iPhone/iPad uses A-Shell to run penetration tools such as SQLmap without jailbreak [Continuous update] [A-Shell use] [Penetration tools] [To be perfected]

【Last update: 2023.​4.08

Please do not use the relevant technologies in the article to engage in illegal testing. Any direct or indirect consequences and losses caused by the dissemination and use of the information provided in this article shall be borne by the user himself, and the author shall not bear any responsibility for this~

This is the first original article about A-Shell in China~ It is not easy to be original, I hope you will support it~


~Introduction~


Whois A-Shell

Through A-Shell, you can happily use python and perl interpreted languages ​​on your mobile phone. "It is expected to support php in the future."
A-Shell is an iOS terminal. The goal of this project is to provide a simple Unix terminal on iOS. It uses ios_system interprets commands and can use all commands in the ios_system ecosystem (nslookup, whois, python3, lua, pdflatex, lualatex...), and the project developer provides some other commands for it, you can view it through help -l All commands, of course, you can also use the pkg package management tool provided in A-Shell (the pkg package management command here is different from termux, it is maintained by the project developer, so there are few commands that can be downloaded from it) and The pip package management tool downloads the command and uses it.

The most amazing thing about A-Shell is its running speed, which is more than ten times faster than iSH, so you can implement some tasks that iSH takes a lot of time to implement on A-Shell~

Appearance of A-Shell

You can change the appearance of A-Shell using config, which allows you to change the font, font size, background color, text color, and cursor color and shape, each window can have its own appearance . config -p will make the current window settings permanent, the settings are used for all future windows, in addition to you can also use config -t to configure the toolbar.

【You can check the A-Shell open source project for more information about A-Shell https://github.com/holzschu/a-shell


Start installing penetration tools


foreword

A-Shell pre-installs pip for users, plus the performance and speed of A-Shell, which makes it very easy to install and use penetration~

Before that, I would like to remind everyone that A-Shell's pip is affected by permissions and cannot directly modify the pypi source for the time being.

But you can temporarily modify the pypi source by manually adding source parameters [the following pip installation steps have used domestic sources]

A-Shell installs and uses SQLmap

​pip3 install sqlmap -i https://mirrors.aliyun.com/pypi/simple/

078fc78d079448c8b62220955192f4f6.png

A-Shell install and use Webcrack

git clone https://github.com/yzddmr6/WebCrack
pip3 install -r requirements.txt -i https://mirrors.aliyun.com/pypi/simple/
python3 webcrack.py

cd0e59a2ed3c4dfeb057af49e7b25b96.png

A-Shell installs and uses Dirsearch (currently suspected to be a problem)

​pip3 install dirsearch -i https://mirrors.aliyun.com/pypi/simple/

14e9340868ad49b4a5081caef1f53314.png

A-Shell install and use Wafw00f

​pip3 install wafw00f -i https://mirrors.aliyun.com/pypi/simple/

60b30573ac78404eaaa4256167d2e334.png

A-Shell installs and uses Portscan "replaces nmap for port scanning"

git clone https://github.com/luckman666/PortScan.git

A-Shell installs and uses Tidefinder "gitee clone acceleration"

//Clone tidefinger using lg2

lg2 clone https://gitee.com/kiang70/TideFinger

//Open the tidefinger/python3 directory

cd TideFinger/python3

//pip installation dependencies

​pip install -r requirements.txt -i https://mirrors.aliyun.com/pypi/simple/

// run tidefinger

python3 TideFinger.py

ad32ebfb6bed4d6380435e16fc04f6cc.png

A-Shell install and use Nikto

//Install libwhisker "nikto dependency"

wget https://10gbps-io.dl.sourceforge.net/project/whisker/libwhisker/2.5/libwhisker2-2.5.tar.gz
tar xzf libwhisker2-2.5.tar.gz
mkdir /usr/local/share/perl5
cd libwhisker2-2.5
perl Makefile.pl install

//download nikto

git clone https://github.com/sullo/nikto.git

// run nikto

cd nikto/program
perl nikto.pl -h 192.168.1.100 -p 8080

To be continued....


[Please indicate the source and original author of the article when reprinting]

Guess you like

Origin blog.csdn.net/qq_57851190/article/details/128759298