.254.110.230_ad.exchange.mail_608144.txt
- 20220528014454_default_45.123.1.107_ad.exchange.mail_805717.txt
- 20220528014517_default_45.251.32.199_ad.exchange.mail_535355.txt
- 20220528014539_default_45.114.193.78_ad.exchange.mail_874055.txt
- 20220528030229_default_59.144.118.1_ad.exchange.mail_021537.txt
- IN_Proxyshell_Target.txt
- part_1.csv
- part_2.csv
- Result_Exchange.csv
- ameen-alkhalij.nu.log
- ea3e059ca58eec16a98691bcae372170d83b97c0_Shell failed.txt
- f4c79f1f5be8a21ee11dc3a1ba8264d4db79dee2_log.txt
- zsh_history.txt
- cs.bat
- Microsoft Exchange Agent Diagnostic Services.exe.config
- Microsoft Exchange Agent Diagnostic Services.pdb
- MicrosoftAgentServices.exe
- MicrosoftAgentServices.pdb
- .NETFramework,Version=v4.0.AssemblyAttributes.cs
- DesignTimeResolveAssemblyReferences.cache
- DesignTimeResolveAssemblyReferencesInput.cache
- Microsoft Exchange Agent Diagnostic Services.pdb
- MicrosoftAgentServices.csproj.AssemblyReference.cache
- MicrosoftAgentServices.csproj.CoreCompileInputs.cache
- MicrosoftAgentServices.csproj.FileListAbsolute.txt
- MicrosoftAgentServices.csprojAssemblyReference.cache
- WinUpdateService.pdb
- MicrosoftAgentServices.csproj.FileListAbsolute.txt
- AssemblyInfo.cs
- app.config
- MicrosoftAgentServices.csproj
- MicrosoftAgentServices.csproj.user
- Program.cs
- ProjectInstaller.cs
- ProjectInstaller.Designer.cs
- Service1.cs
- Service1.Designer.cs
- eposta.txt
- Microsoft Exchange Services Health.txt
- MicrosoftAgentServices.sln
- cs.bat
- Microsoft Monitoring Exchange Services.exe
- Microsoft Monitoring Exchange Services.exe.config
- Microsoft Monitoring Exchange Services.pdb
- MicrosoftAgentServices.exe
- MicrosoftAgentServices.pdb
- DesignTimeResolveAssemblyReferences.cache
- DesignTimeResolveAssemblyReferencesInput.cache
- Microsoft Monitoring Exchange Services.exe
- Microsoft Monitoring Exchange Services.pdb
- MicrosoftAgentServices.csproj.CoreCompileInputs.cache
- MicrosoftAgentServices.csproj.FileListAbsolute.txt
- MicrosoftAgentServices.csprojAssemblyReference.cache
- WinUpdateService.pdb
- MicrosoftAgentServices.csproj.FileListAbsolute.txt
- AssemblyInfo.cs
- app.config
- MicrosoftAgentServices.csproj
- MicrosoftAgentServices.csproj.user
- Program.cs
- ProjectInstaller.cs
- ProjectInstaller.Designer.cs
- Service1.cs
- Service1.Designer.cs
- eposta.txt
- MicrosoftAgentServices.sln
- MicrosoftAgentServices.suo
- Exchange Agent Diagnostic Services.exe.config
- Exchange Agent Diagnostic Services.pdb
- MicrosoftAgentServices.exe
- MicrosoftAgentServices.pdb
- DesignTimeResolveAssemblyReferences.cache
- DesignTimeResolveAssemblyReferencesInput.cache
- Exchange Agent Diagnostic Services.pdb
- MicrosoftAgentServices.csproj.CoreCompileInputs.cache
- MicrosoftAgentServices.csproj.FileListAbsolute.txt
- MicrosoftAgentServices.csprojAssemblyReference.cache
- WinUpdateService.pdb
- MicrosoftAgentServices.csproj.FileListAbsolute.txt
- app.config
- AssemblyInfo.cs
- MicrosoftAgentServices.csproj
- MicrosoftAgentServices.csproj.user
- Program.cs
- ProjectInstaller.cs
- ProjectInstaller.Designer.cs
- Service1.cs
- Service1.Designer.cs
- MicrosoftAgentServices.sln
- MicrosoftAgentServices.suo
- iis.ps1
- iis.txt
- log.txt
- 28d5d8c113c53493d959668ba36113568f56be93_Sreverse.pdf
- 28d5d8c113c53493d959668ba36113568f56be93_Sreverse.txt
- 2a79ef2bb98fc05db7ea4f4c4bab0a5800eb2eb3_technical.pdf
- 2a79ef2bb98fc05db7ea4f4c4bab0a5800eb2eb3_technical.txt
- 208b5cd4699993b848832a3f65ee1bfd940f08f4_signal-2023-11-14-104340.jpg
- 261f7c8ffb308f138bb51eb68f34c6cab0aec801_سامانه ثاقب 1.pdf
- 3fc320d73fa8506e3f6ec161ed641edb2dd92a82_RAT-2Ac2-گزارش اولیه (v.pdf
- 53cfc8d717f7bde85079a7d83594c7bf6f56737a_Test_v1.pdf
- 5e98006a2cf1c15a164279558eed4a15018e34a0_بسمه تعالی.pdf
- 682089f4bd1c3e6636e15b89e967bf4fa9d7861a_#78TPDD.pdf
- 9e1904ba122bf539207e153b0adc0cd528469b85_1725189461.pdf
- درایو.pdf
- connect.py
- file.asp
- m0s.asp
- RCE4.py
- rce5.py
- webshell.asp
- 0-SERVICE-payment BTC.csv
- 0-SERVICE-Service.csv
- 1-NET-Sheet1.csv
- A1_AsImages.pdf
- A2_AsImages.pdf
- Esxi 6.pdf
- طرح پیشنهادی - شرکت های فعال پزشکی مهندسی_AsImages.pdf
- 2_ordibehesht_1401.pdf
- 30 شماره .pdf
- _50.jpg
- Attack_Reports.zip
- Employees.zip
- Malware_and_Logs.zip
- README.md
# 설치 가이드
1. 코드 내려받기
git clone https://github.com/KittenBusters/CharmingKitten
깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.
cd CharmingKitten
방금 내려받은 프로젝트 폴더 안으로 이동합니다.
2. .NET
보통 추천
⚠️ 이 프로젝트는 규모가 큰 저장소라, 이 방법이 실제 핵심 제품이 아니라 내부 하위 패키지를 가리키는 것일 수 있습니다. README 전체를 함께 확인해보세요.
cd Episode 3/BellaCiao/Variant1/Eposta/Backdoor/ShellDropper 2
이 프로젝트의 관련 파일이 하위 폴더 안에 있어서, 먼저 그 폴더로 이동합니다.
dotnet restore
프로젝트에 필요한 패키지를 내려받습니다.
dotnet run
프로젝트를 빌드하고 바로 실행합니다.
dotnet run 실행 후 터미널에 나타나는 안내 메시지나 주소를 확인하세요.
// repository documentation
Was this content helpful?
(0 ratings)
