Code

V1.6.0/http c2#1454

Code

Merged

moloch-- merged 123 commits intomasterBishopFox/sliver:masterfrom v1.6.0/http-c2BishopFox/sliver:v1.6.0/http-c2Copy head branch name to clipboardNov 13, 2023

+11,452-5,974

Commits

Commits on May 17, 2023

• Outline http c2 in db

  moloch--

  committed
  8ad0dfb

  Copy full SHA for 8ad0dfb

• Outline http c2 in db

  moloch--

  committed
  f1f736d

  Copy full SHA for f1f736d

• Implement gorm hooks, cleanup

  moloch--

  committed
  7661d0c

  Copy full SHA for 7661d0c

Commits on May 18, 2023

• Expanded default http c2 config

  moloch--

  committed
  55c8cdd

  Copy full SHA for 55c8cdd

• Added more cookie names

  moloch--

  committed
  086eb7f

  Copy full SHA for 086eb7f

• Implemented basic http c2 pb

  moloch--

  committed
  afa2b5c

  Copy full SHA for afa2b5c

• Implemented basic http c2 pb

  moloch--

  committed
  a947d9e

  Copy full SHA for a947d9e

• Implemented ToProtobuf() conversions

  moloch--

  committed
  ae101d3

  Copy full SHA for ae101d3

• Implemented ToProtobuf() conversions

  moloch--

  committed
  bad1897

  Copy full SHA for bad1897

Commits on May 19, 2023

• wip refactor of generate code

  moloch--

  committed
  865f295

  Copy full SHA for 865f295

Commits on May 24, 2023

• switch use of models.ImplantConfig to clientpb.ImplantConfig

  TimBF

  committed
  89b0263

  Copy full SHA for 89b0263

Commits on May 25, 2023

• ImplantConfigSave uses model object instead of protobuf

  TimBF

  committed
  82c68bd

  Copy full SHA for 82c68bd

• added default http profile generator

  TimBF

  committed
  bedc225

  Copy full SHA for bedc225

• check for presence of default http c2 profile on startup, and if not present generate and insert into database

  TimBF

  committed
  0f38081

  Copy full SHA for 0f38081

• add boolean checks for named pipe and tcp pivot

  TimBF

  committed
  d98b24f

  Copy full SHA for d98b24f

• fix sliver rendering code variable name changes

  TimBF

  committed
  d674b8d

  Copy full SHA for d674b8d

Commits on May 26, 2023

• added check for included c2 channels during config generation

  TimBF

  committed
  09f2521

  Copy full SHA for 09f2521

Commits on May 28, 2023

• fixed renamed protobuf issues and default configuration save

  TimBF

  committed
  3b295b3

  Copy full SHA for 3b295b3

Commits on May 30, 2023

• fix path segments generation issues

  TimBF

  committed
  95a4604

  Copy full SHA for 95a4604

• protobuf build update

  TimBF

  committed
  8f7da07

  Copy full SHA for 8f7da07

• load http configurations from database on listener creation

  TimBF

  committed
  75c3d0c

  Copy full SHA for 75c3d0c

• autoload default profile during implant generation

  TimBF

  committed
  4b7b8c4

  Copy full SHA for 4b7b8c4

• Merge branch 'v1.6.0/master' into v1.6.0/http-c2

  TimBF

  committed
  a6ba863

  Copy full SHA for a6ba863

• add ECCPublicKeyDigest to protobuf and database

  TimBF

  committed
  429c520

  Copy full SHA for 429c520

• added profile randomization during implant generation

  TimBF

  committed
  c03975d

  Copy full SHA for c03975d

• replaced hardcoded http profile value with commandline arg, fixed pb issue with certificate digest and switched from profile id to profile name in implantconfig pb

  TimBF

  committed
  3e67c6e

  Copy full SHA for 3e67c6e

Commits on Jun 4, 2023

• fix for binary test cases

  TimBF

  committed
  c8a661d

  Copy full SHA for c8a661d

Commits on Jun 5, 2023

• update protobuf definition for c2 listeners

  TimBF

  committed
  43eb9e3

  Copy full SHA for 43eb9e3

• remove persistent flag from client job commands and update variable name

  TimBF

  committed
  126dcf7

  Copy full SHA for 126dcf7

• rebuild protobuf

  TimBF

  committed
  906b8ee

  Copy full SHA for 906b8ee

• move away from server object to protobuf

  TimBF

  committed
  dd43313

  Copy full SHA for dd43313

• typo

  TimBF

  committed
  5281465

  Copy full SHA for 5281465

• added listener jobs to database, fixed jobid output issue and implemented save query for listener jobs

