core

package
v0.1.2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Sep 25, 2025 License: Apache-2.0 Imports: 45 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var (
	Connections = &connections{
		connections: &sync.Map{},
	}
	ListenerSessions = &listenerSessions{
		sessions: &sync.Map{},
	}
)
View Source 
var (
	// Sessions - Manages implant connections
	Sessions         *sessions
	ExtensionModules = []string{consts.ModuleExecuteBof, consts.ModuleExecuteDll}
	// ErrUnknownMessageType - Returned if the implant did not understand the message for
	//                         example when the command is not supported on the platform
	ErrUnknownMessageType = errors.New("unknown message type")

	// ErrImplantSendTimeout - The implant did not respond prior to timeout deadline
	ErrImplantSendTimeout = errors.New("implant timeout")
)
View Source 
var CacheName = "cache.bin"
View Source 
var (
	// Clients - Manages client active
	Clients = &clients{
		mutex:  &sync.Mutex{},
		active: map[int]*Client{},
	}
)
View Source 
var (
	// EventBroker - Distributes event messages
	EventBroker *eventBroker
)
View Source 
var (
	Forwarders = &forwarders{
		forwarders: &sync.Map{},
	}
)
View Source 
var (
	GlobalTicker = NewTicker()
)
View Source 
var (
	Jobs = &jobs{
		Map: &sync.Map{},
	}
)
View Source 
var (
	Listeners = listeners{
		&sync.Map{},
	}
)

Functions

func CurrentJobID 

func CurrentJobID() uint32

func GetCurrentID added in v0.0.3 

func GetCurrentID() uint32

func GetKeyPairForSession added in v0.1.2 

func GetKeyPairForSession(sid uint32, secureConfig *types.SecureConfig) *clientpb.KeyPair

GetKeyPairForSession 获取会话的密钥对 优先从 ListenerSessions 获取，如果没有则从 secureConfig 获取交换密钥对

func HandleFileOperations added in v0.1.0 

func HandleFileOperations(op string, data []byte, task *Task) error

func HandleScreenshot added in v0.1.0 

func HandleScreenshot(data []byte, task *Task) error

func LoadContext added in v0.1.0 

func LoadContext(ctx output.Context) (output.Context, error)

func NewBroker added in v0.0.3 

func NewBroker() *eventBroker

func NewSessions added in v0.0.3 

func NewSessions() *sessions

func NextCtrlID 

func NextCtrlID() uint32

func NextJobID 

func NextJobID() uint32

func PushContextEvent added in v0.1.0 

func PushContextEvent(Op string, ctx *models.Context)

func ReadFileForContext added in v0.1.0 

func ReadFileForContext(ctx output.Context) ([]byte, error)

func SaveContext added in v0.1.0 

func SaveContext(ctx output.Context, task *Task) (*models.Context, error)

Types

type Cache 

type Cache struct {
	// contains filtered or unexported fields
}

func NewCache 

func NewCache(savePath string) *Cache

NewCache initializes a new cache with a specified size, duration, and save path

func (*Cache) AddMessage 

func (c *Cache) AddMessage(spite *implantpb.Spite, index int)

AddMessage adds a new item to the cache with TaskId and Index as part of the key

func (*Cache) GetAll 

func (c *Cache) GetAll() map[string]*implantpb.Spite

GetAll returns all items in the cache

func (*Cache) GetLastMessage 

func (c *Cache) GetLastMessage(taskID int) (*implantpb.Spite, bool)

func (*Cache) GetMessage 

func (c *Cache) GetMessage(taskID, index int) (*implantpb.Spite, bool)

GetMessage retrieves a cache item by TaskId and Index

func (*Cache) GetMessages 

func (c *Cache) GetMessages(taskID int) ([]*implantpb.Spite, bool)

func (*Cache) Load 

func (c *Cache) Load() error

Load deserializes cache items from a file using protobuf

func (*Cache) Save 

func (c *Cache) Save() error

Save serializes the cache items to a file using protobuf

type Client 

type Client struct {
	*clientpb.Client
}

Client - Single client connection

func NewClient 

func NewClient(operatorName string) *Client

NewClient - Create a new client object

func (*Client) ToProtobuf 

func (c *Client) ToProtobuf() *clientpb.Client

type Connection 

type Connection struct {
	RawID       uint32
	SessionID   string
	LastMessage time.Time
	PipelineID  string
	C           chan *clientpb.SpiteRequest // spite
	Sender      chan *implantpb.Spites
	Alive       bool
	Parser      *parser.MessageParser
	// contains filtered or unexported fields
}

func GetConnection added in v0.1.2 

func GetConnection(conn *cryptostream.Conn, pipelineID string, secureConfig *types.SecureConfig) (*Connection, error)

