havoc_profile_generator.py

#!/usr/bin/python3
import argparse
import sys

from modules import generator
from modules import writer
from modules import util
from modules.enum import Arch

Profile   = generator.Profile
Generator = generator.Generator
Writer    = writer.Writer

BANNER = '''
                   ▄▄▄▄  ▄   ▄▄   ▄▄     ▄      ▄▄▄        
                ▄▄▄ ▄▄  ▄   ▄   ▄▄    ▄     ▄       ▄▄     
              ▄  ▄  ▄  ▄▄  ▄   ▄   ▄▄   ▄▄▄▄  ▄▄       ▄   
             ▄▄ ▄▄  ▄  ▄  ▄▄  ▄   ▄   ▄▄    ▄    ▄▄        
            ▄ ▄  ▄ ▄▄  ▄     ▄▄  ▄   ▄   ▄    ▄▄    ▄▄     
            ▄ ▄▄ ▄  ▄ ▄▄     ▄  ▄   ▄   ▄   ▄    ▄▄    ▄▄ ▄
            ▄ ▄▄ ▄  ▄ ▄▄ ▄  ▄▄  ▄  ▄   ▄       ▄    ▄     ▄
           ▄▄▄ ▄ ▄▄ ▄  ▄ ▄  ▄▄ ▄▄  ▄  ▄▄     ▄▄   ▄    ▄   
           ▄ ▄▄▄▄ ▄ ▄▄ ▄ ▄  ▄▄ ▄▄ ▄▄▄ ▄▄ ▄  ▄▄  ▄▄   ▄    ▄
           ▄▄ ▄ ▄ ▄▄ ▄ ▄▄   ▄▄ ▄▄ ▄▄▄▄▄▄ ▄▄ ▄  ▄▄  ▄▄   ▄  
            ▄▄▄▄ ▄ ▄ ▄  ▄   ▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄  ▄  ▄▄  ▄▄   
           ▄ ▄ ▄▄▄▄ ▄ ▄ ▄  ▄▄▄▄ ▄ ▄▄ ▄▄ ▄  ▄▄ ▄▄  ▄  ▄▄  ▄▄
              ▄ ▄ ▄ ▄▄▄▄ ▄ ▄ ▄▄ ▄ ▄▄ ▄  ▄▄▄   ▄  ▄▄ ▄▄  ▄▄ 
                 ▄ ▄ ▄ ▄▄▄▄ ▄ ▄▄▄▄▄▄▄▄▄ ▄▄    ▄  ▄  ▄▄ ▄▄  
                    ▄ ▄ ▄ ▄▄▄ ▄▄▄▄▄▄ ▄▄ ▄▄  ▄ ▄  ▄  ▄  ▄▄ ▄
                       ▄ ▄  ▄▄▄▄ ▄▄ ▄ ▄▄ ▄  ▄ ▄  ▄  ▄  ▄  ▄
                            ▄ ▄▄▄ ▄▄▄▄ ▄ ▄  ▄ ▄▄ ▄  ▄  ▄  ▄
                             ▄▄▄ ▄ ▄ ▄▄▄▄▄  ▄▄ ▄ ▄▄ ▄  ▄ ▄▄
           ▄                   ▄▄▄▄ ▄ ▄ ▄   ▄▄ ▄  ▄ ▄  ▄  ▄
                                  ▄▄▄▄ ▄ ▄   ▄▄▄▄ ▄  ▄ ▄▄  
                                     ▄▄▄▄▄▄ ▄ ▄ ▄▄▄▄ ▄ ▄   
              ▀           ▄▄            ▄▄▄▄▄▄▄▄ ▄ ▄▄▄▄▀   
                ▀                          ▄▄▄ ▄▄ ▄ ▄▀     
                   ▀▀▄                        ▄▄▄▀▀        

                      Havoc C2 Profile Generator
                              by c0z\033[0m
'''

