progress on 'generate' command

Payload_Type/sliverapi/sliverapi/SliverRequests/SliverAPI.py

@@ -1,7 +1,7 @@
 from tabulate import tabulate
 from mythic_container.MythicCommandBase import *
 from mythic_container.MythicRPC import SendMythicRPCFileGetContent, MythicRPCFileGetContentMessage
-from sliver import SliverClientConfig, SliverClient
+from sliver import SliverClientConfig, SliverClient, client_pb2
 from mythic_container.MythicCommandBase import *
 from mythic_container.MythicRPC import *
 from mythic_container.PayloadBuilder import *
@@ -115,7 +115,6 @@ async def version(taskData: PTTaskMessageAllData):
 
  return f"{version_results}"
 
-
 async def jobs_kill(taskData: PTTaskMessageAllData, job_id: int):
  client = await create_sliver_client(taskData)
  kill_response = await client.kill_job(job_id=job_id)
@@ -186,14 +185,14 @@ async def use(taskData: PTTaskMessageAllData, sliver_id: int):
  payload_type="sliverimplant",
  uuid=sliver_id,
  selected_os=sliver_os_table[implant_info.OS], 
- description=f"sliver {'beaconing' if isBeacon else 'interactive'} implant for {sliver_id}",
+ description=f"(no download) using sliver {'beaconing' if isBeacon else 'interactive'} implant for {sliver_id}",
  build_parameters=[],
  c2_profiles=[],
  # TODO: figure out if possible to not specify these manually
  commands=['ifconfig', 'download', 'upload', 'ls', 'ps', 'ping', 'whoami', 'screenshot', 'netstat', 'getgid', 'getuid', 'getpid', 'cat', 'cd', 'pwd', 'info', 'execute', 'mkdir', 'shell', 'terminate', 'rm']
  ),
  )
- await SendMythicRPCPayloadCreateFromScratch(new_payload)
+ scratchBuild = await SendMythicRPCPayloadCreateFromScratch(new_payload)
 
  # create the callback
  extra_info = json.dumps({

Payload_Type/sliverapi/sliverapi/agent_functions/builder.py

@@ -40,6 +40,7 @@ async def build(self) -> BuildResponse:
  Host="SliverAPI",
  Ip=ip,
  IntegrityLevel=3,
+ ExtraInfo=self.uuid,
  ))
  if not create_callback.Success:
  logger.info(create_callback.Error)

Payload_Type/sliverapi/sliverapi/agent_functions/generate.py

@@ -0,0 +1,97 @@
+from ..SliverRequests import SliverAPI
+
+from mythic_container.MythicCommandBase import *
+from mythic_container.PayloadBuilder import *
+from mythic_container.MythicRPC import MythicRPCPayloadCreateFromScratchMessage, MythicCommandBase, SendMythicRPCPayloadCreateFromScratch, SendMythicRPCResponseCreate, MythicRPCResponseCreateMessage
+
+from mythic_container.MythicGoRPC.send_mythic_rpc_payload_create_from_scratch import MythicRPCPayloadConfiguration
+
+class GenerateArguments(TaskArguments):
+ def __init__(self, command_line, **kwargs):
+ super().__init__(command_line, **kwargs)
+ self.args = [
+ CommandParameter(
+ name="os",
+ cli_name="os",
+ display_name="os",
+ description="operating system",
+ default_value='windows',
+ type=ParameterType.ChooseOne,
+ choices=["linux", "windows"]
+ ),
+ CommandParameter(
+ name="mtls",
+ cli_name="mtls",
+ display_name="mtls",
+ description="mtls ip:port to use",
+ type=ParameterType.String,
+ ),
+ ]
+
+ async def parse_arguments(self):
+ self.load_args_from_json_string(self.command_line)
+
+
+class Generate(CommandBase):
+ cmd = "generate"
+ needs_admin = False
+ help_cmd = "generate"
+ description = "Generate a new sliver binary"
+ version = 1
+ author = "Spencer Adolph"
+ argument_class = GenerateArguments
+ attackmapping = []
+
+ async def create_go_tasking(self, taskData: MythicCommandBase.PTTaskMessageAllData) -> MythicCommandBase.PTTaskCreateTaskingMessageResponse:
+ # TODO: paste all the config options here
+
+ os = taskData.args.get_arg('os')
+ mtls = taskData.args.get_arg('mtls')
+
+ sliverconfig_file_uuid = taskData.BuildParameters[0].Value
+
+ sliver_os_table = {
+ 'linux': 'Linux'
+ }
+
+ createMessage = MythicRPCPayloadCreateFromScratchMessage(
+ TaskID=taskData.Task.ID,
+ PayloadConfiguration=MythicRPCPayloadConfiguration(
+ PayloadType="sliverimplant",
+ SelectedOS=sliver_os_table[os], 
+ Description="generated payload: sliver implant",
+ BuildParameters=[
+ MythicRPCPayloadConfigurationBuildParameter(
+ name='sliverconfig_file_uuid',
+ value=sliverconfig_file_uuid
+ ),
+ MythicRPCPayloadConfigurationBuildParameter(
+ name='os',
+ value=os
+ ),
+ MythicRPCPayloadConfigurationBuildParameter(
+ name='mtls',
+ value=mtls
+ ),
+ ],
+ C2Profiles=[],
+ Commands=['ifconfig', 'download', 'upload', 'ls', 'ps', 'ping', 'whoami', 'screenshot', 'netstat', 'getgid', 'getuid', 'getpid', 'cat', 'cd', 'pwd', 'info', 'execute', 'mkdir', 'shell', 'terminate', 'rm']
+ ),
+ )
+ await SendMythicRPCPayloadCreateFromScratch(createMessage)
+
+ await SendMythicRPCResponseCreate(MythicRPCResponseCreateMessage(
+ TaskID=taskData.Task.ID,
+ Response="generated implant".encode("UTF8"),
+ ))
+
+ taskResponse = MythicCommandBase.PTTaskCreateTaskingMessageResponse(
+ TaskID=taskData.Task.ID,
+ Success=True,
+ Completed=True
+ )
+ return taskResponse
+
+ async def process_response(self, task: PTTaskMessageAllData, response: any) -> PTTaskProcessResponseMessageResponse:
+ resp = PTTaskProcessResponseMessageResponse(TaskID=task.Task.ID, Success=True)
+ return resp

