Skip to content

Commit 8571041

Browse files
committed
feat(feat): new feature sandbox dockerized run and some other love \n\n Version: release/0.2.113 \n\n with much more love \n\n LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n LazyOwn/ https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: mié 13 may 2026 00:06:17 -04 \n\n Hora: 1778645177
1 parent 7845751 commit 8571041

13 files changed

Lines changed: 2950 additions & 2198 deletions

CHANGELOG.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,13 @@
22
# Changelog
33

44

5+
### Nuevas características
6+
7+
### Otros
8+
9+
* * feat(feat): new feature sandbox dockerized run and some other love \n\n Version: release/0.2.113 \n\n with much more love \n\n LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n LazyOwn/ https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: mié 13 may 2026 00:06:17 -04 \n\n Hora: 1778645177
10+
11+
512
### Otros
613

714
### Otros

COMMANDS.md

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5058,6 +5058,32 @@ Notes:
50585058
process.
50595059
- The go artifactory is ofuscated by garble if is installed
50605060

5061+
## listener
5062+
Manage C2 listeners: list, add, start, stop, remove.
5063+
5064+
Usage:
5065+
listener list - Show all configured listeners
5066+
listener add <port> [ssl] - Add a new listener (ssl: true/false)
5067+
listener start <id> - Start a listener
5068+
listener stop <id> - Stop a listener
5069+
listener remove <id> - Remove a listener
5070+
5071+
Examples:
5072+
listener add 4445 true
5073+
listener start listener-4445
5074+
listener stop default
5075+
5076+
## sandbox
5077+
Toggle or query Docker sandbox mode.
5078+
5079+
When ``sandboxed`` is ``true`` in ``payload.json``, the framework
5080+
automatically runs inside a Docker container on the next launch.
5081+
5082+
Usage:
5083+
sandbox - Show current sandbox status
5084+
sandbox on - Enable sandbox mode
5085+
sandbox off - Disable sandbox mode
5086+
50615087
## kick
50625088
Handles the process of sending a spoofed ARP packet to a specified IP address with a given MAC address.
50635089

@@ -9648,6 +9674,15 @@ Writes:
96489674
- Sets the payload options including the LHOST, USERNAME, and PASSWORD.
96499675
- Starts the exploit with the `-j -z` options.
96509676

9677+
## _load
9678+
No description available.
9679+
9680+
## _save
9681+
No description available.
9682+
9683+
## _api
9684+
No description available.
9685+
96519686
## single_combo
96529687
Generates single character combinations with the target name.
96539688

Dockerfile.sandbox

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
# LazyOwn Sandbox Dockerfile
2+
# Usage: docker build -f Dockerfile.sandbox -t lazyown-sandbox .
3+
# docker run -it --rm -v "$(pwd):/app" -w /app lazyown-sandbox [args...]
4+
5+
FROM debian:stable-slim
6+
ENV DEBIAN_FRONTEND=noninteractive
7+
8+
# System dependencies required by LazyOwn
9+
RUN apt-get update && apt-get install -y --no-install-recommends \
10+
python3 \
11+
python3-pip \
12+
python3-venv \
13+
nmap \
14+
tmux \
15+
jq \
16+
golang-go \
17+
git \
18+
curl \
19+
ca-certificates \
20+
gcc \
21+
mingw-w64 \
22+
upx-ucl \
23+
libcurl4-openssl-dev \
24+
libssl-dev \
25+
libffi-dev \
26+
netcat-traditional \
27+
dnsutils \
28+
&& rm -rf /var/lib/apt/lists/*
29+
30+
WORKDIR /app
31+
32+
# Copy dependency manifests first for layer caching
33+
COPY requirements.txt install.sh ./
34+
RUN bash install.sh 2>/dev/null || \
35+
(pip3 install --break-system-packages -r requirements.txt 2>/dev/null || true)
36+
37+
# Default entrypoint delegates to lazyown.py
38+
ENTRYPOINT ["python3", "-W", "ignore", "lazyown.py"]

README.md

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7941,6 +7941,32 @@ Notes:
79417941
process.
79427942
- The go artifactory is ofuscated by garble if is installed
79437943

7944+
## listener
7945+
Manage C2 listeners: list, add, start, stop, remove.
7946+
7947+
Usage:
7948+
listener list - Show all configured listeners
7949+
listener add <port> [ssl] - Add a new listener (ssl: true/false)
7950+
listener start <id> - Start a listener
7951+
listener stop <id> - Stop a listener
7952+
listener remove <id> - Remove a listener
7953+
7954+
Examples:
7955+
listener add 4445 true
7956+
listener start listener-4445
7957+
listener stop default
7958+
7959+
## sandbox
7960+
Toggle or query Docker sandbox mode.
7961+
7962+
When ``sandboxed`` is ``true`` in ``payload.json``, the framework
7963+
automatically runs inside a Docker container on the next launch.
7964+
7965+
Usage:
7966+
sandbox - Show current sandbox status
7967+
sandbox on - Enable sandbox mode
7968+
sandbox off - Disable sandbox mode
7969+
79447970
## kick
79457971
Handles the process of sending a spoofed ARP packet to a specified IP address with a given MAC address.
79467972

@@ -12531,6 +12557,15 @@ Writes:
1253112557
- Sets the payload options including the LHOST, USERNAME, and PASSWORD.
1253212558
- Starts the exploit with the `-j -z` options.
1253312559

12560+
## _load
12561+
No description available.
12562+
12563+
## _save
12564+
No description available.
12565+
12566+
## _api
12567+
No description available.
12568+
1253412569
## single_combo
1253512570
Generates single character combinations with the target name.
1253612571

@@ -12705,6 +12740,13 @@ No description available.
1270512740
# Changelog
1270612741

1270712742

12743+
### Otros
12744+
12745+
### Otros
12746+
12747+
* * feature(features news): with love \n\n Version: release/0.2.112 \n\n \n\n LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n LazyOwn/ https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: mar 12 may 2026 23:42:03 -04 \n\n Hora: 1778643723
12748+
12749+
1270812750
### Otros
1270912751

1271012752
### Otros

0 commit comments

Comments
 (0)