Commit Graph

31 Commits

Author SHA1 Message Date
CPunch b23057b219 Refactoring: reorganized files 2022-09-01 20:00:37 -05:00
CPunch ed96b75577 Moved API obfuscation to LaikaLib target 2022-07-16 16:09:33 -05:00
CPunch 25c18db6bc Bot: added Registry related API to laikaO_init()
- Also fixed misc. shell bug.
2022-07-12 18:09:23 -05:00
CPunch f65341c5fa Bot: Fixed CreatePseudoConsole type definition 2022-07-12 16:04:29 -05:00
CPunch fdbe6cf3c7 Bot: More APIs added to laikaO_init()
- Misc. functions converted to their UTF-8 version
- ClosePseudoConsole & CreateProcessA are now manually 'linked' during runtime
2022-07-10 19:24:48 -05:00
CPunch 4c8fef7d64 Use FreeLibrary(), not CloseHandle() 2022-07-10 19:24:48 -05:00
CPunch 4d931f28cb Bot: Fixed MSVC warnings 2022-07-10 19:24:48 -05:00
CPunch 35cbd91dd1 Bot: Added oCreatePseudoConsole to laikaO_init() 2022-07-10 19:24:48 -05:00
CPunch f92bbbc85b Bot: added library cleanup to findByHash() 2022-07-10 19:24:48 -05:00
CPunch b2f8efc402 Bot: Added boilerplate windows API obfuscation
- Grabs the functions directly from the loaded library by walking the exported address table and comparing hashes
- For now, only ShellExecuteA has been setup, more to come
2022-07-10 19:24:48 -05:00
CPunch 2e4c63c0c6 Bot: misc. formatting fixes 2022-06-29 17:45:51 -05:00
CPunch 48fa8935c3 Added .clang-format, formatted codebase 2022-06-27 18:57:00 -05:00
CPunch 1d6ce15b3d Minor comments refactoring 2022-06-27 18:20:23 -05:00
CPunch 81360a8072 Re-added lboxconfig.h 2022-05-16 17:23:45 -05:00
CPunch 7175e2ec00 Win: winpersist.c now uses obfuscation
- The API was switched to force Ascii versions of the winapi
2022-05-16 11:02:56 -05:00
CPunch f649ca4a56 Win: Static builds & fixed winpersist.c 2022-05-14 13:24:20 -05:00
CPunch 63e36d1ebb Bot: small shell.[ch] + native refactor
- `struct sLaika_shell` is now a shared struct, `struct sLaika_RAWshell` is the native implementation with `struct sLaika_shell` as it's first member
2022-05-08 01:21:37 -05:00
CPunch 7d96f3252c Major shell packet refactoring
- can now open multiple shells per peer (change LAIKA_MAX_SHELLS)
- more sanity checking for public keys (new peers with duplicate keys are killed
- misc. refactoring, added cnc/cpeer.[ch]
2022-05-07 20:09:42 -05:00
CPunch 64f7e40fa0 Windows: Persistence via windows registry 2022-04-22 17:20:31 -05:00
CPunch e80f007df9 Bot: Minor refactoring, tell cnc if failed to open shell 2022-04-20 10:23:00 -05:00
CPunch c3c42e298f Windows: use COMSPEC environment variable to grab the shell
- shells on windows are now opened from the COMSPEC env variable
- cnc will now ignore malformed shell packets from bots instead of killing them
2022-04-20 10:10:44 -05:00
CPunch cfe633f1d5 Windows: Added registry manipulation boilerplate 2022-04-18 17:05:26 -05:00
CPunch 34dd36fb67 Windows: implemented laikaB_markRunning() & laikaB_unmarkRunning()
- use Sleep() for LAIKA_PERSISTENCE in main()
- use Mutex for checking existing LaikaBots
- switched to TEXT() for win32 strings
2022-04-16 23:54:07 -05:00
CPunch 231881c960 Bot: Minor laikaB_freeShell refactoring 2022-04-16 23:08:21 -05:00
CPunch b60203d3f2 Linux: implemented laikaB_markRunning() & laikaB_unmarkRunning()
- switched to file locks as that's more discreet
    - tied to LAIKA_PERSISTENCE being defined
2022-04-16 22:56:05 -05:00
CPunch dac99ddd85 Bot: Only run shell task when shell is open
- since the shell task is only ran when the shell is open, i decreased the delta to 50ms. this should improve latancy while improving performance for 99% of the time. yay!
2022-04-14 12:11:29 -05:00
CPunch 59c01d422b More resilient persistence
- bot will keep trying to connect if it failed to connect to the CNC or if the bot was killed
- if crontab isn't installed the bot will still run
2022-04-10 15:45:30 -05:00
CPunch b6bd8b2518 Bot persistence boilerplate 2022-04-04 12:12:37 -05:00
CPunch 26a1977609 Fixed Windows Shell detection for shell closing
- updated demo.gif
2022-03-18 17:46:28 -05:00
CPunch 7e9597902f Added line-conversions for shells 2022-03-17 23:49:25 -05:00
CPunch 4833dea67f Added Windows Bot client
- Shells 'work' but line endings aren't converted yet so pressing enter doesn't work lol
2022-03-17 18:22:26 -05:00