  TimBF

  committed
  a463aa1

  Copy full SHA for a463aa1

• fixed jobid display error and added sql tables for dns domains and mtls

  TimBF

  committed
  3dc7002

  Copy full SHA for 3dc7002

• remove listener from db when killed

  TimBF

  committed
  1241d87

  Copy full SHA for 1241d87

Commits on Jun 6, 2023

• store and retrieve persistent listeners from database

  TimBF

  committed
  1419e71

  Copy full SHA for 1419e71

• remove unused code

  TimBF

  committed
  1953547

  Copy full SHA for 1953547

• added multiplayer mode job listener to db

  TimBF

  committed
  dcb0128

  Copy full SHA for dcb0128

Commits on Jun 7, 2023

• set default value for c2 profile and move to constant strings

  TimBF

  committed
  2cac1eb

  Copy full SHA for 2cac1eb

• automatically update job id's on server restart

  TimBF

  committed
  a73bdf9

  Copy full SHA for a73bdf9

• refactor job creation and move hardcoded values to constants

  TimBF

  committed
  ee95829

  Copy full SHA for ee95829

• add default port check for mtls

  TimBF

  committed
  678c70d

  Copy full SHA for 678c70d

• switch to constants variable

  TimBF

  committed
  25f7c6e

  Copy full SHA for 25f7c6e

• add protobuf definition for watchtower config

  TimBF

  committed
  6e49197

  Copy full SHA for 6e49197

Commits on Jun 8, 2023

• added watchtower objects to sql db

  TimBF

  committed
  fca1202

  Copy full SHA for fca1202

Commits on Jun 9, 2023

• updated watchtower pb object, and added commands for listing adding and removing watchtower configuration

  TimBF

  committed
  20221a8

  Copy full SHA for 20221a8

• added rpc functions for watchtower configuration

  TimBF

  committed
  aac5b22

  Copy full SHA for aac5b22

Commits on Jun 11, 2023

• allow inserting, deleting and retrieving watchtower configurations from database

  TimBF

  committed
  a1194c0

  Copy full SHA for a1194c0

• retrieve monitor config from sqlite db on start command

  TimBF

  committed
  b7d8c53

  Copy full SHA for b7d8c53

• fixed http c2 randomizer and path segments length bug

  TimBF

  committed
  c7531bd

  Copy full SHA for c7531bd

• add default http c2 profile parameter for beacons

  TimBF

  committed
  aa2652e

  Copy full SHA for aa2652e

Commits on Aug 30, 2023

• merged 1.6 master into branch

  TimBF

  committed
  58b4596

  Copy full SHA for 58b4596

• merge master into branch

  TimBF

  committed
  29c2c9d

  Copy full SHA for 29c2c9d

Commits on Sep 4, 2023

• merged master into branch

  TimBF

  committed
  4f98512

  Copy full SHA for 4f98512

• add autocomplete for c2profile parameter during generation

  TimBF

  committed
  67c519e

  Copy full SHA for 67c519e

• added main request handler for http profiles

  TimBF

  committed
  580d512

  Copy full SHA for 580d512

• update handler to select session cookie based on profile

  TimBF

  committed
  b1ba761

  Copy full SHA for b1ba761

Commits on Sep 6, 2023

• remove error handling statement

  TimBF

  committed
  f2b4221

  Copy full SHA for f2b4221

Commits on Sep 7, 2023

• fix regression, http listener now uses correct port, and http headers are set when an associated profile can be found