GetConnection 统一的连接获取/创建函数 (适用于 TCP 和 HTTP pipeline) 从 cryptostream.Conn 中提取 SID 并获取/创建连接

func NewConnection 

func NewConnection(p *parser.MessageParser, sid uint32, pipelineID string, keyPair *clientpb.KeyPair) *Connection

func (*Connection) Handler added in v0.0.3 

func (c *Connection) Handler(ctx context.Context, conn *cryptostream.Conn) error

func (*Connection) HandlerSimplex added in v0.1.0 

func (c *Connection) HandlerSimplex(ctx context.Context, conn *cryptostream.Conn) error

func (*Connection) Send 

func (c *Connection) Send(ctx context.Context, conn *cryptostream.Conn)

type Event 

type Event struct {
	Session *clientpb.Session
	Job     *clientpb.Job
	Client  *clientpb.Client
	Task    *clientpb.Task
	Spite   *implantpb.Spite

	Important bool
	EventType string
	Op        string
	Message   string
	Err       string
	Callee    string
	IsNotify  bool
}

func (*Event) String added in v0.1.0 

func (event *Event) String() string

func (*Event) ToProtobuf added in v0.1.0 

func (event *Event) ToProtobuf() *clientpb.Event

toprotobuf

type Forward 

type Forward struct {
	Pipeline
	ListenerId string
	Stream     listenerrpc.ListenerRPC_SpiteStreamClient

	ListenerRpc listenerrpc.ListenerRPCClient
	// contains filtered or unexported fields
}

Forward is a struct that handles messages from listener and server

func NewForward 

func NewForward(rpc listenerrpc.ListenerRPCClient, pipeline Pipeline) (*Forward, error)

func (*Forward) Add 

func (f *Forward) Add(msg *Message)

func (*Forward) Context added in v0.1.0 

func (f *Forward) Context(sid string) context.Context

func (*Forward) Count 

func (f *Forward) Count() int

func (*Forward) Handler 

func (f *Forward) Handler()

Handler is a loop that handles messages from implant

type Job 

type Job struct {
	ID       uint32
	Name     string
	Pipeline *clientpb.Pipeline
}

func (*Job) ToProtobuf 

func (j *Job) ToProtobuf() *clientpb.Job

type Listener 

type Listener struct {
	Name      string
	IP        string
	Active    bool
	Pipelines map[string]*clientpb.Pipeline
	Ctrl      chan *clientpb.JobCtrl
	CtrlJob   *sync.Map
}

func (*Listener) AddPipeline added in v0.0.3 

func (l *Listener) AddPipeline(pipeline *clientpb.Pipeline)

func (*Listener) AllPipelines added in v0.0.3 

func (l *Listener) AllPipelines() []*clientpb.Pipeline

func (*Listener) GetPipeline added in v0.0.3 

func (l *Listener) GetPipeline(name string) *clientpb.Pipeline

func (*Listener) PushCtrl added in v0.1.0 

func (l *Listener) PushCtrl(ctrl *clientpb.JobCtrl) uint32

func (*Listener) RemovePipeline added in v0.0.3 

func (l *Listener) RemovePipeline(pipeline *clientpb.Pipeline)

func (*Listener) ToProtobuf 

func (l *Listener) ToProtobuf() *clientpb.Listener

func (*Listener) WaitCtrl added in v0.1.0 

func (l *Listener) WaitCtrl(i uint32) *clientpb.JobStatus

type Message 

type Message struct {
	Spites     *implantpb.Spites
	RawID      uint32
	SessionID  string
	RemoteAddr string
}

type Notifier added in v0.0.2 

type Notifier struct {
	// contains filtered or unexported fields
}

func (*Notifier) Send added in v0.0.2 

func (n *Notifier) Send(event *Event)

type Pipeline 

type Pipeline interface {
	ID() string
	Start() error
	Close() error
	ToProtobuf() *clientpb.Pipeline
}

type PipelineConfig added in v0.0.3 

type PipelineConfig struct {
	ListenerID   string
	Parser       string
	TLSConfig    *types.TlsConfig
	Encryption   types.EncryptionsConfig
	SecureConfig *types.SecureConfig
}

