Jakob Friedl
|
c6875e5eb2
|
Implemented jitter.
|
2025-10-23 11:14:26 +02:00 |
|
Jakob Friedl
|
0bf717992e
|
Implemented setting for verbose mode that prints debug messages in the windows where the agent is executed. Setting "verbose" to false disables all console output of the agent program.
|
2025-10-20 22:08:06 +02:00 |
|
Jakob Friedl
|
35bb4d8869
|
Implemented 'disable-privilege' command.
|
2025-10-18 13:05:01 +02:00 |
|
Jakob Friedl
|
ba1f1943fc
|
Implemented 'enable-privilege' command.
|
2025-10-18 12:41:55 +02:00 |
|
Jakob Friedl
|
76930c9302
|
Implemented 'token-info' command that returns statistics, group memberships and privileges of the current access token.
|
2025-10-17 17:22:31 +02:00 |
|
Jakob Friedl
|
4a1a70da4d
|
Impersonated user is displayed in the client UI and persisted in the team server database.
|
2025-10-17 13:01:12 +02:00 |
|
Jakob Friedl
|
dea10ba7d5
|
Started work on token module and implemented 'make-token' command to impersonate a user from username and password.
|
2025-10-16 19:29:49 +02:00 |
|
Jakob Friedl
|
1e95b67603
|
Screenshots and downloads are now only retrieved once from the team server when the user selects them in the client for preview, which leads to faster start-up times and less blocking UI.
|
2025-10-14 22:04:04 +02:00 |
|
Jakob Friedl
|
392aaec972
|
Timestamp formatting broke text selection, so the int64 unix timestamp is formatted to a string before being added to the console component. This solved most of the highlighting issues I encountered.
|
2025-10-12 15:00:42 +02:00 |
|
Jakob Friedl
|
f2d2833306
|
Implemented callback host system to support HTTP redirectors
|
2025-10-11 17:10:18 +02:00 |
|
Jakob Friedl
|
373eb497d9
|
Fixed getText() function that caused text highlighting in console to break.
|
2025-10-10 12:55:50 +02:00 |
|
Jakob Friedl
|
504d15fa4d
|
Implemented right-click menu to remove or download loot (files/screenshots).
|
2025-10-09 16:25:05 +02:00 |
|
Jakob Friedl
|
4e0eae77b8
|
Loot (downloads/screenshots) is now sent by the teamserver either on client-connection or when new loot is added. For images, smaller thumbnails are used to reduce size of network packets.
|
2025-10-09 12:14:38 +02:00 |
|
Jakob Friedl
|
bcf845288c
|
Implemented widgets for showing loot: Downloads & Screenshots. Textures are read from a byte sequence and displayed in the UI. Currently tested using hard-coded values.
|
2025-10-07 21:16:17 +02:00 |
|
Jakob Friedl
|
b39a0e70e2
|
Updated directory structure.
|
2025-10-03 12:44:28 +02:00 |
|
Jakob Friedl
|
ab48bc5795
|
Added build log to client UI.
|
2025-10-02 12:10:46 +02:00 |
|
Jakob Friedl
|
5c0beb36ff
|
Added remote address and modules to agent structure. Help command now only shows commands for which the agent has been configured.
|
2025-10-02 10:25:37 +02:00 |
|
Jakob Friedl
|
fbe85493b2
|
Implemented websocket (client <-> server) traffic encryption & compression.
|
2025-10-01 21:57:26 +02:00 |
|
Jakob Friedl
|
0937840b77
|
Removed unused code.
|
2025-10-01 15:27:06 +02:00 |
|
Jakob Friedl
|
c97cb4585f
|
Removed prompt user intreface; Team server and Client are now fully separated.
|
2025-10-01 13:25:15 +02:00 |
|
Jakob Friedl
|
039c857027
|
Moved task parsing logic to the client to be able to support dotnet/bof commands when operating from a different machine than the team server. Disabled sequence tracking due to issues.
|
2025-09-30 10:04:29 +02:00 |
|
Jakob Friedl
|
47799ee5f5
|
Implemented generating agent payloads from the ImGui client.
|
2025-09-27 15:18:45 +02:00 |
|
Jakob Friedl
|
933a72f920
|
Improved module selection in payload generation modal with tooltips from the module manager.
|
2025-09-27 12:36:59 +02:00 |
|
Jakob Friedl
|
a8154bb7d6
|
Fixed team server crashing when no UI client is connected.
