Added background shell exec

lib/common/empire.py

@@ -2809,6 +2809,24 @@ class PythonAgentMenu(SubMenu):
         else:
             print helpers.color("[!] Please provide a valid zipfile path", color="red")
 
+    def do_shellb(self, line):
+        """Execute a shell command as a background job"""
+        cmd = line.strip()
+        if self.mainMenu.modules.modules['python/management/osx/shellb']:
+            module = self.mainMenu.modules.modules['python/management/osx/shellb']
+            if line.strip() != '':
+                module.options['Command']['Value'] = line.strip()
+
+            module.options['Agent']['Value'] = self.mainMenu.agents.get_agent_name_db(self.sessionID)
+            module_menu = ModuleMenu(self.mainMenu, 'python/management/osx/shellb')
+            msg = "[*] Tasked agent to execute %s in the background" % (str(module.options['Path']['Value']))
+            print helpers.color(msg,color="green")
+            self.mainMenu.agents.save_agent_log(self.sessionID, msg)
+            module_menu.do_execute("")
+
+        else:
+            print helpers.color("[!] python/management/osx/shellb module not loaded")
+            
     def do_viewrepo(self, line):
         "View the contents of a repo. if none is specified, all files will be returned"
         repoName = line.strip()

lib/modules/python/collection/osx/native_screenshot.py

@@ -29,7 +29,7 @@ class Module:
             'NeedsAdmin': False,
 
             # True if the method doesn't touch disk/is reasonably opsec safe
-            'OpsecSafe': False,
+            'OpsecSafe': True,
 
             # the module language
             'Language' : 'python',

lib/modules/python/management/osx/shellb.py

@@ -0,0 +1,82 @@
+import shlex
+class Module:
+
+    def __init__(self, mainMenu, params=[]):
+
+        # metadata info about the module, not modified during runtime
+        self.info = {
+            # name for the module that will appear in module menus
+            'Name': 'shellb',
+
+            # list of one or more authors for the module
+            'Author': ['@xorrior'],
+
+            # more verbose multi-line description of the module
+            'Description': ('execute a shell command in the background'),
+
+            # True if the module needs to run in the background
+            'Background' : True,
+
+            # File extension to save the file as
+            'OutputExtension' : '',
+
+            # if the module needs administrative privileges
+            'NeedsAdmin' : False,
+
+            # True if the method doesn't touch disk/is reasonably opsec safe
+            'OpsecSafe' : False,
+
+            # the module language
+            'Language' : 'python',
+
+            # the minimum language version needed
+            'MinLanguageVersion' : '2.6',
+
+            # list of any references/other comments
+            'Comments': [ ]
+        }
+
+        # any options needed by the module, settable during runtime
+        self.options = {
+            # format:
+            #   value_name : {description, required, default_value}
+            'Agent' : {
+                # The 'Agent' option is the only one that MUST be in a module
+                'Description'   :   'Agent to execute module on.',
+                'Required'      :   True,
+                'Value'         :   ''
+            },
+            'Command' : {
+                # The 'Agent' option is the only one that MUST be in a module
+                'Description'   :   'Command to execute.',
+                'Required'      :   True,
+                'Value'         :   ''
+            }
+        }
+
+        # save off a copy of the mainMenu object to access external functionality
+        #   like listeners/agent handlers/etc.
+        self.mainMenu = mainMenu
+
+        # During instantiation, any settable option parameters
+        #   are passed as an object set to the module and the
+        #   options dictionary is automatically set. This is mostly
+        #   in case options are passed on the command line
+        if params:
+            for param in params:
+                # parameter format is [Name, Value]
+                option, value = param
+                if option in self.options:
+                    self.options[option]['Value'] = value
+
+    def generate(self):
+
+        cmdstring = self.options['Command']['Value']
+        script = """
+import shlex
+arg = shlex.split("%s")
+p = subprocess.Popen(arg, stdout=PIPE)
+res = p.stdout.read()
+print res
+""" % (cmdstring)
+        return script