  TimBF

  committed
  eccc31f

  Copy full SHA for eccc31f

Commits on Sep 13, 2023

• display implant c2 profile in implants command

  TimBF

  committed
  4921fa4

  Copy full SHA for 4921fa4

• implemented c2 profile import and display

  TimBF

  committed
  99817a5

  Copy full SHA for 99817a5

• Merge branch 'master' into v1.6.0/http-c2

  TimBF

  committed
  002e38e

  Copy full SHA for 002e38e

• fix profile parsing errors

  TimBF

  committed
  1bba353

  Copy full SHA for 1bba353

Commits on Sep 14, 2023

• fix circular dependency

  TimBF

  committed
  4bcefdd

  Copy full SHA for 4bcefdd

• moved c2profile struct to client assets

  TimBF

  committed
  e5a01ae

  Copy full SHA for e5a01ae

• save profile to database on import

  TimBF

  committed
  7b67ec8

  Copy full SHA for 7b67ec8

Commits on Sep 18, 2023

• added dropdown to choose c2 profile

  TimBF

  committed
  d924d80

  Copy full SHA for d924d80

• add check for duplicate stager extension and duplicate c2 profile name

  TimBF

  committed
  e70a022

  Copy full SHA for e70a022

Commits on Sep 25, 2023

• restart http/s listeners on c2 profile import

  TimBF

  committed
  96a6efa

  Copy full SHA for 96a6efa

• move job restart on profile import client side

  TimBF

  committed
  237663b

  Copy full SHA for 237663b

Commits on Sep 28, 2023

• allow overwriting c2 profiles on the fly

  TimBF

  committed
  7fce95e

  Copy full SHA for 7fce95e

Commits on Sep 29, 2023

• added watchtower configuration import/deletion/view

  TimBF

  committed
  01c8131

  Copy full SHA for 01c8131

Commits on Oct 3, 2023

• added c2 profile flag to profile creation

  TimBF

  committed
  3da9ffb

  Copy full SHA for 3da9ffb

• display c2 profile in profile details

  TimBF

  committed
  f6ac166

  Copy full SHA for f6ac166

Commits on Oct 4, 2023

• create resourceID table

  TimBF

  committed
  3ba3cf1

  Copy full SHA for 3ba3cf1

• added resource id queries and save

  TimBF

  committed
  0b9d7cc

  Copy full SHA for 0b9d7cc

Commits on Oct 6, 2023

• generate encoder id's on server setup for backend

  TimBF

  committed
  b8dcf75

  Copy full SHA for b8dcf75

• embed encoder id's during code rendering

  TimBF

  committed
  49b8cd2

  Copy full SHA for 49b8cd2

• save implant id to profile during profile creation

  TimBF

  committed
  ea1fbf1

  Copy full SHA for ea1fbf1

• switch to uin64[] instead of int[]

  TimBF

  committed
  3d6a8dd

  Copy full SHA for 3d6a8dd

• remove resource id on profile deletion

  TimBF

  committed
  114ad3e

  Copy full SHA for 114ad3e

• Merge branch 'master' into v1.6.0/http-c2

  TimBF

  committed
  03cfab5

  Copy full SHA for 03cfab5

• change naming and type of encoder id's

  TimBF

  committed
  cb8170c

  Copy full SHA for cb8170c

Commits on Oct 8, 2023

• modify stagerhandler to serve valid profile (without stage-listener mods) when the correct stager id is used as a nonce

  TimBF

  committed
  da9b72c

  Copy full SHA for da9b72c

• fix stager listener url generationerror

  TimBF

  committed
  c578c42

  Copy full SHA for c578c42

• display profile nonce

  TimBF

  committed
  a0fa261

  Copy full SHA for a0fa261

Commits on Oct 13, 2023

• switch to referencing builds by resource ID instead of profiles in staging requests and prepare rpc call to save stager builds

  TimBF

  committed
  47f19d4

  Copy full SHA for 47f19d4

Commits on Oct 15, 2023

• modify backend to server arbitrary stages for a given implant configuration

  TimBF

  committed
  05a6947

  Copy full SHA for 05a6947

• Refactor websites to only use protobuf objects

  TimBF

  committed
  ff382e4

  Copy full SHA for ff382e4

Commits on Oct 16, 2023

• started moving c2profile to only use protobuf, fixed bug in http mainhandler and c2profile command now also displays poll extension

  TimBF

  committed
  6c77151

  Copy full SHA for 6c77151

Commits on Oct 22, 2023

• Started moving all use of models.* structs to the models and helpers file. The goal of this commit is to eventually only use protobuf accross the entire project, in order to avoid mixing different …

