Jakob Friedl
|
0149a82f60
|
Added youtube video example profile.
|
2025-11-07 20:22:13 +01:00 |
|
Jakob Friedl
|
7326cc10b6
|
Removed POST header check interfering with C2 profile.
|
2025-10-23 17:45:13 +02:00 |
|
Jakob Friedl
|
b39a0e70e2
|
Updated directory structure.
|
2025-10-03 12:44:28 +02:00 |
|
Jakob Friedl
|
5c0beb36ff
|
Added remote address and modules to agent structure. Help command now only shows commands for which the agent has been configured.
|
2025-10-02 10:25:37 +02:00 |
|
Jakob Friedl
|
039c857027
|
Moved task parsing logic to the client to be able to support dotnet/bof commands when operating from a different machine than the team server. Disabled sequence tracking due to issues.
|
2025-09-30 10:04:29 +02:00 |
|
Jakob Friedl
|
42cc58b30b
|
Replaced prologue implementation with mummy for listener management, since it seems more suitable for future use (websockets, etc.).
|
2025-09-19 18:31:45 +02:00 |
|
Jakob Friedl
|
fbb08afe31
|
Implemented wrapper functions for logging and console output (info, error, success, ...)
|
2025-08-21 17:02:50 +02:00 |
|
Jakob Friedl
|
c9df7aba64
|
Improved logging format.
|
2025-08-21 15:08:52 +02:00 |
|
Jakob Friedl
|
b023fca124
|
Implemented encryption for embedded profile.
|
2025-08-19 20:03:34 +02:00 |
|
Jakob Friedl
|
023a562be5
|
Implemented server output encoding for task retrieval.
|
2025-08-17 17:01:50 +02:00 |
|
Jakob Friedl
|
739faf781e
|
Added more randomization. The profile now supports setting keys to an array of strings, from which a random one is chosen each time (useful for e.g. Host header, etc.)
|
2025-08-17 16:27:48 +02:00 |
|
Jakob Friedl
|
22c15dd82c
|
Added randomization to profile strings by replacing '#' with random alphanumerical chars.
|
2025-08-15 16:18:15 +02:00 |
|
Jakob Friedl
|
c7980d219d
|
Added profile system to agent communication. Randomized URL endpoints/request methods and dynamic data transformation based on C2 profile. Profile is defined as compile-time string for now.
|
2025-08-15 15:42:57 +02:00 |
|
Jakob Friedl
|
5a73c0f2f4
|
Improved working with profiles by adding helper retrieval functions.
|
2025-08-14 19:33:32 +02:00 |
|
Jakob Friedl
|
714360ef24
|
Updated profile system, including dynamic parsing of hidden heartbeats and setting of response headers.
|
2025-08-14 15:53:58 +02:00 |
|
Jakob Friedl
|
e403ac1c07
|
Refactored utility functions to make them more readable and removed separate register endpoint.
|
2025-08-14 12:25:06 +02:00 |
|
Jakob Friedl
|
b7622dd72f
|
Updated C2 communication to hide heartbeat data in JWT token.
|
2025-08-13 13:38:39 +02:00 |
|
Jakob Friedl
|
0f065f41a2
|
Implemented AES256-GCM encryption of all network packets. Requires some more refactoring to remove redundant code and make it cleaner.
|
2025-07-23 13:47:37 +02:00 |
|
Jakob Friedl
|
725696ffa5
|
Implemented Heartbeat/Checkin request with agentId/listenerId in request body to simplify listener URLs
|
2025-07-22 21:00:39 +02:00 |
|
Jakob Friedl
|
9f15026fd1
|
Implemented agent registration to match new binary structure instead of json.
|
2025-07-21 22:07:25 +02:00 |
|
Jakob Friedl
|
99f55cc04f
|
Implemented communication with custom binary structure instead of JSON requests
|
2025-07-19 16:49:27 +02:00 |
|
Jakob Friedl
|
d22ad0bd0c
|
Agent fetches serialized task data from prologue web server and successfully parses it.
|
2025-07-18 18:47:57 +02:00 |
|
Jakob Friedl
|
5825ec91a1
|
Started rewriting JSON task to custom binary structure. Parsed and serialized task object into seq[byte]
|
2025-07-18 14:24:07 +02:00 |
|
Jakob Friedl
|
99b017f57f
|
Cleanup types.nim to only contain type definitions.
|
2025-07-16 14:45:45 +02:00 |
|
Jakob Friedl
|
aae35ef59d
|
Updated directory structure
|
2025-07-16 10:33:13 +02:00 |
|