Main Menu Structure

Quick Overview

The main menu is structured as follows:

[0] Scan network for Admin Access

This option scans the network for local admin access using the SMB protocol by default. If admin access is found on any machine, it will be displayed in the main menu under Admin Sessions (SMB) or Global-Listener Sessions (WMI), depending on the protocol used.

[1] Single-Listener (single target)

This option creates a payload designed to be executed on a single target. Initially, a named pipe is created locally, with a specific name. The payload generated by this option, when executed on the target machine, initiates a connection back to the machine where Amnesiac is running, specifically to the named pipe created with that specific name. It's important to note that the named pipe created using this option is accessible to anyone. However, once the target connects, it is no longer available for anyone else to connect.

[2] Global-Listener (multiple targets)

This option creates a payload designed to be executed on multiple targets. When executed, the payload generates a named pipe on the target with a pre-defined name. Named pipes created using this option are only accessible by the user operating Amnesiac, based on their SID. Others cannot connect.

[3] Scan network for listening targets

This option allows users to scan the network for listening targets. Amnesiac scans the network for machines having a named pipe available with the name set by the payload generated using option 2. If a matching named pipe is found, Amnesiac connects to that target.