Viper(炫彩蛇)是一款图形化内网渗透工具,将内网渗透过程中常用的战术及技术进行模块化及武器化.
Viper(炫彩蛇)集成杀软绕过,内网隧道,文件管理,命令行等基础功能.
Viper(炫彩蛇)当前已集成70+个模块,覆盖初始访问/持久化/权限提升/防御绕过/凭证访问/信息收集/横向移动等大类.
Viper(炫彩蛇)目标是帮助红队工程师提高攻击效率,简化操作,降低技术门槛.
Viper(炫彩蛇)支持在浏览器中运行原生msfconsole,且支持多人协作.
安装 docker
curl -sSL https://get.daocloud.io/docker | sh
service docker start
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603113306529.png)
安装docker-compose
curl -L https://get.daocloud.io/docker/compose/releases/download/1.25.5/docker-compose-`uname -s`-`uname -m` > /usr/bin/docker-compose
chmod +x /usr/bin/docker-compose
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603121125444.png)
设置安装目录
export VIPER_DIR=/root/VIPER
执行如下命名生成安装目录,并进入安装目录
mkdir -p $VIPER_DIR && cd $VIPER_DIR
执行如下命令生成docker-compose.yml
tee docker-compose.yml <<-'EOF'
version: "3"
services:
viper:
image: registry.cn-shenzhen.aliyuncs.com/toys/viper:latest
container_name: viper-c
network_mode: "host"
restart: always
volumes:
- ${PWD}/loot:/root/.msf4/loot
- ${PWD}/db:/root/viper/Docker/db
- ${PWD}/module:/root/viper/Docker/module
- ${PWD}/log:/root/viper/Docker/log
- ${PWD}/nginxconfig:/root/viper/Docker/nginxconfig
command: ["VIPER_PASSWORD"]
EOF
设置登录密码
Viper不允许使用默认密码,diypassword替换为自定义密码密码且大于8位
export VIPER_PASSWORD=diypassword
写入密码到docker-compose.yml
sed -i "s/VIPER_PASSWORD/$VIPER_PASSWORD/g" docker-compose.yml
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603113447246.png)
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603115051245.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ4OTU0OQ==,size_16,color_FFFFFF,t_70)
如果以上执行正确,执行效果如下
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603115340699.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ4OTU0OQ==,size_16,color_FFFFFF,t_70)
启动Viper
cd $VIPER_DIR
docker-compose up -d
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603115529557.png)
所有的docker-compose命令必须在安装目录执行才会有效果
等待15s系统启动,访问 https://yourvpsip:60000 登录. 用户名:root 密码:自定义密码
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603120032781.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ4OTU0OQ==,size_16,color_FFFFFF,t_70)
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603120139269.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ4OTU0OQ==,size_16,color_FFFFFF,t_70)
![在这里插入图片描述](https://img-blog.csdnimg.cn/202106031207478.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ4OTU0OQ==,size_16,color_FFFFFF,t_70)
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603120859500.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ4OTU0OQ==,size_16,color_FFFFFF,t_70)
![在这里插入图片描述](https://img-blog.csdnimg.cn/20210603120912422.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ4OTU0OQ==,size_16,color_FFFFFF,t_70)
![](https://img-blog.csdnimg.cn/20210603120939983.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ4OTU0OQ==,size_16,color_FFFFFF,t_70)
官网
https://www.yuque.com/vipersec
GitHub
https://github.com/FunnyWolf/Viper