Download
Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine. It saves the state of system logs pre-exploitation and reverts that state including the filesystem timestamps post-exploitation leaving zero traces of a ghost in the shell.
Features
- Documentation available
- Get started quickly with a curl fetch to your target machine
- Performs all session commands including logging, trace clearing, and filesystem operations in under 5 milliseconds
- To save the state of system logs, moonwalk finds a world-writable path and saves the session under a dot directory which is removed upon ending the session
- Instead of clearing the whole history file, moonwalk reverts it back to how it was including the invokation of moonwalk
- Hide from the Blue Team by reverting the access/modify timestamps of files back to how it was using the GET command
Project Samples
Categories
File SystemsLicense
MIT LicenseFollow moonwalk
Other Useful Business Software
$300 in Free Credit Towards Top Cloud Services
Start your project in minutes. After credits run out, 20+ products include free monthly usage. Only pay when you're ready to scale.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of moonwalk!
