Anbu

 

Anbu is a CLI tool that helps perform everyday tasks in an expert way. Just like the Anbu Black Ops division in Naruto, this tool helps carry out all the shadow-operations in your daily workflow.

Installation • Usage • Tips & Tricks

A summary of everything that Anbu can perform:

Installation

• Download directly from RELEASES. Anbu is available for AMD64 and ARM64 for Linux and MacOS.
• To build latest commit directly via Go, use:

  go install github.com/tanq16/anbu@latest
  

• To clone and build locally for development, use:

  git clone https://github.com/tanq16/anbu.git && \
  cd anbu && \
  go build .
  

Usage

Anbu supports a large number of operations across the board. All commands support the --debug flag to enable debug logging.

The specific details of each are:

• Time Operations (alias: t)

  anbu time          # prints time in various formats
  anbu time now      # prints time in various formats
  anbu time purple   # print time and public IP for purple teams
  anbu time diff -e 1744192475 -e 1744497775  # print time difference between 2 epochs
  anbu time parse -t "13 Apr 25 16:30 EDT"  # read given time and print in multiple formats
  anbu time parse -t "13 Apr 25 16:30 EDT" -p purple  # parse time and print in purple team format
  anbu time until -t "13 Apr 25 16:30 EDT"  # read time and print difference from now
  

• Secrets Management (alias: p)

  anbu pass list  # List all secrets
  
  # Managing Secrets (Password asked or from ANBUPW env var)
  anbu pass add API_KEY     # Create a new secret (encrypted with AES GCM at rest)
  anbu pass add API_KEY -m  # Create a new multi-line secret
  anbu pass get API_KEY     # Retrieve a secret (decrypted value)
  anbu pass delete API_KEY  # Delete a secret
  
  # Import and Export to file
  anbu pass export backup.json  # Export to a file (secrets are decrypted)
  anbu pass import backup.json  # Import from a file
  

• Network Tunneling

  # forward TCP tunnels
  anbu tunnel tcp -l localhost:8000 -r example.com:80
  anbu tunnel tcp -l localhost:4430 -r example.com:443 --tls --insecure
  
  # forward SSH tunnels
  anbu tunnel ssh -l localhost:8000 -r target.com:3306 -s ssh.vm.com:22 -u bob -p "builder"
  anbu tunnel ssh -l localhost:8000 -r target.com:3306 -s ssh.vm.com:22 -u bob -k ~/.ssh/mykey
  
  # reverse SSH tunnels
  anbu tunnel rssh -l localhost:3389 -r 0.0.0.0:8080 -s ssh.vm.com:22 -u bob -p "builder"
  

• Simple HTTP/HTTPS Server

  anbu http-server                     # Serves current directory on http://localhost:8000
  anbu http-server -l 0.0.0.0:8080 -t  # Serve HTTPS on given add:port with a self-signed cert
  anbu http-server -u                  # Enables file upload via PUT requests
  

• Secrets Scan

  anbu secret-scan                 # Scans current directory for secrets based on regex matches
  anbu secret-scan ./path/to/scan  # Scans path for secrets based on regex matches
  anbu secret-scan ./path -p       # Scans path with generic matches table (maybe false positive)
  

• IP Information (alias: ip)

  anbu ip-info      # Print local and public IP information
  anbu ip-info -6   # Print local (IPv4 & IPv6) and public IP information
  

• Bulk Rename

  anbu rename 'prefix_(.*)' 'new_\1'        # Rename files matching regex pattern
  anbu rename -d 'old_(.*)' 'new_\1'        # Rename directories instead of files
  anbu rename '(.*)\.(.*)' '\1_backup.\2'   # Add _backup before extension
  anbu rename 'image-(\d+).jpg' 'IMG_\1.jpeg' -r # Perform a dry-run without renaming
  

• Data & Encoding Conversion (alias: c)

  # File format conversion
  anbu convert yaml-json config.yaml  # Convert YAML file to JSON
  anbu convert json-yaml data.json    # Convert JSON file to YAML
  
