4a2960b288
ExploitDB: search local exploit-db CSV mirror by keyword, EDB ID, or CVE identifier. In-bot update command downloads the latest CSV from GitLab. Also added to the update-data.sh script. Payload: built-in template library with 52 payloads across 6 categories (sqli, xss, ssti, lfi, cmdi, xxe). Supports browsing, numeric index, and keyword search within categories. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
245 lines
6.4 KiB
Markdown
245 lines
6.4 KiB
Markdown
# Cheatsheet
|
|
|
|
## Dev Commands
|
|
|
|
```bash
|
|
make install # Setup venv + install
|
|
make test # Run tests
|
|
make lint # Lint with ruff
|
|
make run # Start bot (bare metal)
|
|
make link # Symlink to ~/.local/bin
|
|
derp -c config.toml # Run with custom config
|
|
derp -v # Verbose/debug mode
|
|
derp --cprofile # Profile to derp.prof
|
|
```
|
|
|
|
## SASL Authentication
|
|
|
|
```toml
|
|
# In config/derp.toml
|
|
[server]
|
|
sasl_user = "account"
|
|
sasl_pass = "password"
|
|
```
|
|
|
|
## Rate Limiting
|
|
|
|
```toml
|
|
# In config/derp.toml (defaults shown)
|
|
[bot]
|
|
rate_limit = 2.0 # Messages per second
|
|
rate_burst = 5 # Burst capacity
|
|
```
|
|
|
|
## Container
|
|
|
|
```bash
|
|
make build # Build image
|
|
make up # Start (podman-compose)
|
|
make down # Stop
|
|
make logs # Follow logs
|
|
```
|
|
|
|
## Bot Commands
|
|
|
|
```
|
|
!ping # Pong
|
|
!help # List commands
|
|
!help <cmd> # Command help
|
|
!help <plugin> # Plugin description + commands
|
|
!version # Bot version
|
|
!uptime # Bot uptime
|
|
!echo <text> # Echo text back
|
|
!h # Shorthand (any unambiguous prefix works)
|
|
```
|
|
|
|
## Admin
|
|
|
|
```
|
|
!whoami # Show your hostmask + admin status
|
|
!admins # Show admin patterns + detected opers (admin)
|
|
```
|
|
|
|
```toml
|
|
# config/derp.toml
|
|
[bot]
|
|
admins = ["*!~user@trusted.host", "ops!*@*.ops.net"]
|
|
```
|
|
|
|
IRC operators are auto-detected via WHO. Hostmask patterns use fnmatch.
|
|
|
|
## Plugin Management (admin)
|
|
|
|
```
|
|
!plugins # List loaded plugins
|
|
!load <plugin> # Hot-load a plugin (admin)
|
|
!reload <plugin> # Reload a changed plugin (admin)
|
|
!unload <plugin> # Remove a plugin (admin)
|
|
```
|
|
|
|
## OSINT
|
|
|
|
```
|
|
!dns example.com # A record lookup
|
|
!dns 1.2.3.4 # Reverse PTR lookup
|
|
!dns example.com MX # Specific type (A/AAAA/MX/NS/TXT/CNAME/PTR/SOA)
|
|
!cert example.com # CT log lookup (max 5 domains)
|
|
!whois example.com # WHOIS domain lookup
|
|
!whois 8.8.8.8 # WHOIS IP lookup
|
|
!subdomain example.com # CT log subdomain enum
|
|
!subdomain example.com brute # + DNS wordlist brute
|
|
!headers example.com # HTTP fingerprint (tech + security)
|
|
```
|
|
|
|
## Ops
|
|
|
|
```
|
|
!opslog add Compromised target # Add timestamped entry
|
|
!opslog list # Show last 5 entries
|
|
!opslog list 10 # Show last 10
|
|
!opslog search pivot # Search entries
|
|
!opslog del 3 # Delete entry by ID
|
|
!opslog clear # Clear channel log (admin)
|
|
!note set target 10.0.0.1 # Store a note
|
|
!note get target # Retrieve a note
|
|
!note del target # Delete a note
|
|
!note list # List all keys
|
|
!note clear # Clear all notes (admin)
|
|
```
|
|
|
|
## Exploit-DB
|
|
|
|
```
|
|
!exploitdb search apache # Search by keyword
|
|
!exploitdb 12345 # Lookup by EDB ID
|
|
!exploitdb cve CVE-2024-1234 # Search by CVE
|
|
!exploitdb update # Download latest CSV