func FromPipeline added in v0.1.1 

func FromPipeline(pipeline *clientpb.Pipeline) *PipelineConfig

func (*PipelineConfig) WrapConn added in v0.0.3 

func (p *PipelineConfig) WrapConn(conn io.ReadWriteCloser) (*cryptostream.Conn, error)

type Pipelines 

type Pipelines map[string]Pipeline

func (Pipelines) Add 

func (ps Pipelines) Add(p Pipeline)

func (Pipelines) Get 

func (ps Pipelines) Get(id string) Pipeline

func (Pipelines) ToProtobuf 

func (ps Pipelines) ToProtobuf() *clientpb.Pipelines

type RingCache added in v0.1.0 

type RingCache struct {
	// contains filtered or unexported fields
}

func NewMessageCache added in v0.1.0 

func NewMessageCache(capacity int) *RingCache

func (*RingCache) Add added in v0.1.0 

func (mc *RingCache) Add(message interface{})

func (*RingCache) GetAll added in v0.1.0 

func (mc *RingCache) GetAll() []interface{}

func (*RingCache) GetLast added in v0.1.0 

func (mc *RingCache) GetLast() interface{}

func (*RingCache) GetN added in v0.1.0 

func (mc *RingCache) GetN(n int) []interface{}

GetN 返回最后 N 条消息

type SecureManager added in v0.1.2 

type SecureManager struct {
	// contains filtered or unexported fields
}

SecureManager 专注于密钥交换请求和响应处理

func NewSecureSpiteManager added in v0.1.2 

func NewSecureSpiteManager(sess *Session) *SecureManager

NewSecureSpiteManager 创建新的安全管理器

func (*SecureManager) IncrementCounter added in v0.1.2 

func (s *SecureManager) IncrementCounter()

IncrementCounter 增加消息计数器

func (*SecureManager) ResetCounters added in v0.1.2 

func (s *SecureManager) ResetCounters()

ResetCounters 重置计数器（密钥交换完成后调用）

func (*SecureManager) ShouldRotateKey added in v0.1.2 

func (s *SecureManager) ShouldRotateKey() bool

ShouldRotateKey 检查是否需要轮换密钥

func (*SecureManager) UpdateKeyPair added in v0.1.2 

func (s *SecureManager) UpdateKeyPair(keyPair *clientpb.KeyPair)

UpdateKeyPair 更新KeyPair引用

type Session 

type Session struct {
	Type        string
	PipelineID  string
	ListenerID  string
	ID          string
	RawID       uint32
	Name        string
	Group       string
	Note        string
	Target      string
	Initialized bool
	LastCheckin int64
	CreatedAt   time.Time
	Tasks       *Tasks // task manager
	*types.SessionContext

	// Age 密码学安全管理器（运行时，负责密钥交换和轮换）
	SecureManager *SecureManager

	*Cache
	Taskseq uint32

	Ctx    context.Context
	Cancel context.CancelFunc
	// contains filtered or unexported fields
}

Session - Represents a connection to an implant

func RecoverSession added in v0.0.3 

func RecoverSession(sess *models.Session) (*Session, error)

func RegisterSession added in v0.0.3 

func RegisterSession(req *clientpb.RegisterSession) (*Session, error)

func (*Session) Abstract added in v0.1.0 

func (s *Session) Abstract() string

func (*Session) DeleteResp 

func (s *Session) DeleteResp(taskId uint32)

func (*Session) FillSysInfo added in v0.1.2 

func (s *Session) FillSysInfo()

func (*Session) GetResp 

func (s *Session) GetResp(taskId uint32) (chan *implantpb.Spite, bool)

func (*Session) NewTask 

func (s *Session) NewTask(name string, total int) *Task

func (*Session) Publish added in v0.0.3 

func (s *Session) Publish(Op string, msg string, notify bool, important bool)

func (*Session) PushCtrl added in v0.1.2 

func (s *Session) PushCtrl()

func (*Session) PushUpdate added in v0.1.1 

func (s *Session) PushUpdate(msg string)

func (*Session) Recover added in v0.0.3 

func (s *Session) Recover() error

func (*Session) RecoverTaskIDByLog added in v0.0.3 

func (s *Session) RecoverTaskIDByLog() (int, error)

func (*Session) Request 

func (s *Session) Request(msg *clientpb.SpiteRequest, stream grpc.ServerStream) error

