Jakob Friedl
|
c718e3647a
|
Agent now re-registers to the team-server when it is still alive after it was removed via the client.
|
2025-10-27 16:20:38 +01:00 |
|
Jakob Friedl
|
f30f1d2ec0
|
Separated 'exit' and 'self-destroy' and added functionality to remove agents from the teamserver to cleanup the sessions table.
|
2025-10-27 15:17:56 +01:00 |
|
Jakob Friedl
|
f5ff90fc47
|
Added right-click context menu for exiting the agent process/thread.
|
2025-10-24 18:12:07 +02:00 |
|
Jakob Friedl
|
0e9cffb1c4
|
Improved 'exit' command and implemented self-delete functionality.
|
2025-10-24 12:26:44 +02:00 |
|
Jakob Friedl
|
7326cc10b6
|
Removed POST header check interfering with C2 profile.
|
2025-10-23 17:45:13 +02:00 |
|
Jakob Friedl
|
432f37755c
|
Updated directory structure and added simple 'exit' command to terminate an agent.
|
2025-10-23 17:28:07 +02:00 |
|
Jakob Friedl
|
c6875e5eb2
|
Implemented jitter.
|
2025-10-23 11:14:26 +02:00 |
|
Jakob Friedl
|
51748639de
|
Implemented human-readable error messages for Windows API and Native API errors using FormatMessageW. Removed string obfuscation/protection when agent is built with verbose flag.
|
2025-10-21 22:37:57 +02:00 |
|
Jakob Friedl
|
7e6b0c8442
|
Changed build log height.
|
2025-10-20 22:26:50 +02:00 |
|
Jakob Friedl
|
0bf717992e
|
Implemented setting for verbose mode that prints debug messages in the windows where the agent is executed. Setting "verbose" to false disables all console output of the agent program.
|
2025-10-20 22:08:06 +02:00 |
|
Jakob Friedl
|
382e31c439
|
Added comments.
|
2025-10-19 20:55:27 +02:00 |
|
Jakob Friedl
|
2e18decb6d
|
Implemented 'steal-token' command.
|
2025-10-19 20:06:40 +02:00 |
|
Jakob Friedl
|
a4f37b5ceb
|
Implemented most token functionality using Native APIs instead of Windows APIs.
|
2025-10-19 18:05:20 +02:00 |
|
Jakob Friedl
|
35bb4d8869
|
Implemented 'disable-privilege' command.
|
2025-10-18 13:05:01 +02:00 |
|
Jakob Friedl
|
ba1f1943fc
|
Implemented 'enable-privilege' command.
|
2025-10-18 12:41:55 +02:00 |
|
Jakob Friedl
|
b3e82fc3a8
|
Reworked token functions.
|
2025-10-17 18:35:40 +02:00 |
|
Jakob Friedl
|
76930c9302
|
Implemented 'token-info' command that returns statistics, group memberships and privileges of the current access token.
|
2025-10-17 17:22:31 +02:00 |
|
Jakob Friedl
|
4a1a70da4d
|
Impersonated user is displayed in the client UI and persisted in the team server database.
|
2025-10-17 13:01:12 +02:00 |
|
Jakob Friedl
|
0fc8ff3caa
|
Standardized console spacing between commands.
|
2025-10-17 09:42:08 +02:00 |
|
Jakob Friedl
|
dea10ba7d5
|
Started work on token module and implemented 'make-token' command to impersonate a user from username and password.
|
2025-10-16 19:29:49 +02:00 |
|
Jakob Friedl
|
80579e5c7f
|
Downloads component now uses textarea widget to display file preview.
|
2025-10-15 12:22:38 +02:00 |
|
Jakob Friedl
|
1e95b67603
|
Screenshots and downloads are now only retrieved once from the team server when the user selects them in the client for preview, which leads to faster start-up times and less blocking UI.
|
2025-10-14 22:04:04 +02:00 |
|
Jakob Friedl
|
df04eafc13
|
Made changes to screenshot handling.
|
2025-10-14 21:05:36 +02:00 |
|
Jakob Friedl
|
21137f6db5
|
Delete client private key from memory after key exchange.
|
2025-10-14 09:58:45 +02:00 |
|
Jakob Friedl
|
d9372dc880
|
Refactored textarea from console, eventlog and buildlog into a separate widget to reduce code duplication.
