Enhances shell scripts and VS Code tasks for usability

Adds `read` prompts to improve user interaction in shell scripts. Updates default values and environment handling for better flexibility. Enhances `dump_users` output with additional details. Introduces a `differ` function for file comparison. Refines VS Code settings and tasks for improved task execution and user guidance. Removes unused or redundant configurations and commands. Improves installer script by refining requirement checks and user prompts.

Author: Esonhugh

.vscode/.zshrc

@@ -52,6 +52,7 @@ if [ "$WEB_DELIVERY_MODE" ]; then
     # ProjectDiscovery/SimpleHTTPServer
     simplehttpserver -listen 0.0.0.0:$LISTEN_ON -verbose -upload
     # python3 -m http.server $LISTEN_ON
+    read
     exit 0
 fi
 
@@ -63,12 +64,14 @@ export METASPLOIT_INIT_COMMAND="${METASPLOIT_INIT_COMMAND} setg VHOST $DOMAIN;"
 if [ "$METASPLOIT_HANDLER_MODE" ]; then
     msfconsole -r "$PROJECT_FOLDER/.vscode/metasploit_handler.rc" \
         -x "${METASPLOIT_INIT_COMMAND}"
+    read
     exit 0
 fi
 
 if [ "$METASPLOIT_CONSOLE_MODE" ]; then
     msfconsole -r "$PROJECT_FOLDER/.vscode/msfconsole.rc" \
         -x "${METASPLOIT_INIT_COMMAND}"
+    read
     exit 0
 fi
 
@@ -81,7 +84,8 @@ if [ "$REVERSE_SHELL_MODE" ]; then
     echo "Advanced: "
     echo "  https://rev.eson.ninja/?ip=${LHOST}&port=${LPORT}"
     echo ""
-    rlwrap -I -cAr nc -lvvp ${LPORT}
+    rlwrap -I -cAr netcat -lvvp ${LPORT}
+    read;
     exit 0
 fi
 

.vscode/env.zsh

@@ -2,13 +2,14 @@
 ################################################################
 # Project settings for Zsh Prompt
 # export HOST="[HackTheBox - Machine Name]"
+unset USER_ZDOTDIR
 
 ################################################################
 # Self condition settings
 # use this if you are using a VPS or cloud server it can automatically get your public IP.
 # export LHOST=`curl ifconfig.me`
 # export LHOST=`curl ip.me`
-export LHOST=$(ifconfig | grep '10\.10\.' | cut -d ' ' -f2)
+export LHOST=${$(ifconfig | grep '10\.10\.' | cut -d ' ' -f2):-10.0.0.1}
 export ATTACKER_IP=$LHOST
 
 export LPORT=6789
@@ -132,7 +133,7 @@ function update_user_cred_to_env() {
                                 local pass=$(echo "$usercred" | yq '.[0].password' -r)
                                 local nt_hash=$(echo "$usercred" | yq '.[0].nt_hash' -r)
                                 local login=$(echo "$usercred" | yq '.[0].login' -r)
-                                local LOGIN_${_var}=$login
+                                export LOGIN_${_var}=$login
                                 export USER_${_var}=$user
                                 export PASS_${_var}=$pass
                                 export NT_HASH_${_var}=$nt_hash
@@ -191,63 +192,19 @@ function current_status() {
                 echo "Current User: ${CURRENT_USER} => ${USER}:${PASS} (${CURRENT_NT_HASH})"
         fi
 }
-current_status
+if [[ ! -z "$SHOW_CURRENT" ]]; then
+        current_status
+fi
 
 # export KRB5CCNAME=
 
-# [[administrator]]ME settings
 # export LD_PRELOAD=/usr/local/lib/libfaketime.so.1
 # export LD_PRELOAD=/usr/lib/aarch64-linux-gnu/faketime/libfaketime.so.1
 # export DYLD_FORCE_FLAT_NAMESPACE=1 DYLD_INSERT_LIBRARIES=/opt/homebrew/Cellar/libfaketime/0.9.10/lib/faketime/libfaketime.1.dylib
 # export FAKETIME="-8h"
 
 export METASPLOIT_INIT_COMMAND=""
 