|
2025-09-26 15:30:14 +02:00 |
|
Jakob Friedl
|
14771a4b50
|
Started porting over functionality to the ImGui client via websocket communication.
|
2025-09-25 19:22:17 +02:00 |
|
Jakob Friedl
|
f0dbcdfc58
|
Improved agent generation modal.
|
2025-09-25 10:41:41 +02:00 |
|
Jakob Friedl
|
8baf65a96d
|
Improved dual list selection widget.
|
2025-09-24 19:26:17 +02:00 |
|
Jakob Friedl
|
b6c81755a0
|
Implemented dual list selection widgets for choosing modules.
|
2025-09-24 16:30:29 +02:00 |
|
Jakob Friedl
|
d4bdf56224
|
Added more websocket commands and started agent generation modal window.
|
2025-09-23 15:51:57 +02:00 |
|
Jakob Friedl
|
d3b37aa4a1
|
Started work on websocket communication: Parsing/Serialization of WebSocket packets.
|
2025-09-22 21:53:13 +02:00 |
|
Jakob Friedl
|
42cc58b30b
|
Replaced prologue implementation with mummy for listener management, since it seems more suitable for future use (websockets, etc.).
|
2025-09-19 18:31:45 +02:00 |
|
Jakob Friedl
|
6b41efe1ed
|
Added simple eventlog.
|
2025-09-19 11:43:14 +02:00 |
|
Jakob Friedl
|
3173122878
|
Implemented dynamic sleepmask configuration command.
|
2025-09-19 10:11:20 +02:00 |
|
Jakob Friedl
|
669a436946
|
Added console filter.
|
2025-09-18 12:35:26 +02:00 |
|
Jakob Friedl
|
5d09efd823
|
Reworked module system. Modules can now be individually set to be included in the agent. For example, it is possible to compile an agent only capable of executing BOFs and nothing else.
|
2025-09-17 15:55:13 +02:00 |
|
Jakob Friedl
|
5f1a9979be
|
Added console history handling with arrow keys.
|
2025-09-16 22:21:11 +02:00 |
|
Jakob Friedl
|
ee397c4fb5
|
Implemented console input field.
|
2025-09-16 20:17:48 +02:00 |
|
Jakob Friedl
|
94f2f8121c
|
Implemented 'dotnet' command for execute-assembly functionality. Patched AMSI using HWBP
|
2025-09-13 11:47:19 +02:00 |
|
Jakob Friedl
|
e64e31a7bc
|
Integrated sleep obfuscation settings into agent generation.
|
2025-09-04 13:44:50 +02:00 |
|
Jakob Friedl
|
5ebe5d3598
|
Implemented the Foliage sleep obfuscation technique.
|
2025-09-03 23:21:45 +02:00 |
|
Jakob Friedl
|
d0545ffd16
|
Implemented 'screenshot' command.
|
2025-09-03 19:38:22 +02:00 |
|
Jakob Friedl
|
b19f8e1236
|
Implemented Zilean sleep obfuscation technique as an alternative to Ekko.
|
2025-09-02 21:41:04 +02:00 |
|
Jakob Friedl
|
ae083896b6
|
Implemented simple download command.
|
2025-09-01 19:45:39 +02:00 |
|
Jakob Friedl
|
8292a5b1ff
|
Implemented handling of different argument types (int, wstring, short) for BOF files using specific prefixes.
|
2025-08-30 14:05:09 +02:00 |
|
Jakob Friedl
|
4ceb756cfd
|
Added 'bof' module for executing object files and fixed handling of optional arguments.
|
2025-08-29 15:58:26 +02:00 |
|
Jakob Friedl
|
a18ad3c2cb
|
Removed Ekko WinAPI implementation to clear up file.
|
2025-08-27 18:24:44 +02:00 |
|
Jakob Friedl
|
00866b30cd
|
Implemented basic sleep obfuscation via the Ekko technique using WinAPI. Improvement needed!
|
2025-08-27 00:27:50 +02:00 |
|
Jakob Friedl
|
fbb08afe31
|
Implemented wrapper functions for logging and console output (info, error, success, ...)
|
2025-08-21 17:02:50 +02:00 |
|
Jakob Friedl
|
f69adc53a2
|
Implemented initial version of logging system. Log formatting and content needs to be reworked.
|
2025-08-20 12:55:09 +02:00 |
|
Jakob Friedl
|
b023fca124
|
Implemented encryption for embedded profile.
|
2025-08-19 20:03:34 +02:00 |
|