SharpC2 icon indicating copy to clipboard operation
SharpC2 copied to clipboard

Download command

Open giomke opened this issue 1 year ago • 4 comments

Please add exfiltration capabilities

giomke avatar May 15 '23 10:05 giomke

Hi @rasta-mouse - to clarify, is adding a new command to a Drone just a matter of:

  1. Adding an entry to one of the .yaml files in Client/Commands/ with an unused Command number between 0 and 255 and choosing the appropriate Output/Argument parameters.
  2. Adding an implementation class in Drone/Commands/ using the same command number chosen in step 1.
  3. Recompiling Client/Drone/Teamserver

? Is there anything else that needs to be done ?

tbaker57 avatar May 17 '23 19:05 tbaker57

i think download file need to be handling more that just normal task need chunking logic in teamserver and client to know how many KBs downloaded by % i think need to be handled as socks and reverse port forwarding
as solution : 1- send task to download file 2- drone send information about file and how many chunks will be sent 3- teamserver register that information and after drone finish send need to validate the chunks using checksum or something like that and know the missing chunk and send to drone to resend that part missing and then mark the task completed

rakan-dev avatar May 19 '23 17:05 rakan-dev

Hi @rasta-mouse - to clarify, is adding a new command to a Drone just a matter of:

  1. Adding an entry to one of the .yaml files in Client/Commands/ with an unused Command number between 0 and 255 and choosing the appropriate Output/Argument parameters.
  2. Adding an implementation class in Drone/Commands/ using the same command number chosen in step 1.
  3. Recompiling Client/Drone/Teamserver

? Is there anything else that needs to be done ?

and about what u asking i think its right

rakan-dev avatar May 19 '23 17:05 rakan-dev

@tbaker57 for a basic command that would just return string output, then yes. For something more complex then @rakan-dev is correct, it would need a bit more. At the very least it would need a new server-side module to deal with the output. A command like download would also need database changes for storage and additional API endpoints to manage the files.

rasta-mouse avatar May 20 '23 09:05 rasta-mouse