-################################################################
-# Advanced settings
-
-# AWS settings
-# export AWS_DEFAULT_REGION=us-west-2
-# export AWS_ACCESS_KEY_ID=AKIA...
-# export AWS_SECRET_ACCESS_KEY=...
-# export AWS_SESSION_TOKEN=...
-# export AWS_ENDPOINT_URL=
-
-# VAULT settings
-# export VAULT_ADDR=
-# export VAULT_TOKEN=...
-
-# MINIO settings
-# export MINIO_ROOT_USER=... # access key
-# export MINIO_ROOT_PASSWORD=... # secret key
-# export MINIO_ENDPOINT=
-# export MC_HOST_myminio=http://${MINIO_ROOT_USER}:${MINIO_ROOT_PASSWORD}@${MINIO_ENDPOINT}
-
-# Kubernetes settings
-# export KUBECONFIG=${PROJECT_FOLDER}/kubeconfig
-
-# Terraform settings
-export TF_LOG=trace
-export TF_LOG_PATH=$PROJECT_FOLDER/terraform.log
-# export TF_VAR_aws_access_key=...
-# export TF_VAR_aws_secret_key=...
-# export TF_VAR_aws_session_token=...
-# export TF_VAR_aws_region=us-west-2
-
-# OpenStack settings
-# export OS_USERNAME=username
-# export OS_PASSWORD=password
-# export OS_TENANT_NAME=projectName
-# export OS_AUTH_URL=https://identityHost:portNumber/v2
-# The following lines can be omitted
-# export OS_TENANT_ID=tenantIDString
-# export OS_REGION_NAME=regionName
-# export OS_CACERT=/path/to/cacertFile
-# export OS_TOKEN=tokenString
-
-################################################################
-# More default settings
-
 export PROJECT_WEB_DELIVERY=$PROJECT_FOLDER/.web-delivery # web-delivery is a folder in PROJECT_FOLDER
 unset SSS_LOADED                                          # make sure sss init shell is not set
 
@@ -262,7 +219,7 @@ unset https_proxy http_proxy all_proxy
 # Hashcat settings
 
 # useful settings like ROCKYOU, SECLIST, etc.
-# export WORDLIST=/usr/share/wordlists
+export WORDLIST=${WORDLIST:-/usr/share/wordlists}
 export ROCKYOU=${WORDLIST}/rockyou.txt
 export SECLIST=${WORDLIST}/seclists/
 export TOP_DNS=${SECLIST}/Discovery/DNS/bitquark-subdomains-top100000.txt
@@ -460,14 +417,60 @@ function dump_hosts() {
 }
 
 function dump_users() {
+        echo "dumping impacket format for users:"
         for user in $(env|grep -E '^USER_'|grep -v 'USER_ALIAS'); do
                 local _var=$(echo $user|sed -e 's/USER_//g' | cut -d '=' -f1) # replace _ with - to get the original username
                 local _user=$(eval echo '$USER_'$_var)
                 local _pass=$(eval echo '$PASS_'$_var)
                 local _nt_hash=$(eval echo '$NT_HASH_'$_var)
+                local _login=$(eval echo '$LOGIN_'$_var)
+                if [[ "$_login" == "$_user" ]]; then
+                        _login=$DOMAIN
+                fi
                 if [[ "$_nt_hash" == "fffffffffffffffffffffffffffffffffff" ]]; then
-                        _nt_hash=$(ntlm "${_pass}")
+                        echo "\"${_login}\"/\"${_user}\":'${_pass}' (No NT Hash)"
+                else
+                        echo "\"${_login}\"/\"${_user}\" (${_nt_hash})"
                 fi
-                echo "${_user}:${_pass}(${_nt_hash})"
         done
+        echo ""
+        echo "# dumping environment variables for users:"
+        for user in $(env|grep -E '^USER_'|grep -v 'USER_ALIAS'); do
+                local _var=$(echo $user|sed -e 's/USER_//g' | cut -d '=' -f1)
+                local _user=$(eval echo '$USER_'$_var)
+                echo "# user: $_user"
+                local _pass=$(eval echo '$PASS_'$_var)
+                local _nt_hash=$(eval echo '$NT_HASH_'$_var)
+                local _login=$(eval echo '$LOGIN_'$_var)
+                echo "export USER_${_var}=\"${_user}\""
+                echo "export PASS_${_var}=\"${_pass}\""
+                echo "export NT_HASH_${_var}=\"${_nt_hash}\""
+                echo "export LOGIN_${_var}=\"${_login}\""
+        done
+        echo ""
+        echo "# dumping current user environment variables:"
+        echo "export USER=${CURRENT_USER}"
+        echo "export USERNAME=${CURRENT_PASS}"
+        echo "export PASS=${CURRENT_PASS}"
+        echo "export PASSWORD=${CURRENT_PASS}"
+        echo "export NT_HASH=${CURRENT_NT_HASH}"
+        echo "export LOGIN=${CURRENT_LOGIN}"
+        echo ""
+        echo "export CURRENT_USER=${CURRENT_USER}"
+        echo "export CURRENT_PASS=${CURRENT_PASS}"
+        echo "export CURRENT_NT_HASH=${CURRENT_NT_HASH}"
+        echo "export CURRENT_LOGIN=${CURRENT_LOGIN}"
+        echo "export CURRENT=${CURRENT}"
+}
+
+function differ() {
+        if [[ -z $1 || -z $2 ]]; then
+                echo "Usage: differ <file1> <file2>"
+                return 1
+        fi
+        if [[ ! -f $1 || ! -f $2 ]]; then
+                echo "File not found!"
+                return 1
+        fi
+        code -d "$1" "$2"
 }

