types

type BasicProfile struct {
	Name       string                 `yaml:"name" config:"name" default:"malefic"`
	Targets    []string               `yaml:"targets" config:"targets" default:"[]"`
	Protocol   string                 `yaml:"protocol" config:"protocol" default:"tcp"`
	TLS        *TLSProfile            `yaml:"tls" config:"tls"`
	Proxy      string                 `yaml:"proxy" config:"proxy" default:""`
	Interval   int                    `yaml:"interval" config:"interval" default:"5"`
	Jitter     float64                `yaml:"jitter" config:"jitter" default:"0.2"`
	Encryption string                 `yaml:"encryption" config:"encryption" default:"aes"`
	Key        string                 `yaml:"key" config:"key" default:"maliceofinternal"`
	REM        *REMProfile            `yaml:"rem" config:"rem"`
	Extras     map[string]interface{} `yaml:",inline"`
}

type CertConfig struct {
	Enable bool   `json:"enable" yaml:"enable" config:"enable"`
	Cert   string `json:"cert" yaml:"cert" config:"cert"`
	Key    string `json:"key" yaml:"key" config:"key"`
}

type EncryptionConfig struct {
	Type string `json:"type" config:"type"`
	Key  string `json:"key" config:"key"`
}

type EncryptionsConfig []*EncryptionConfig

type ImplantProfile struct {
	Mod          string                 `yaml:"mod" config:"mod" default:""`
	RegisterInfo bool                   `yaml:"register_info" config:"register_info" default:"false"`
	HotLoad      bool                   `yaml:"hot_load" config:"hot_load" default:"false"`
	Modules      []string               `yaml:"modules" config:"modules" default:"[]"`
	Extras       map[string]interface{} `yaml:",inline"`
}

type MsgName string

type PipelineParams struct {
	Parser     string                        `json:"parser,omitempty"`
	WebPath    string                        `json:"path,omitempty"`
	Link       string                        `json:"link,omitempty"`
	Console    string                        `json:"console,omitempty"`
	Subscribe  string                        `json:"subscribe,omitempty"`
	Agents     map[string]*clientpb.REMAgent `json:"agents,omitempty"`
	Encryption EncryptionsConfig             `json:"encryption,omitempty"`
	Tls        *TlsConfig                    `json:"tls,omitempty"`
	// HTTP pipeline specific params
	Headers    map[string][]string `json:"headers,omitempty"`
	ErrorPage  string              `json:"error_page,omitempty" gorm:"-"`
	BodyPrefix string              `json:"body_prefix,omitempty"`
	BodySuffix string              `json:"body_suffix,omitempty"`
}

type ProfileConfig struct {
	Basic   *BasicProfile          `yaml:"basic" config:"basic"`
	Pulse   *PulseProfile          `yaml:"pulse" config:"pulse"`
	Implant *ImplantProfile        `yaml:"implants" config:"implants"`
	Extras  map[string]interface{} `yaml:",inline"`
}

type ProfileParams struct {
	Interval int     `json:"interval"`
	Jitter   float64 `json:"jitter"`

	Proxy          string `json:"proxy"`
	OriginBeaconID uint32 `json:"origin_beacon_id"`
	RelinkBeaconID uint32 `json:"relink_beacon_id"`
	REMPipeline    string `json:"rem"`
	Enable3RD      bool   `json:"enable_3_rd"`
	Modules        string `json:"modules"`
}

type PulseProfile struct {
	Target     string `yaml:"target"`
	Encryption string `yaml:"encryption"`
	Key        string `yaml:"key"`
	Protocol   string `yaml:"protocol"`
	Flags      struct {
		ArtifactID uint32                 `yaml:"artifact_id" config:"artifact_id" default:"0"`
		Extras     map[string]interface{} `yaml:",inline"`
	}
	Extras map[string]interface{} `yaml:",inline"`
}

type REMProfile struct {
	Link string `yaml:"link" config:"link" default:""`
}

type SessionContext struct {
	*SessionInfo `json:",inline"`
	Modules      []string               `json:"modules"`
	Addons       []*implantpb.Addon     `json:"addons"`
	Argue        map[string]string      `json:"argue"` // 参数欺骗
	Any          map[string]interface{} `json:"any"`
}

type SessionInfo struct {
	Os          *implantpb.Os      `json:"os"`
	Process     *implantpb.Process `json:"process"`
	Interval    uint64             `json:"interval"`
	Jitter      float64            `json:"jitter"`
	IsPrivilege bool               `json:"is_privilege"`
	Filepath    string             `json:"filepath"`
	WorkDir     string             `json:"workdir"`
	ProxyURL    string             `json:"proxy"`
	Locale      string             `json:"locale"`
}

type TLSProfile struct {
	Enable  bool                   `yaml:"enable" config:"enable" default:"false"`
	Version string                 `yaml:"version" config:"version" default:"auto"`
	SNI     string                 `yaml:"sni" config:"sni" default:"localhost"`
	Extras  map[string]interface{} `yaml:",inline"`
}

type TlsConfig struct {
	Enable  bool        `json:"enable"`
	Acme    bool        `json:"acme"`
	Cert    *CertConfig `json:"cert"`
	CA      *CertConfig `json:"ca"`
	Domain  string      `json:"domain"`
	Subject *pkix.Name  `json:"subject"`
}