Request

func (*Session) RequestAndWait 

func (s *Session) RequestAndWait(msg *clientpb.SpiteRequest, stream grpc.ServerStream, timeout time.Duration) (*implantpb.Spite, error)

func (*Session) RequestWithAsync 

func (s *Session) RequestWithAsync(msg *clientpb.SpiteRequest, stream grpc.ServerStream, timeout time.Duration) (chan *implantpb.Spite, error)

func (*Session) RequestWithStream 

func (s *Session) RequestWithStream(msg *clientpb.SpiteRequest, stream grpc.ServerStream, timeout time.Duration) (chan *implantpb.Spite, chan *implantpb.Spite, error)

RequestWithStream - 'async' means that the response is not returned immediately, but is returned through the channel 'ch

func (*Session) RpcLogger added in v0.0.3 

func (s *Session) RpcLogger() *logs.Logger

func (*Session) Save added in v0.1.2 

func (s *Session) Save() error

func (*Session) StoreResp 

func (s *Session) StoreResp(taskId uint32, ch chan *implantpb.Spite)

func (*Session) TaskLog added in v0.0.3 

func (s *Session) TaskLog(task *Task, spite *implantpb.Spite) error

func (*Session) ToModel added in v0.0.3 

func (s *Session) ToModel() *models.Session

func (*Session) ToProtobuf 

func (s *Session) ToProtobuf() *clientpb.Session

func (*Session) ToProtobufLite added in v0.0.3 

func (s *Session) ToProtobufLite() *clientpb.Session

func (*Session) Update 

func (s *Session) Update(req *clientpb.RegisterSession)

func (*Session) UpdateKeyPair added in v0.1.2 

func (s *Session) UpdateKeyPair(keyPair *clientpb.KeyPair)

UpdateKeyPair 更新KeyPair并同步到SecureManager

func (*Session) UpdatePrivateKey added in v0.1.2 

func (s *Session) UpdatePrivateKey(key string)

func (*Session) UpdatePublicKey added in v0.1.2 

func (s *Session) UpdatePublicKey(key string)

func (*Session) UpdateSysInfo 

func (s *Session) UpdateSysInfo(info *implantpb.SysInfo)

type Task 

type Task struct {
	Id        uint32
	Type      string
	SessionId string
	Callee    string
	Cur       int
	Total     int
	Callback  func()
	Ctx       context.Context
	Cancel    context.CancelFunc
	Session   *Session
	DoneCh    chan bool
	Closed    bool
	Deadline  time.Time
	CallBy    string
}

func FromTaskProtobuf added in v0.0.3 

func FromTaskProtobuf(task *clientpb.Task) *Task

func (*Task) Close 

func (t *Task) Close()

func (*Task) Done 

func (t *Task) Done(spite *implantpb.Spite, msg string)

func (*Task) Finish 

func (t *Task) Finish(spite *implantpb.Spite, msg string)

func (*Task) Finished added in v0.0.3 

func (t *Task) Finished() bool

func (*Task) Name 

func (t *Task) Name() string

func (*Task) Panic 

func (t *Task) Panic(event Event)

func (*Task) Publish added in v0.0.3 

func (t *Task) Publish(op string, spite *implantpb.Spite, msg string)

func (*Task) String 

func (t *Task) String() string

func (*Task) TaskID added in v0.0.3 

func (t *Task) TaskID() string

func (*Task) Timeout added in v0.0.3 

func (t *Task) Timeout() bool

func (*Task) ToProtobuf 

func (t *Task) ToProtobuf() *clientpb.Task

type Tasks 

type Tasks struct {
	// contains filtered or unexported fields
}

func NewTasks added in v0.0.3 

func NewTasks() *Tasks

func (*Tasks) Add 

func (t *Tasks) Add(task *Task)

func (*Tasks) All 

func (t *Tasks) All() []*Task

All - Return a list of all tasks

func (*Tasks) Get 

func (t *Tasks) Get(taskID uint32) *Task

get

func (*Tasks) GetNotFinish added in v0.0.3 

func (t *Tasks) GetNotFinish() []*clientpb.Task

func (*Tasks) Remove 

func (t *Tasks) Remove(taskId uint32)

func (*Tasks) ToProtobuf 

func (t *Tasks) ToProtobuf() *clientpb.Tasks

type Ticker 

type Ticker struct {
	// contains filtered or unexported fields
}

func NewTicker 

func NewTicker() *Ticker

func (*Ticker) Remove 

func (t *Ticker) Remove(id cron.EntryID)

func (*Ticker) RemoveAll 

func (t *Ticker) RemoveAll()

func (*Ticker) Start 

func (t *Ticker) Start(interval int, cmd func()) (cron.EntryID, error)

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.