.vscode/settings.json

@@ -2,7 +2,8 @@
     "terminal.integrated.profiles.linux": {
         "zsh-shell": {
             "env": {
-                "PROJECT_FOLDER": "${workspaceFolder}"
+                "PROJECT_FOLDER": "${workspaceFolder}",
+                "SHOW_CURRENT_STATUS": "True"
             },
             "path": "zsh"
         },
@@ -42,7 +43,8 @@
     "terminal.integrated.profiles.osx": {
         "zsh-shell": {
             "env": {
-                "PROJECT_FOLDER": "${workspaceFolder}"
+                "PROJECT_FOLDER": "${workspaceFolder}",
+                "SHOW_CURRENT_STATUS": "True"
             },
             "path": "zsh"
         },

.vscode/tasks.json

@@ -1,7 +1,16 @@
 update_user_cred_to_env
 set_current_user
+dump_users
 update_host_to_env
 set_current_host
+dump_hosts
+dump_hosts | sudo tee -a /etc/hosts
+current_status
+proxys 
+proxys on
+proxys off
+url encode "content=="
+url decode "content%3D%3D"
 wfuzz_vhost_http $DOMAIN $TOP_DNS
 wfuzz_vhost_https $DOMAIN $TOP_DNS
 venv-init
@@ -14,4 +23,5 @@ cp xxx $PROJECT_FOLDER/
 cp xxx $PROJECT_WEB_DELIVERY/
 cat file |url encode
 cat file |url decode
-ntlm $PASS
+ntlm $PASS
+differ file1 file2

completion_indexer/_weapon

@@ -1,17 +1,17 @@
 #!/bin/zsh
 
 function check_command() {
-    local prompt=$2
     command -v "$1" >/dev/null 2>&1 && {
     } || {
-        echo "$1 is not installed."
-        echo "Install it for better experience."
-        echo "$prompt"
+        echo "detect $1 is not installed."
+        echo "$2"
         return 2
     }
 }
 
 function check_requirements() {
+    check_command "awk" "awk is required for parsing the output of commands, please install it." || return 2
+    check_command "sed" "sed is required for parsing the output of commands, please install it." || return 2
     check_command "zsh" "zsh is core to WeaponizedVSCode integrated shell." || return 2
     check_command "vim" "vim is required for task edit /etc/hosts, please install it or change it." || return 2
     check_command "nc" "nc is core for netcat shell session handling or u can't use it, please install it." || return 2
@@ -22,6 +22,7 @@ function check_requirements() {
     check_command "simplehttpserver" "simplehttpserver is cool for serving files with upload feature and dump http requests, install it with https://github.com/projectdiscovery/simplehttpserver" || return 2
     check_command "rustscan" "rustscan is required for the auto scanning task in vscode, fast and reliable, install it with https://github.com/bee-san/RustScan" || return 2
     check_command "wfuzz" "wfuzz is required for command wfuzz_vhost_https and wfuzz_vhost_http, to fuzz the subdomain and vhost. install it or u can't use that" || return 2
+    check_command "hashcat" "hashcat is required for the hashcat cracking task in vscode, install it with 'apt install hashcat' or 'brew install hashcat'." || return 2
     check_command "python3" "Python3 is required for the Python scripts in WeaponizedVSCode, please install it." || return 2
     check_command "uv" "uv is optional but recommended for better performance, install it with 'pip install uv'. Their script is useful"
 }
@@ -45,7 +46,7 @@ function main() {
         exit 0
     fi
     export LOCATION="$WEAPON_LOCATION"
-    echo "Weapon will be installed to $LOCATION, Press any key to continue or Ctrl+C to cancel..."
+    echo "Weapon will be installed to $LOCATION, Press Enter key to continue or Ctrl+C to cancel..."
     read
     echo "Installing Weapon..."
     mkdir -p $LOCATION && echo "Weapon directory created at $LOCATION."