  # Encoding conversion
  anbu convert b64 "Hello World"              # Convert text to base64
  anbu convert b64d "SGVsbG8gV29ybGQ="        # Decode base64 to text
  anbu convert hex "Hello World"              # Convert text to hex
  anbu convert hexd "48656c6c6f20576f726c64"  # Decode hex to text
  anbu convert url "Hello World"              # URL encode text
  anbu convert urld "Hello%20World"           # URL decode text
  
  # Cross-encoding conversion
  anbu convert b64-hex "SGVsbG8gV29ybGQ="        # Convert base64 to hex
  anbu convert hex-b64 "48656c6c6f20576f726c64"  # Convert hex to base64
  
  # JWT Decoding
  anbu convert jwtd "$TOKEN"  # Decodes and prints the headers and payload
  

• File Encryption/Decryption (alias: fc)

  anbu file-crypt /path/to/file.zip -p "P@55w0rd"    # Encrypt a file
  anbu file-crypt /path/to/encrypted.enc -p "P@55w0rd" -d # Decrypt a file
  

• RSA Key Pair Generation

  anbu key-pair -o mykey -k 4096  # 4096 bit RSA key pair in PEM format
  anbu key-pair -s -o anbu-key    # 2048 bit RSA key pair in OpenSSH format
  

• String Generation (alias: s)

  anbu string 23               # generate 23 (100 if not specified) random alphanumeric chars
  anbu string seq 29           # prints "abcdefghijklmnopqrstuvxyz" until desired length
  anbu string rep 23 str2rep   # prints "str2repstr2rep...23 times"
  
  anbu string uuid     # generates a uuid
  anbu string ruid 16  # generates a short uuid of length b/w 1-32
  anbu string suid     # generates a short uuid of length 18
  
  anbu string password           # generate a 12-character complex password
  anbu string password 16        # generate a 16-character complex password
  anbu string password 8 simple  # generate an 8-letter lowercase password
  
  anbu string passphrase               # generate a 3-word passphrase with hyphens
  anbu string passphrase 5             # generate a 5-word passphrase with hyphens
  anbu string passphrase 4 '@'         # generate a 4-word passphrase with a custom separator
  

• Stash

  # Stash a file or folder (keeps original, unlike git stash)
  anbu stash fs /path/to/file.txt
  anbu stash fs ./my-folder
  
  # Stash text from stdin
  echo "my text" | anbu stash text my-snippet
  anbu stash text notes <<EOF
  Multi-line text
  goes here
  EOF
  
  # List all stashed entries
  anbu stash list
  
  # Apply a stash without removing it (text prints to stdout, files/folders extracted to current directory)
  anbu stash apply 1
  
  # Apply a stash and remove it (pop operation)
  anbu stash pop 1
  
  # Remove a stash without applying it
  anbu stash clear 1
  

• Google Drive Interaction (alias: gd)

  # Set up credentials by placing credentials.json at ~/.anbu-gdrive-credentials.json or pass with --credentials flag
  anbu gdrive -c path/to/credentials.json list
  
  # List files and folders (defaults to root 'My Drive')
  anbu gdrive list
  anbu gd ls "My Folder"
  anbu gd ls "My Folder/file.txt"  # Shows info for a specific file
  
  # Upload a file or folder (defaults uploading to root 'My Drive' when not specified)
  anbu gdrive upload local-file.txt "My Folder"
  anbu gd up local-folder  # uploads folder recursively to root
  
  # Download a file or folder to the current working directory
  anbu gdrive download "My Drive Folder/remote-file.txt"
  anbu gd dl "My Drive Folder/remote-folder"  # downloads folder recursively
  
  # Sync local directory with remote directory (uploads missing, deletes remote-only, updates changed)
  anbu gdrive sync ./local-dir "My Drive Folder"
  anbu gd sync ./local-dir "Backup"  # syncs using MD5 hashes (yes, Google uses this) for comparison
  

• Box Interaction

  # Set up credentials by placing credentials.json at ~/.anbu-box-credentials.json or pass with --credentials flag
  anbu box -c path/to/credentials.json list
  
  # List files and folders (defaults to root folder)
  anbu box list
  anbu box ls "My Folder"
  anbu box ls "My Folder/file.txt"  # Shows info for a specific file
  
