init

Author: gloxec

.github/conf/.goreleaser.yml

@@ -0,0 +1,43 @@
+before:
+  hooks:
+    - go mod tidy
+    - go generate ./...
+builds:
+  - id: "with-upx"
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - windows
+      - darwin
+    goarch:
+      - amd64
+      - arm64
+      - "386"
+    goarm:
+      - "6"
+      - "7"
+    flags:
+      - -trimpath
+    ldflags:
+      - -s -w -X main.version={{.Version}} -X main.commit={{.Commit}} -X main.date={{ .CommitDate }} -X main.builtBy=goreleaser
+    ignore:
+      - goos: windows
+        goarch: arm64
+      - goos: linux
+        goarch: arm64
+      - goos: darwin
+        goarch: "386"
+    hooks:
+       post: upx --best -f -q "{{ .Path }}"
+
+checksum:
+  name_template: 'checksums.txt'
+snapshot:
+  name_template: "{{ incpatch .Version }}-next"
+changelog:
+  sort: asc
+  filters:
+    exclude:
+      - '^docs:'
+      - '^test:'

.github/workflows/go.yml

@@ -0,0 +1,35 @@
+name: goreleaser
+
+on:
+  push:
+    tags:
+      - '*'
+
+permissions:
+  contents: write
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      -
+        name: Set up Go
+        uses: actions/setup-go@v2
+        with:
+          go-version: 1.19
+      -
+        name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v2
+        with:
+          distribution: goreleaser
+          version: latest
+          args: -f .github/conf/.goreleaser.yml
+          workdir: .
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

README.md

@@ -0,0 +1,26 @@
+# autoRebind 
+
+[README](README.md) | [中文文档](README_zh.md)
+
+autoRebind can parse CobaltStrike's `Malleable C2 profile` and convert it into the source code of the communication library available to [CrossC2](https://github.com/gloxec/CrossC2)
+
+## Usage
+
+`autoRebind <c2profile> [section-name] > rebind.c`
+
+
+
+Read the `default section` configuration in the c2profile file by default
+
+
+
+When there are multiple `http-get/post` sections in c2profile, you can specify the section name for parsing
+
+## Note
+
+`gcc -fPIC -shared rebind.c -o librebind.so`
+
+
+
+The generated `rebind.c` source file should be compiled under a low-version Linux system as much as possible, otherwise it may be incompatible due to the `GLIBC version is too high` on the target system
+

README_zh.md

@@ -0,0 +1,24 @@
+# autoRebind 
+
+[README](README.md) | [中文文档](README_zh.md)
+
+autoRebind可以解析CobaltStrike的`Malleable C2 profile`，转换成[CrossC2](https://github.com/gloxec/CrossC2)可用的通信库源码
+
+
+## Usage
+
+`autoRebind <c2profile> [section-name] > rebind.c`
+
+默认读取c2profile文件中的default section配置
+
+
+当c2profile中存在多个 http-get/post 节时，可以指定节名称来做解析
+
+
+## Note
+
+`gcc -fPIC -shared rebind.c -o librebind.so`
+
+生成的`rebind.c`源文件尽量在低版本Linux系统下进行编译，否则可能会因为目标系统上`GLIBC版本过高`不兼容
+
+

go.mod

@@ -0,0 +1,9 @@
+module github.com/CrossC2/autoRebind
+
+go 1.19
+
+require (
+    github.com/D00Movenok/goMalleable v0.0.0-20220314191301-14f91f43c3b0 // indirect
+    github.com/alecthomas/participle/v2 v2.0.0-alpha7 // indirect
+    github.com/alecthomas/repr v0.0.0-20220113201626-b1b626ac65ae // indirect
+)

go.sum

@@ -0,0 +1,7 @@
+github.com/D00Movenok/goMalleable v0.0.0-20220314191301-14f91f43c3b0 h1:J2/ncp0Jfq6GAws9YNvL0DxG+DnmPxIJkZ0u01y14uY=
+github.com/D00Movenok/goMalleable v0.0.0-20220314191301-14f91f43c3b0/go.mod h1:FTxb8RmunucvVgT4QCa0SM1AKYkqIsVH+Z5+zkuHWU4=
+github.com/alecthomas/participle/v2 v2.0.0-alpha7 h1:cK4vjj0VSgb3lN1nuKA5F7dw+1s1pWBe5bx7nNCnN+c=
+github.com/alecthomas/participle/v2 v2.0.0-alpha7/go.mod h1:NumScqsC42o9x+dGj8/YqsIfhrIQjFEOFovxotbBirA=
+github.com/alecthomas/repr v0.0.0-20181024024818-d37bc2a10ba1/go.mod h1:xTS7Pm1pD1mvyM075QCDSRqH6qRLXylzS24ZTpRiSzQ=
+github.com/alecthomas/repr v0.0.0-20220113201626-b1b626ac65ae h1:zzGwJfFlFGD94CyyYwCJeSuD32Gj9GTaSi5y9hoVzdY=
+github.com/alecthomas/repr v0.0.0-20220113201626-b1b626ac65ae/go.mod h1:2kn6fqh/zIyPLmm3ugklbEi5hg5wS435eygvNfaDQL8=