23 Commits

Author SHA1 Message Date
Pavlo Khazov
0df36d871e Read changelog 2025-08-18 16:03:04 +02:00
Pavlo Khazov
d160b44190 HTTPS communication channel was implemented for agent. Uploading files to server is not yet supported, but will be in nearest future.
Agent and server files have been restrucutred for convenience. Agent source files have also been split for convenience and readability.
Operator's terminal was enchanced to better display output. Also, some comands were renamed to be more intuitive and some errors have been fixed, which led to terminal's panic. Command parses has also been enchanced to not mismatch commands and handle them strictly. Command 'tasks' now work in both general and agent contexts.
Filepath handling was fixed in 'download', 'upload' and 'spawn' commands. Now filepaths with spaces are handled correctly.
WolfSSL was ditched, as it is not really necessary anymore.
2025-08-05 20:48:22 +02:00
Pavlo Khazov
dae3f7e79e Version 0.5.0 2025-07-13 20:35:09 +02:00
John Doe
7e88e21e8b - Added size optimization flags to payload generator
- Fixed preprocessor macros for transport selection
- Https implants now send all messages via GET and big messages via POST
- Move target cookies and headers inside of domain profiles
- Added task ID reporting by client, which helps identify operator who issued command. In next version task result will be reported selectively to operator who sent command
2025-05-24 14:08:34 +02:00
Pavlo Khazov
e297caa408 Corrected readme 2025-05-03 18:37:50 +02:00
Pavlo Khazov
4df020a226 Beacon supports Win Schannel + minor adjustments 2025-05-03 13:25:41 +02:00
Pavlo Khazov
d0652b9aa5 Windows Schannel transport and prototype of https listener 2025-05-03 12:32:19 +02:00
Pavlo Khazov
723aa168f6 Added new beacon to repo. Fixed injection logic for new beacon. 2025-04-27 09:53:28 +02:00
Pavlo Khazov
1f01d1bdf0 Refactored sysinfo command and some bug fixed 2025-04-27 08:49:59 +02:00
Pavlo Khazov
88eabf5339 Refactored task-result logic and fixed proxy server bug, which prevented it from stopping. 2025-04-26 21:21:25 +02:00
Pavlo Khazov
f04fa16670 Dynamic encryption key generation for shellcode. 2025-04-23 21:34:35 +02:00
Pavlo Khazov
d6577a032d Updated readme 2025-04-23 12:37:52 +02:00
Pavlo Khazov
e55f9df4c6 Update readme. 2025-04-22 23:55:36 +02:00
Pavlo Khazov
a81eec18bb Removed unnecessary WSACleanUp, which prevented agent from reconnection after server went offline and back online.
Rewrote some blocks to use sync.Map instead of mutex.
Added PID and process name retrieving for "ps" command.
Added nice output for "ps" command and it is now handled separately, like sysinfo and keylogger.
Devel mode: if message is bigger than 512 chars, console will print only 512 chars.
Laying the foundation for new task-result logic in future:
Task handler: now generates task id for every task.
Task handler: does not delete task after sending to agent, but just marks it as dispatched.
Task handler: operator conn and ID retrieval by task id.
2025-04-22 23:54:40 +02:00
Pavlo Khazov
82033c21d5 Agent and BeaconC have new injection capabilities.
"inject" - writes shellcode into process, which can be specified by PID.
"spawn" - launches new suspended process, writes shellcode and creates thread. PPID can be specified.
Shellcode is encrypted on server, decrypted right before writing to memory and cleared right after it. Tiny-AES is used for decryption.
Modules are now dynamically loaded from folder and not harcoded.
2025-04-21 15:45:19 +02:00
Pavlo Khazov
b4179af455 Added "ps" command. TODO: add nice formating on operator side.
Prepare base for beacon in C, because GO executables are too big.
2025-04-18 21:32:21 +02:00
Pavlo Khazov
b7225b92f1 Local file path checking in "upload" command.
Added navigation commands "cd", "ls", "dir", "pwd".
Now you can navigate to parent directory also via "cd ../" not only "cd .."
Adjusted README
Also, adjusting list of global and context commands for operator. Still cannot decide which one of global commands should be accessible from agent context.
2025-04-09 18:24:45 +02:00
Pavlo Khazov
fecb89db46 Payload generator now passes feature flags directly to compiler and does not replace macro's text in config.h - this is better as if more files require to include config.h - more text replacements would need to be done, which makes code messy. 2025-03-19 11:46:12 +01:00
Pavlo Khazov
be12930bfd Minor things 2025-03-15 13:23:14 +01:00
Pavlo Khazov
67586891d6 Correct installtion instructions in Readme, edited some comments 2025-03-15 12:47:55 +01:00
Pavlo Khazov
b36c45d700 generate_certs.sh now accepts IP address as argument for certificate generation
corrected Makefile
update insctructions in README
2025-03-15 11:08:06 +01:00
khazovP
98b2e274e0 Update README.md 2025-03-11 14:45:33 +01:00
khazovP
564b71905e Create README.md 2025-02-06 16:27:00 +01:00