Red Rabbit





______ __ ______ __ __ __ __ _____ __ __ __ | __ \.-----.--| |______| __ \.---.-.| |--.| |--.|__| |_ ______| \.-----.----.--.--.--------.-----.-----.| |_.---.-.| |_|__|.-----.-----. | <| -__| _ |______| <| _ || _ || _ || | _|______| -- | _ | __| | | | -__| || _| _ || _| || _ | | |___|__||_____|_____| |___|__||___._||_____||_____||__|____| |_____/|_____|____|_____|__|__|__|_____|__|__||____|___._||____|__||_____|__|__| The next few sections will be dedicated to the red rabbit documentation, the sections will be disected by module, eg: (0x0001 is module search) it goes from there from the list above. Another example of how modules will be seperated is by the cloumn number in the chart above where Brute is the second module name, its section will be labeled 0x0002 - BRUTE -, please take your time going through the documentation ALOT of people often forget about documentation then come to the devs confused as to why some dont work, or how the script works and how to use it, so please, when i mean read it i mean READ IT CAREFULLY!





0x102 - Interacting with red rabbit using flags
Section 0x102 will be talking about flags and their usages red rabbit relies heavily on flags and user input given its natural ability to be a framewok.
> --filepath --filepath is a flag that can be used to specify a filepath, its usage is as follows sudo ./main --filepath="examples/pcap/ospf.pcap"
> --wordl, --hashl, --userl all of these flags are similar, thse flags stand for hash, user, and word lists to be used for things like brute forcing attacks, hash attacks, and other attacks that may need a wordlist. its usage is quite simple --wordl if you want to specify a wordlist of passwords --userl if you want to specify a wordlist of username --hashl if you want to specify a wordlist of hashes they are quite simple to use
> -i, --input, -o, --output This is used for most stegonography utilities -i or --input can be used as a input image -o or --output can be used as an output image or output filename This flag isnt used much in the script however it can still come in handy espcially when it comes to commands that rely on a input and output filename, most of this is just due to how the script was built around certian modules
> --CIDR, -z -z and --CIDR are commands that are used to run the CIDR of a ping command outside of ping arp see section 0x010+ for more information or the ping modul section for more information --CIDR can be used as the following --CIDR="10.0.0.1/24"
> --payload --payload is used to specify a payload to either inject into images, search for in payload parsing, parse a payload, or really any command that requires a payload an example of using this flag is --payload="script>alert()script>"
> --interface the --interface flag is used to specify a wireless interface to use for network sniffing or network based attacks that may need a interface for purposes of specification example --interface="wlan0mon"
> --passlen --passlenis a flag to set the length of a string used for password / wordlist generation. The flag takes a number value and does not have a limit of how long each generation string can be. the defualt length for this is 16 example --passlen="16"
> --type the --type flag allows you to specify a certian chunk of a PNG image before you inject payloads into it, an example usage is of the following --type="IEND"
> --offset specify a offset to inject images at most of this helps with PNG image injection and is required before you inject PNG formats an example usage is --offset="0x00001"
> --reso This is a unqiue flag that was added for user customization, basically with three options this allows you to customize the way files will be outputted or data will be formatted all three options -> landscape, verticle, none, shark none will not give you any banner and will just start the console landscape will output a landscape like banner any of the few shark will output a larger shark like banner with larger less veritcle will output a simple banner with simple output usage: --reso="options>"