infosecn1nja
/
PoshC2_Python
mirror of https://github.com/infosecn1nja/PoshC2_Python.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Implant timeout highlighting is now based on beacon time - yellow if it's not checked in for 3x beacon time and red if not checked in for 10x beacon time

chunking
m0rv4i 2019-02-12 20:21:19 +00:00
parent ff4cea2795
commit e6cb404c8a
2 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ImplantHandler.py
View File

@ -202,16 +202,16 @@ def startup(user, printhelp = ""):
from datetime import datetime, timedelta
LastSeenTime = datetime.strptime(LastSeen,"%m/%d/%Y %H:%M:%S")
now = datetime.now()
nowplus10 = now - timedelta(minutes=10)
nowplus60 = now - timedelta(minutes=59)
nowMinus3Beacons = now - timedelta(seconds=(int(Sleep) * 3))
nowMinus10Beacons = now - timedelta(seconds=(int(Sleep) * 10))
sID = "["+str(ID)+"]"
if Label == None:
sLabel = ""
else:
sLabel = "["+Label+"]"
if nowplus60 > LastSeenTime:
if nowMinus10Beacons > LastSeenTime:
print (Colours.RED + "%s%s: Seen:%s | PID:%s | %s | %s\\%s @ %s (%s) %s" % (sID.ljust(4), sLabel, LastSeen, PID.ljust(5), Sleep, Domain, DomainUser, Hostname, Arch, Pivot))
elif nowplus10 > LastSeenTime:
elif nowMinus3Beacons > LastSeenTime:
print (Colours.YELLOW + "%s%s: Seen:%s | PID:%s | %s | %s\\%s @ %s (%s) %s" % (sID.ljust(4), sLabel, LastSeen, PID.ljust(5), Sleep, Domain, DomainUser, Hostname, Arch, Pivot))
else:
print (Colours.GREEN + "%s%s: Seen:%s | PID:%s | %s | %s\\%s @ %s (%s) %s" % (sID.ljust(4), sLabel, LastSeen, PID.ljust(5), Sleep, Domain, DomainUser, Hostname, Arch, Pivot))

1
changelog.txt
View File

@ -20,6 +20,7 @@ Added ImplantID to Tasks table as a foreign key, so it's logged in the Tasks rep
Added Testing.md for testing checklist/methodology
Fix Get-ScreenshotAllWindows to return correct file extension
Fix searchhelp for commands with caps
Implant timeout highlighting is now based on beacon time - yellow if it's not checked in for 3x beacon time and red if not checked in for 10x beacon time
4.7 (03/02/19)
==============