Exploitation

Umbrella – A Phishing Dropper designed for Pentest

Umbrella is a file dropper dedicated to pentesting, it downloads a file on target system and then executes without the need of double execution.
To compromise the same target again, you need to delete the following folder on target system : – C:UsersPublicLibrariesIntel

Features

  • Download executable on target system.
  • Silent execution.
  • If the exe already had downloaded and running, open only pdf/docx/xxls/jpg/png.
  • Phishing methods are included.
  • Multiple Session disabled.
  • Bypass UAC.

Needed dependencies

  • apt
  • wine
  • wget
  • Linux
  • sudo access
  • python2.7
  • python 2.7 on Wine Machine

Tested on:

  • Kali Linux – SANA
  • Kali Linux – ROLLING
  • Ubuntu 14.04-16.04 LTS
  • Debian 8.5
  • Linux Mint 18.1
  • Black Arch Linux

Cloning:

git clone https://github.com/4w4k3/Umbrella.git

Running:

sudo python umbrella.py

If you have another version of Python:

sudo python2.7 umbrella.py

 

To Top

Pin It on Pinterest

Share This