  Show description for fdec3cb
  TimBF

  committed
  fdec3cb

  Copy full SHA for fdec3cb

• check port is not in use before spawning listener

  TimBF

  committed
  504e5c7

  Copy full SHA for 504e5c7

• move implantbuild models to protobuf struct

  TimBF

  committed
  e204247

  Copy full SHA for e204247

• renamed db functions for consistency

  TimBF

  committed
  7dc6310

  Copy full SHA for 7dc6310

• fix implant config generation for stagers

  TimBF

  committed
  b723194

  Copy full SHA for b723194

Commits on Oct 24, 2023

• fix incorrect object reference error

  TimBF

  committed
  fce8673

  Copy full SHA for fce8673

• refactored generate rpc

  TimBF

  committed
  02d1eb5

  Copy full SHA for 02d1eb5

• removed name from implantconfig, implant names are only tied to builds

  TimBF

  committed
  99281ba

  Copy full SHA for 99281ba

• remove save stager rpc call

  TimBF

  committed
  9870c25

  Copy full SHA for 9870c25

Commits on Oct 31, 2023

• resource id's no longer need to be prime

  TimBF

  committed
  7a6f2c3

  Copy full SHA for 7a6f2c3

• update protobuf definitions for generate stage rpc call

  TimBF

  committed
  79ca1c9

  Copy full SHA for 79ca1c9

• fixed profile removal crash and automatically delete profile implantconfig

  TimBF

  committed
  749c3b9

  Copy full SHA for 749c3b9

• check implant exists before freeing up resources

  TimBF

  committed
  4b0190b

  Copy full SHA for 4b0190b

• remove implant builds when implant profiles are removed

  TimBF

  committed
  9a63b64

  Copy full SHA for 9a63b64

Commits on Nov 4, 2023

• allow disabling http payload staging

  TimBF

  committed
  c83a044

  Copy full SHA for c83a044

• fixed missing implant config id bug

  TimBF

  committed
  d3f4096

  Copy full SHA for d3f4096

Commits on Nov 6, 2023

• add missing field in implantconfig protobuf

  TimBF

  committed
  3442599

  Copy full SHA for 3442599

Commits on Nov 7, 2023

• fix config reuse bug and duplicate c2 object creation

  TimBF

  committed
  a691484

  Copy full SHA for a691484

Commits on Nov 8, 2023

• move keys to implant build (WG, MTLS and ECC)

  TimBF

  committed
  9178f6e

  Copy full SHA for 9178f6e

Commits on Nov 9, 2023

• Move stage generation server side and add a new subcommand for profiles to generate them

  TimBF

  committed
  2c5c3ac

  Copy full SHA for 2c5c3ac

• remove http/s stage listeners

  TimBF

  committed
  d88011e

  Copy full SHA for d88011e

• implants command now displays resource id's

  TimBF

  committed
  e6487fb

  Copy full SHA for e6487fb

• implants now also display whether compression/encryption was used in display

  TimBF

  committed
  4e56c69

  Copy full SHA for 4e56c69

Commits on Nov 10, 2023

• merge master

  TimBF

  committed
  a19fddf

  Copy full SHA for a19fddf

• add option to save stage to disk

  TimBF

  committed
  48d7e72

  Copy full SHA for 48d7e72

• Duplicate minisign dep to client/

  moloch--

  committed
  21468a6

  Copy full SHA for 21468a6

• Move minisign to util/

  moloch--

  committed
  eddfa20

  Copy full SHA for eddfa20

• renamed resourceIDs

  TimBF

  committed
  b84092b

  Copy full SHA for b84092b

• remove server side imports from utils package

  TimBF

  committed
  e25e228

  Copy full SHA for e25e228

• Fix println, dropped err

  moloch--

  committed
  ebf68f6

  Copy full SHA for ebf68f6

• Fix website pkg tests and MapContent, refactor naming

  moloch--

  committed
  ac9b293

  Copy full SHA for ac9b293

Commits on Nov 13, 2023

• update go.mod and update WGImplantPrivKey reference to build object

  TimBF

  committed
  b6df1e2

  Copy full SHA for b6df1e2

• fix binary generation tests

  TimBF

  committed
  6e40fcd

  Copy full SHA for 6e40fcd