Payload_Type/sliverimplant/sliverimplant/agent_functions/builder.py

@@ -2,7 +2,7 @@
 from mythic_container.PayloadBuilder import *
 from mythic_container.MythicCommandBase import *
 from mythic_container.MythicRPC import *
-from sliver import SliverClientConfig, SliverClient
+from sliver import SliverClientConfig, SliverClient, client_pb2
 
 
 class SliverImplant(PayloadType):
@@ -24,38 +24,49 @@ class SliverImplant(PayloadType):
  build_steps = []
  build_parameters = [
  BuildParameter(
- name="name",
- description="name",
+ name="sliverconfig_file_uuid",
+ description="sliverconfig_file_uuid",
+ parameter_type=BuildParameterType.String,
+ ),
+ BuildParameter(
+ name="os",
+ description="os",
+ parameter_type=BuildParameterType.String,
+ ),
+ BuildParameter(
+ name="mtls",
+ description="mtls",
  parameter_type=BuildParameterType.String,
  ),
  ]
 
  async def build(self) -> BuildResponse:
- # Just hope they have this setup already, and not have multiple
- # sliverapi_payloads = await SendMythicRPCPayloadSearch(MythicRPCPayloadSearchMessage(
- # PayloadTypes=['sliverapi'],
- # ))
- # sliver_config_uuid = sliverapi_payloads.Payloads[0].BuildParameters[0].Value
- # filecontent = await SendMythicRPCFileGetContent(MythicRPCFileGetContentMessage(
- # AgentFileId=sliver_config_uuid
- # ))
- # config = SliverClientConfig.parse_config(filecontent.Content)
- # client = SliverClient(config)
- # await client.connect()
+ os = self.get_parameter('os')
+ mtls = self.get_parameter('mtls')
+ sliverconfig_file_uuid = self.get_parameter('sliverconfig_file_uuid')
 
- # self.build_parameters
+ if (os == ''):
+ return BuildResponse(status=BuildStatus.Success)
+
+ filecontent = await SendMythicRPCFileGetContent(MythicRPCFileGetContentMessage(
+ AgentFileId=sliverconfig_file_uuid
+ ))
+ config = SliverClientConfig.parse_config(filecontent.Content)
+ client = SliverClient(config)
+ await client.connect()
 
- # implant_config = client_pb2.ImplantConfig(
- #  IsBeacon=self.build_parameters[''],
- #  Name="sliver-pytest-1",
- #  GOARCH="amd64",
- #  GOOS="linux",
- #  Format=client_pb2.OutputFormat.EXECUTABLE,
- #  ObfuscateSymbols=False,
- #  C2=[client_pb2.ImplantC2(Priority=0, URL="http://localhost:80")],
- # )
+ implant_config = client_pb2.ImplantConfig(
+ IsBeacon=False,
+ Name=f"{self.uuid}",
+ GOARCH="amd64",
+ GOOS=os,
+ Format=client_pb2.OutputFormat.EXECUTABLE,
+ ObfuscateSymbols=False,
+ C2=[client_pb2.ImplantC2(Priority=0, URL=f"mtls://{mtls}")],
+ )
 
- # implant = await client.generate_implant(implant_config)
+ implant = await client.generate_implant(implant_config)
+ implant_bytes = implant.File.Data
 
- resp = BuildResponse(status=BuildStatus.Success)
+ resp = BuildResponse(status=BuildStatus.Success, payload=implant_bytes)
  return resp

README.md

@@ -43,7 +43,7 @@ sudo ./mythic-cli install github https://github.com/MythicAgents/sliver
  - Interactive Tasking (shell) 🚧🐞 (buggy)
 - Beacon checkin status
 - Documentation-payload
-- Build implants through Mythic ('generate' + UI)
+- Build implants through Mythic ('generate' + UI)✅
 - Sliver 3rd party integrations
 - Stretch Goal: Ability to run the sliver server within mythic
 - Stretch Goal: V2 everything in go💙 (match sliver official client code)
@@ -67,7 +67,7 @@ sudo ./mythic-cli install github https://github.com/MythicAgents/sliver
  - cursed
  - dns
  - env
- - generate
+ - generate✅
  - hosts
  - http
  - https
@@ -86,7 +86,7 @@ sudo ./mythic-cli install github https://github.com/MythicAgents/sliver
  - tasks
  - update
  - use✅
- - version
+ - version✅
  - websites
  - wg
  - operators