Implemented 'cd' and 'ls' commands using Windows APIs.

server/agent/commands/cd.nim

@@ -0,0 +1,19 @@
+import nanoid, sequtils, strutils, strformat, terminal, times
+import ../../types
+
+proc taskSetWorkingDirectory*(cq: Conquest, arguments: seq[string]) = 
+
+    # Create a new task 
+    let 
+        date: string = now().format("dd-MM-yyyy HH:mm:ss")
+        task = Task(
+            id: generate(alphabet=join(toSeq('A'..'Z'), ""), size=8),
+            agent: cq.interactAgent.name, 
+            command: SetWorkingDirectory,
+            args: arguments,
+        )
+
+    # Add new task to the agent's task queue
+    cq.interactAgent.tasks.add(task)
+
+    cq.writeLine(fgBlack, styleBright, fmt"[{date}] [*] ", resetStyle, fmt"Tasked agent to change current working directory.")

server/agent/commands/commands.nim

@@ -1,19 +1,38 @@
-import ./[shell, sleep, pwd]
-export shell, sleep, pwd
+import ./[shell, sleep, pwd, cd, ls]
+export shell, sleep, pwd, cd, ls
 
 #[
     "Monarch" Agent commands:
 
-    Basic
-    ----- 
-    [~] shell       : Execute shell command (to be implemented using Windows APIs instead of execCmdEx)
-    [ ] pwd         : Get current working directory
-    [ ] cd          : Change directory
-    [ ] ls/dir      : List all files in directory (including hidden ones)
-    [ ] cat/type    : Display contents of a file
+    House-keeping
+    -------------
     [~] sleep       : Set sleep obfuscation duration to a different value and persist that value in the agent
     
-    Post-exploitation
+    Basic API-only Commands
+    -----------------------
+    [~] pwd         : Get current working directory
+    [~] cd          : Change directory
+    [ ] ls/dir      : List all files in directory (including hidden ones)
+    [ ] cat/type    : Display contents of a file
+    [ ] env         : Display environment variables
+    [ ] ps          : List processes
+    [ ] whoami      : Get UID and privileges, etc. 
+    
+    [ ] token       : Token impersonation
+        [ ] make    : Create a token from a user's plaintext password
+        [ ] steal   : Steal the access token from a process 
+        [ ] use     : Impersonate a token from the token vault
+    
+    Execution Commands
+    ------------------
+    [~] shell       : Execute shell command (to be implemented using Windows APIs instead of execCmdEx)
+    [ ] bof         : Execute Beacon Object File in memory and retrieve output (bof /local/path/file.o)
+            - Read from listener endpoint directly to memory
+            - Base for all kinds of BOFs (Situational Awareness, ...)
+    [ ] pe          : Execute PE file in memory and retrieve output (pe /local/path/mimikatz.exe)
+    [ ] dotnet      : Execute .NET assembly inline in memory and retrieve output (dotnet /local/path/Rubeus.exe ) 
+
+    Post-Exploitation
     -----------------
     [ ] upload      : Upload file from server to agent (upload /local/path/to/file C:\Windows\Tasks)
             - File to be downloaded moved to specific endpoint on listener, e.g. GET /<listener>/<agent>/<upload-task>/file
@@ -22,9 +41,4 @@ export shell, sleep, pwd
             - Create loot directory for agent to store files in 
             - Read file into memory and send byte stream to specific endpoint, e.g. POST /<listener>/<agent>/<download>-task/file
             - Encrypt file in-transit!!!
-    [ ] bof         : Execute Beacon Object File in memory and retrieve output (bof /local/path/file.o)
-            - Read from listener endpoint directly to memory
-    [ ] pe          : Execute PE file in memory and retrieve output (pe /local/path/mimikatz.exe)
-    [ ] dotnet      : Execute .NET assembly inline in memory and retrieve output (dotnet /local/path/Rubeus.exe ) 
-
 ]#

server/agent/commands/ls.nim

@@ -0,0 +1,19 @@
+import nanoid, sequtils, strutils, strformat, terminal, times
+import ../../types
+
+proc taskListDirectory*(cq: Conquest, arguments: seq[string]) = 
+
+    # Create a new task 
+    let 
+        date: string = now().format("dd-MM-yyyy HH:mm:ss")
+        task = Task(
+            id: generate(alphabet=join(toSeq('A'..'Z'), ""), size=8),
+            agent: cq.interactAgent.name, 
+            command: ListDirectory,
+            args: arguments,
+        )
+
+    # Add new task to the agent's task queue
+    cq.interactAgent.tasks.add(task)
+
+    cq.writeLine(fgBlack, styleBright, fmt"[{date}] [*] ", resetStyle, fmt"Tasked agent to list files and directories.")