|
2025-10-13 21:55:29 +02:00 |
|
Jakob Friedl
|
756ee09eeb
|
Fixed team server breaking when trying to write large task result data to log files.
|
2025-10-13 10:12:34 +02:00 |
|
Jakob Friedl
|
25f5bac12b
|
Text selection in console window now accounts for text filter. Only items shown to the user can be selected and copied.
|
2025-10-12 16:40:34 +02:00 |
|
Jakob Friedl
|
392aaec972
|
Timestamp formatting broke text selection, so the int64 unix timestamp is formatted to a string before being added to the console component. This solved most of the highlighting issues I encountered.
|
2025-10-12 15:00:42 +02:00 |
|
Jakob Friedl
|
f2d2833306
|
Implemented callback host system to support HTTP redirectors
|
2025-10-11 17:10:18 +02:00 |
|
Jakob Friedl
|
373eb497d9
|
Fixed getText() function that caused text highlighting in console to break.
|
2025-10-10 12:55:50 +02:00 |
|
Jakob Friedl
|
504d15fa4d
|
Implemented right-click menu to remove or download loot (files/screenshots).
|
2025-10-09 16:25:05 +02:00 |
|
Jakob Friedl
|
3259040daa
|
Moved widget titles to variables and added icons.
|
2025-10-09 13:01:51 +02:00 |
|
Jakob Friedl
|
4e0eae77b8
|
Loot (downloads/screenshots) is now sent by the teamserver either on client-connection or when new loot is added. For images, smaller thumbnails are used to reduce size of network packets.
|
2025-10-09 12:14:38 +02:00 |
|
Jakob Friedl
|
bcf845288c
|
Implemented widgets for showing loot: Downloads & Screenshots. Textures are read from a byte sequence and displayed in the UI. Currently tested using hard-coded values.
|
2025-10-07 21:16:17 +02:00 |
|
Jakob Friedl
|
b39a0e70e2
|
Updated directory structure.
|
2025-10-03 12:44:28 +02:00 |
|
Jakob Friedl
|
ae09e4e7e3
|
Implemented basic Tab-autocompletion for agent console.
|
2025-10-03 09:59:50 +02:00 |
|
Jakob Friedl
|
56153b3441
|
Covered client in installation instructions.
|
2025-10-02 13:56:48 +02:00 |
|
Jakob Friedl
|
d02808a6d3
|
Reworked logging system to work with new GUI.
|
2025-10-02 13:51:04 +02:00 |
|
Jakob Friedl
|
ab48bc5795
|
Added build log to client UI.
|
2025-10-02 12:10:46 +02:00 |
|
Jakob Friedl
|
5c0beb36ff
|
Added remote address and modules to agent structure. Help command now only shows commands for which the agent has been configured.
|
2025-10-02 10:25:37 +02:00 |
|
Jakob Friedl
|
fbe85493b2
|
Implemented websocket (client <-> server) traffic encryption & compression.
|
2025-10-01 21:57:26 +02:00 |
|
Jakob Friedl
|
0937840b77
|
Removed unused code.
|
2025-10-01 15:27:06 +02:00 |
|
Jakob Friedl
|
c97cb4585f
|
Removed prompt user intreface; Team server and Client are now fully separated.
|
2025-10-01 13:25:15 +02:00 |
|
Jakob Friedl
|
a1990e4a18
|
Added help command to ImGui client.
|
2025-09-30 15:27:05 +02:00 |
|
Jakob Friedl
|
039c857027
|
Moved task parsing logic to the client to be able to support dotnet/bof commands when operating from a different machine than the team server. Disabled sequence tracking due to issues.
|
2025-09-30 10:04:29 +02:00 |
|
Jakob Friedl
|
13a245ebf2
|
Started porting over command input & task output to the ImGui client.
|
2025-09-27 17:45:52 +02:00 |
|
Jakob Friedl
|
5472019d78
|
Made timestamps toggle-able in eventlog window.
|
2025-09-27 15:34:01 +02:00 |
|
Jakob Friedl
|
47799ee5f5
|
Implemented generating agent payloads from the ImGui client.
|
2025-09-27 15:18:45 +02:00 |
|
Jakob Friedl
|
ceba377939
|
Implemented starting and stopping listeners from the ImGui client.
|
2025-09-27 13:54:12 +02:00 |
|
Jakob Friedl
|
933a72f920
|
Improved module selection in payload generation modal with tooltips from the module manager.
|
2025-09-27 12:36:59 +02:00 |
|