|
|
!exploitdb stats # Show index size
|
|
```
|
|
|
|
## Payloads
|
|
|
|
```
|
|
!payload list # List categories
|
|
!payload sqli # Show SQLi payloads
|
|
!payload xss 3 # Show XSS payload #3
|
|
!payload ssti jinja # Search SSTI for 'jinja'
|
|
!payload lfi all # Show all LFI payloads
|
|
```
|
|
|
|
Categories: sqli, xss, ssti, lfi, cmdi, xxe
|
|
|
|
## Red Team
|
|
|
|
```
|
|
!revshell bash 10.0.0.1 4444 # Reverse shell one-liner
|
|
!revshell list # List types (bash/sh/nc/nce/python/perl/php/ruby/socat/lua/ps)
|
|
!encode b64 hello # Base64 encode
|
|
!decode hex 68656c6c6f # Hex decode
|
|
!encode rot13 hello # ROT13
|
|
!hash hello # MD5 + SHA1 + SHA256
|
|
!hash sha512 hello # Specific algorithm
|
|
!hashid <hash> # Identify hash type
|
|
```
|
|
|
|
## OPSEC
|
|
|
|
```
|
|
!defang https://evil.com # Defang IOC
|
|
!refang hxxps[://]evil[.]com # Refang IOC
|
|
```
|
|
|
|
## Network
|
|
|
|
```
|
|
!cidr 10.0.0.0/24 # Subnet info
|
|
!cidr contains 10.0.0.0/8 10.1.2.3 # Membership check
|
|
!portcheck 10.0.0.1 # Scan common ports
|
|
!portcheck 10.0.0.1 22,80,443 # Scan specific ports
|
|
!httpcheck https://example.com # HTTP status + timing
|
|
!tlscheck example.com # TLS/cert inspection
|
|
!tlscheck 10.0.0.1 8443 # Custom port
|
|
!blacklist 1.2.3.4 # DNSBL reputation check
|
|
```
|
|
|
|
## Intelligence (local databases)
|
|
|
|
```
|
|
!geoip 8.8.8.8 # GeoIP: city, country, coords, tz
|
|
!asn 8.8.8.8 # ASN: number + organization
|
|
!tor 1.2.3.4 # Check Tor exit node
|
|
!tor update # Download exit list
|
|
!iprep 1.2.3.4 # Firehol/ET blocklist check
|
|
!iprep update # Download blocklist feeds
|
|
!cve CVE-2024-1234 # Lookup specific CVE
|
|
!cve search apache rce # Search CVE descriptions
|
|
!cve update # Download NVD feed (slow)
|
|
!cve stats # Show index size
|
|
```
|
|
|
|
### Data Setup
|
|
|
|
```bash
|
|
./scripts/update-data.sh # Update tor + iprep
|
|
MAXMIND_LICENSE_KEY=xxx ./scripts/update-data.sh # + GeoLite2
|
|
```
|
|
|
|
## Random
|
|
|
|
```
|
|
!rand password # 16-char random password
|
|
!rand password 32 all # 32-char, full charset
|
|
!rand hex 64 # Random hex string
|
|
!rand uuid # UUID4
|
|
!rand bytes 32 # Random bytes (hex)
|
|
!rand int 100 # Random 0..99
|
|
!rand coin # Heads or tails
|
|
!rand dice 2d20 # Roll 2x d20
|
|
```
|
|
|
|
## Timer
|
|
|
|
```
|
|
!timer 5m # 5-minute countdown
|
|
!timer 1h30m deploy # Named timer
|
|
!timer 90 # 90 seconds
|
|
!timer list # Show active timers
|
|
!timer cancel deploy # Cancel a timer
|
|
```
|
|
|
|
## Plugin Template
|
|
|
|
```python
|
|
from derp.plugin import command, event
|
|
|
|
@command("name", help="Description")
|
|
async def cmd_name(bot, message):
|
|
text = message.text.split(None, 1)
|
|
await bot.reply(message, "response")
|
|
|
|
@event("JOIN")
|
|
async def on_join(bot, message):
|
|
await bot.send(message.target, f"Hi {message.nick}")
|
|
```
|
|
|
|
## Message Object
|
|
|
|
```
|
|
msg.nick # Sender nick
|
|
msg.target # Channel or nick
|
|
msg.text # Message body
|
|
msg.is_channel # True if channel
|
|
msg.prefix # nick!user@host
|
|
msg.command # PRIVMSG, JOIN, etc.
|
|
msg.params # All params list
|
|
```
|
|
|
|
## Config Locations
|
|
|
|
```
|
|
1. --config PATH # CLI flag
|
|
2. ./config/derp.toml # Project dir
|
|
3. ~/.config/derp/derp.toml # User config
|
|
4. Built-in defaults # Fallback
|
|
```
|