MCPcopy Index your code
hub / github.com/corunb/Split_tools

github.com/corunb/Split_tools @v1.1

Chat with this repo
repository ↗ · DeepWiki ↗ · release v1.1 ↗ · + Follow
10 symbols 29 edges 5 files 6 documented · 60%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README

前言

​ 每当获取一个命令执行,但是服务器不出网,不能进行远程下载,或者写木马有限制,命令长度也有限制的苛刻条件下,可使用该工具进行木马分割,一键生成写入命令和合并或者追加命令写入木马;

​ windows在苛刻条件下也可以分段写入文本,再合并写入二进制文件,具体可以与Certutil配合,将二进制文件转换为txt,再分段写入后合并还原二进制文件;

功能介绍

  -e string
        指定base64编码文件
  -f string
        指定分割的文本
  -n int
        设置长度进行切割,默认64 (default 64)

功能:

​ 1、根据文件后缀进行分割:

当文件是txt时,会直接分割成几个txt
./Split_tools -f 1.txt

当文件是木马后缀时,会分割后生成写入命令
./Split_tools -f 1.jsp

分割txt:

image-20230307093119027

image-20230307093211722

分割木马:

image-20230307093032359

​ 2、可设置分割的长度

./Split_tools -f 1.txt -n 64

​ 3、可对文件进行base64编码

编码文件后,将生成./results/enbase64.txt文件
上传编码文件后,结合certutil -decode xxx.txt xxx.exe命令进行还原;

image-20240104111644639

更新记录:

[+] 2024.1.4 新增base64文件编码、输出分割命令文件

Core symbols most depended-on inside this repo

Write
called by 15
cmd/ReadandWrite.go
SplitSubN
called by 4
cmd/root.go
ReadFile
called by 3
cmd/ReadandWrite.go
Filename
called by 2
cmd/root.go
Run
called by 1
cmd/root.go
Partitions
called by 1
cmd/root.go
Partition
called by 1
cmd/root.go
EnBase64
called by 1
cmd/encode.go

Shape

Function 10

Languages

Go100%

Modules by API surface

cmd/root.go5 symbols
cmd/ReadandWrite.go2 symbols
main.go1 symbols
cmd/flag.go1 symbols
cmd/encode.go1 symbols

For agents

$ claude mcp add Split_tools \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact