blackserial/install.sh at main · darkpills/blackserial · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
#!/bin/bash

# going into the current script directory
CWD=`dirname $0`
cd $CWD/bin

command -v php >/dev/null 2>&1 || ( echo "Error: php not installed, install it first" && exit 1 )

if [ ! -d ./phpggc/ ]; then
    echo "Installing phpggc"
    git clone https://github.com/ambionics/phpggc 2>&1 || (echo "Error: cannot clone phpggc" && exit 1)
    if [ ! -f ./phpggc/phpggc ]; then
        echo "Error: no phpggc binary after cloning repository"
        exit 1
    fi
fi

javaVersion=`java -version 2>&1 | grep version | sed -e s#"^.*version \"\([0-9]\+\)\..*$"#"\1"#g`
if [ "$javaVersion" == "" ] || [ $javaVersion -gt 8 ] && [ ! -f ./jre1.8.0_431/bin/java ]; then
    echo "Installing java 8"
    wget -q "https://javadl.oracle.com/webapps/download/AutoDL?BundleId=251398_0d8f12bc927a4e2c9f8568ca567db4ee" -O jre-8u431-linux-x64.tar.gz  || ( cp ../archives/jre-8u431-linux-x64.tar.gz . )
    tar -xzf jre-8u431-linux-x64.tar.gz
    if [ ! -f ./jre1.8.0_431/bin/java ]; then
        echo "Error: no ./jre1.8.0_431/bin/java after untar"
        exit 1
    fi
fi

if [ ! -f marshalsec-all.jar ]; then
    echo "Installing Marshalsec"
    command -v mvn >/dev/null 2>&1
    if [ $? -eq 0 ]; then
        echo "Maven found, building jar"
        git clone https://github.com/mbechler/marshalsec
        cd marshalsec
        mvn clean package -DskipTests
        cd ..
    fi

    if [ -f ./marshalsec/target/marshalsec-0.0.3-SNAPSHOT-all.jar ]; then
        echo "Copying Marshalsec built from maven"
        cp ./marshalsec/target/marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec-all.jar
    else
        echo "Copying Marshalsec from archive"
        cp ../archives/marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec-all.jar
    fi
    echo "Marshalsec installed"
fi

if [ ! -f ./jre1.8.0_20/bin/java ]; then
    echo "Installing JRE 1.8.0u20"
    cp ../archives/jre-8u20-linux-x64.tar.gz .
    tar -xzf jre-8u20-linux-x64.tar.gz
    if [ ! -f ./jre1.8.0_20/bin/java ]; then
        echo "Error: no ./jre1.8.0_20/bin/java after untar"
        exit 1
    fi
fi

if [ ! -f JRE8Exploit.jar ]; then
    echo "Installing JRE8Exploit jar"
    cp ../archives/JRE8Exploit-1.0-SNAPSHOT.jar JRE8Exploit.jar
    echo "JRE8Exploit jar installed"
fi

if [ ! -f ysoserial-all.jar ]; then
    echo "Installing ysoserial"
    wget -q https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar  || cp ../archives/ysoserial-all.jar .
    echo "Ysoserial installed"
fi

command -v wine >/dev/null 2>&1 || {
    echo "Installing wine, .net framework 4.8"
    if [ "$EUID" -ne 0 ]; then
        sudo dpkg --add-architecture i386
        sudo apt update -y
        sudo apt install  --install-recommends mono-complete wine winetricks -y
    else
        dpkg --add-architecture i386
        apt update -y
        apt install --install-recommends mono-complete wine winetricks -y
    fi
    winetricks -q dotnet48
    winetricks -q nocrashdialog
}

if [ ! -d Release ]; then
    echo "Installing ysoserial.net"
    pip3 install requests
    url=`python3 -c "import requests; import json; print(json.loads(requests.get('https://api.github.com/repos/pwntester/ysoserial.net/releases').content)[0]['assets'][0]['browser_download_url'])"`
    if [ $? -eq 0 ]; then
        echo "Downloading $url"
        wget -q "$url" || cp ../archives/ysoserial-*.zip .
    else
        cp ../archives/ysoserial-*.zip .
    fi
    unzip -q ysoserial-*.zip
    if [ ! -f ./Release/ysoserial.exe ]; then
        echo "Error: no ysoserial.exe binary after unziping ysoserial.net zip"
        exit 1
    fi
fi


command -v ruby >/dev/null 2>&1 || ( echo "Error: ruby not installed, install it first" && exit 1 )

if [ ! -d ruby-unsafe-deserialization ]; then
    echo "Installing ruby payloads"
    git clone https://github.com/GitHubSecurityLab/ruby-unsafe-deserialization/ 2>&1 || (echo "Error: cannot clone ruby payloads repo" && exit 1)
    if [ ! -d ruby-unsafe-deserialization/ ]; then
        echo "Error: no ruby-unsafe-deserialization directory after cloning repository"
        exit 1
    fi
fi

command -v python3 >/dev/null 2>&1 || command -v python >/dev/null 2>&1 || ( echo "Error: python3 not installed, install it first" && exit 1 )
python3 -c "import pickle;" 2>&1 || {
    echo "Installing pickle";
    pip3 install pickledb;
}

if [ ! -d deser-node ]; then
    echo "Installing Deser-Node"
    git clone https://github.com/klezVirus/deser-node
    cd deser-node
    npm install yargs node-serialize funcster cryo
    cd ..
fi

echo "Everything seems to be installed now"