  # Upload a file or folder (defaults uploading to root when not specified)
  anbu box upload local-file.txt "My Folder"
  anbu box up local-folder  # uploads folder recursively to root
  
  # Download a file or folder to the current working directory
  anbu box download "My Folder/remote-file.txt"
  anbu box dl "My Folder/remote-folder"  # downloads folder recursively
  
  # Sync local directory with remote directory (uploads missing, deletes remote-only, updates changed)
  anbu box sync ./local-dir "Test Folder"
  anbu box sync ./local-dir ""  # syncs to root folder using SHA1 hashes (yes, Box uses this) for comparison
  

• GitHub Interaction (alias: gh)

  # Put OAuth app client ID at ~/.anbu-github-credentials.json or pass another file with --credentials flag
  anbu github -c path/to/credentials.json list owner/repo/i
  
  anbu gh ls owner/repo/i # List issues
  anbu gh ls owner/repo/i/23 # List comments for an issue
  anbu gh ls owner/repo/pr # List pull requests
  anbu gh ls owner/repo/pr/24 # List comments for a PR
  anbu gh ls owner/repo/a # List workflows
  anbu gh ls owner/repo/a/3 # List jobs in a workflow run (3rd run)
  
  # Get info about a job (4th job in 3rd workflow run)
  anbu gh ls owner/repo/a/3/4
  
  # Download logs for a job to anbu-github.log
  anbu gh ls owner/repo/a/3/4/logs
  
  # Add comment to an issue or pr (end with 'EOF' on a new line)
  anbu gh add owner/repo/i/23
  anbu gh add owner/repo/pr/24
  
  anbu gh make owner/repo/i # Create a new issue
  anbu gh make owner/repo/pr/newfeat # Create a PR from branch to main
  anbu gh make owner/repo/pr/newfeat/develop # Create a PR from branch to base branch
  

• File System Synchronization

  # Run the fs-sync server (maintains source of truth)
  anbu fs-sync server -p 8080 -d /path/to/sync/dir
  anbu fs-sync server --port 8080 --dir ./sync-dir --ignore ".git/*,*.tmp"
  
  # Run the fs-sync client (connects to server and syncs)
  anbu fs-sync client -a ws://server.example.com:8080/ws -d /path/to/local/dir
  anbu fs-sync client --addr wss://file.sync.com/ws --dir ./local-dir --ignore "node_modules/*,*.log"
  

• Neo4j Database Interaction

  # Execute a single Cypher query
  anbu neo4j -q "MATCH (n) RETURN n LIMIT 5"
  anbu neo4j -r neo4j://localhost:7687 -u neo4j -p password -d neo4j -q "MATCH (n) RETURN count(n)"
  
  # Execute queries from a YAML file (multi-line queries supported using '|' in YAML)
  anbu neo4j --query-file ./queries.yaml --output-file results.json
  
  # Execute write queries (CREATE, UPDATE, DELETE, etc.)
  anbu neo4j --write -q "CREATE (n:Person {name: 'Alice'}) RETURN n"
  
  # Custom connection settings
  anbu neo4j -r neo4j+s://example.com:7687 -u admin -p secret -d mydb -q "MATCH (n) RETURN n" -o output.json
  

• Markdown Viewer (alias: md)

  anbu markdown          # Start markdown viewer on default address (0.0.0.0:8080)
  anbu md -l :3000       # Start on port 3000 on all interfaces
  

Tips & Tricks

anbu tunnel rssh -l localhost:3389 -r 0.0.0.0:8001 -s vps.example.com:22 -u bob -p builder

anbu tunnel ssh -l localhost:3389 -r localhost:8001 -s vps.example.com:22 -u bob -p builder

anbu tunnel ssh -l localhost:3306 -r db.internal.network:3306 -s jumpbox.vpn.com:22 -u bob -p builder

mysql -u dbuser -p -h localhost -P 3306

hypothetical --neo4j-username neo4j --neo4j-password sensitive

hypothetical --neo4j-username $(anbu pass get n4jun) --neo4j-password $(anbu pass get neo4jpw)

hypothetical_command --uuid $(a s uuid)

{
  "project": "MyProject/2024/Documents",
  "reports": "Shared/Reports"
}