MSI-Exploit-k4

## https://sploitus.com/exploit?id=F9513AE9-7BCE-5C49-8B17-5A09F91845EA
MSI-Explot-k4 

> **Next-Gen Red Team Framework for MSI-Based Privilege Escalation**  

 Author: Nin Kanong (k4n0ng) 


> [![GitHub](https://img.shields.io/github/license/Nin-Kanong/MSI-Exploit-k4)](LICENSE)  
> [![Python 3.8+](https://img.shields.io/badge/python-3.8+-blue.svg)](https://www.python.org/)  
> [![Kali Linux](https://img.shields.io/badge/Kali-Linux-green)](https://www.kali.org/)

![Banner](https://via.placeholder.com/1200x300?text=MSI-Exploit-k4+v4.0+—+Bypass+Defender+RTP)

## 🚀 Overview

**MSI-Exploit-k4** is a modular, enterprise-grade framework designed to exploit the **“Always Install with Elevated Privileges”** Windows misconfiguration — allowing attackers to gain **SYSTEM-level access** via malicious `.msi` files — even when targeting **non-admin users**.

Built with **Python 3**, it supports **dual payload engines**, **AV evasion**, **multiple delivery methods**, and **auto-installation of dependencies** — making it ideal for **red team operations**, **penetration testing**, and **CTF challenges**.

---





## 🌟 Features

✅ **Auto-installs Metasploit** if missing (Ubuntu/Kali compatible)  
✅ **Dual Payload Engines**:  
  • `msfvenom` (shell_reverse_tcp)  
  • `WiX + PowerShell` (AMSI-bypassing, Base64 obfuscated)  
✅ **Multiple Listeners**: Netcat, Socat, Python TCP  
✅ **AV Evasion**: `shikata_ga_nai`, Base64 obfuscation, AMSI bypass  
✅ **Flexible Delivery**: HTTP, HTTPS, SMB (coming soon)  
✅ **Victim Validation**: Auto-checks SMB connectivity & policy status  
✅ **Modular Architecture**: Easy to extend with new payloads or listeners  
✅ **Docker Support**: Run in containerized environments  
✅ **Professional Logging**: Session logs, error tracking, timestamps  
✅ **Cross-Platform Friendly**: Works on Kali, Ubuntu, WSL2

---


## Structure
````
MSI-Exploit-k4/
├── msi_exploit.py          # Main entry point
├── core/
│   ├── __init__.py
│   ├── installer.py        # Payload generation
│   ├── listener.py         # Netcat, Socat, Python TCP
│   ├── delivery.py         # HTTP/SMB hosting
│   ├── evasion.py          # Encoding, obfuscation
│   ├── validator.py        # Victim policy check
│   └── utils.py            # Helpers, logging, IP detection
├── payloads/
│   ├── templates/
│   │   ├── reverse_nc.ps1
│   │   └── custom.bat
│   └── generated/          # Auto-generated payloads
├── templates/
│   └── wix/
│       └── product.wxs
├── config/
│   └── default.yaml
├── logs/
│   └── sessions/
├── tests/
│   └── test_core.py
├── Dockerfile
├── requirements.txt
├── setup.sh                # One-click Kali setup
├── README.md
└── LICENSE
````







## 🛠️ Requirements

- **Operating System**: Kali Linux (recommended), Ubuntu 20.04+, or WSL2
- **Python**: 3.8+
- **Tools**: `docker`, `netcat-openbsd`, `python3-pip`
- **Optional**: `socat` for advanced listeners

> 💡 No root required for most operations — except HTTP server (port 80).

---

## 🚀 Quick Start

### 1. Clone the Repository

````
git clone https://github.com/Nin-Kanong/MSI-Exploit-k4.git
cd MSI-Exploit-k4
````














> **Next-Gen Red Team Framework for MSI-Based Privilege Escalation**

![Banner](https://via.placeholder.com/800x200?text=MSI-Exploit-k4+v4.0)

## 🔥 Features

- ✅ **Auto-installs Metasploit** if missing
- ✅ **Dual payload engines**: `msfvenom` + **WiX (PowerShell)**
- ✅ **Multiple listeners**: Netcat, Socat, Python TCP
- ✅ **AV evasion**: shikata_ga_nai, Base64 obfuscation
- ✅ **Flexible delivery**: HTTP, HTTPS, SMB
- ✅ **Victim validation**: auto-check connectivity
- ✅ **Modular & extensible** architecture
- ✅ **Docker support**
- ✅ **Professional logging**

## 🛠️ Requirements

- Kali Linux (recommended)
- Python 3.8+
- Docker (for WiX payloads)

## 🚀 Quick Start

```bash
git clone https://github.com/yourusername/MSI-Exploit-k4.git
cd MSI-Exploit-k4
chmod +x setup.sh
./setup.sh
./msi_exploit.py --ip 192.168.1.100