if __name__ == "__main__":
    parser = argparse.ArgumentParser(
            prog='Havoc profile generator',
            description='Generate havoc c2 profiles with ease and randomness')
    parser.add_argument('-c', '--config', 
                        type=argparse.FileType('r'), 
                        required=False, 
                        help='Config file to use, don\' use a conifg file for a completely random profile')
    parser.add_argument('-r', '--read', 
                        type=str, 
                        action='store', 
                        default="Nothing", 
                        help='Directory to read CS profiles from')
    parser.add_argument('-l', '--list', 
                        type=util.str_to_bool, 
                        nargs='?', 
                        const=True, 
                        default=False, 
                        help='List supported profiles')
    parser.add_argument('-s', '--sysnative', 
                        type=util.str_to_bool, 
                        nargs='?', 
                        const=True, 
                        default=False, 
                        help='Only support sysnative for spawn to')
    parser.add_argument('-a', '--arch', 
                        type=str, 
                        action='store', 
                        default="Nothing", 
                        help='Selected architecture between x86, x64 & x86_64')
    parser.add_argument('-p', '--profile', 
                        type=str, 
                        action='store',
                        default="Nothing", 
                        help='Select a traffic profile')
    parser.add_argument('-H', '--host', 
                        type=str, 
                        action='store', 
                        default="Nothing", 
                        help='The listeners ip')
    parser.add_argument('-S', '--hosts', 
                        type=str, 
                        action='store', 
                        default="Nothing", 
                        help='The hosts array in the form of 10.0.0.1,10.0.0.2')
    parser.add_argument('-P', '--port', 
                        type=str, 
                        action='store', 
                        default="Nothing", 
                        help='Set the port for listeners to listen on')
    parser.add_argument('-L', '--listeners', 
                        type=str, 
                        action='store', 
                        default="Nothing", 
                        help='Set the port for listeners to listen on')
    parser.add_argument('-E', '--evasion', 
                        type=util.str_to_bool, 
                        nargs='?', 
                        const=True, 
                        default=False, 
                        help='Set beacon defaults to be more evasive')
    parser.add_argument('-M', '--mports', 
                        type=str, 
                        action='store', 
                        default="Nothing",
                        help='Set\'s the min port and max port for randomization')
    parser.add_argument('-o', '--outfile', 
                        type=str, 
                        action='store', 
                        default="Nothing", 
                        help='Output file of the final Havoc C2 pofile')
    parser.add_argument('-q', '--quiet', 
                        type=util.str_to_bool, 
                        nargs='?', 
                        const=True, 
                        default=False, 
                        help='Do not show banner')
    args = parser.parse_args()

    if not args.quiet:
        print(f"{BANNER}")

    template = None
    outfile = None
    config = None
    profile = None
    host = None
    hosts = None
    port = None
    arch = None
    sysnative = False
    listeners = None

    cs_profiles = None
    min_port = None
    max_port = None

    profiles = None

    loaded_profiles_data = {}

    if args.read != "Nothing":
        loaded_profiles = util.get_cs_profiles(args.read)
        loaded_profile_names = [ x.split("/")[-1] for x in list(loaded_profiles.keys()) ]
        for i, cs_profile in enumerate(loaded_profiles.keys()):
            parsed_profile_name = loaded_profile_names[i]
            parsed_profile_data = util.parse_cs_profile(profile=loaded_profiles[cs_profile], verb="any")
            loaded_profiles_data[parsed_profile_name] = parsed_profile_data
        profiles = loaded_profile_names
    else:
        profile_result = util.load_profiles()
        if profile_result is None:
            util.print_fail("Loaded profiles failed to load. Make sure there is a config directory with profile templates in it or a directory with CS profiles is specified")
        profiles, loaded_profiles_data = profile_result
    
    if not profiles or not loaded_profiles_data:
        util.print_fail("Loaded profiles failed to load. Make sure there is a config directory with profile templates in it or a directory with CS profiles is specified")

    def list_profiles() -> None:
            for profile in profiles:
                util.print_good(f"Profile: {profile}")

    if args.list:
        list_profiles()
        sys.exit(0)

    if args.profile != "Nothing":
        profile = args.profile
    else:
        profile = "any"
    
    if args.arch != "Nothing":
        if args.arch == "x86_64":
            arch = Arch("x86_64")
        elif args.arch == "x64":
            arch = Arch("x64")
        elif args.arch == "x86":
            arch = Arch("x86")
            
    if args.sysnative:
        sysnative = True
    
    if args.host != "Nothing":
        host = args.host

    if args.hosts != "Nothing":
        hosts = args.hosts

    if args.port != "Nothing":
        port = args.port

    if args.mports != "Nothing":
        port_min = args.mports.split(',')[0]
        if port_min:
            min_port = str(port_min)
        else:
            min_port = "1024"
        port_max = args.mports.split(',')[1]
        if port_max:
            max_port = str(port_max)
        else:
            max_port = "65534"
    else:
        min_port = "1024"
        max_port = "65534"

    if args.listeners != "Nothing":
        listeners = args.listeners
    
    if args.outfile != "Nothing":
        outfile = args.outfile
    else:
        outfile = None

    if args.config:
        config = args.config.readlines()

    if not args.quiet:
        util.print_warn(f"""Options were:
    config:      {config is not None}
    sysnative:   {args.sysnative}
    evasion:     {args.evasion}
    profile:     {profile is not None}
    arch:        {arch is not None}
    host:        {host is not None}
    hosts:       {hosts is not None}
    port:        {port is not None}
    listeners:   {listeners is not None}
    outfile:     {outfile is not None}
        """)
    
    generated_profile = Profile(quiet=args.quiet,
                                profile_names=profiles,
                                profiles=loaded_profiles_data,
                                profile=profile,
                                sysnative=sysnative,
                                evasion=args.evasion,
                                min_port=min_port,
                                max_port=max_port,
                                config=config,
                                host=host,
                                port=port,
                                hosts=hosts,
                                extra_listeners=listeners,
                                arch=arch)

    if not args.quiet and outfile:
        util.print_good(f"Saving profile to {outfile}")
    Writer(filename=outfile).write(profile=generated_profile.to_dict())