admin/CodeXTF2-OpenMalleableC2
1
0
Fork 0
mirror of https://github.com/CodeXTF2/OpenMalleableC2 synced 2026-06-06 15:24:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
CodeX
2026-01-27 17:38:26 +08:00
committed by GitHub
parent 5107dc11a0
commit e9eb85d2c4
1 changed files with 1 additions and 98 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -98
View File
@@ -30,105 +30,8 @@ python examples\pingpong_server.py profiles\gmail.profile
Example output:
pingpong_server.py:
```
WARNING: This is a development server. Do not use it in a production deployment. Use a production WSGI server instead.
* Running on http://127.0.0.1:8080
Press CTRL+C to quit
<img width="2331" height="1865" alt="image" src="https://github.com/user-attachments/assets/4b6d8c84-3d9b-4090-a8f3-e1c8ff5896e8" />
[DEBUG] GET request received!
[DEBUG] Raw HTTP request:
GET /_/scs/mail-static/_/js/? HTTP/1.1
Connection: Keep-Alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.5
Cookie: OSID=QkVBQ09OLUNIRUNLSU46IENvbXB1dGVyPURFU0tUT1AtSzVJRVY0RiBVc2VyPUFkbWluIFBJRD0zODc2OCBPUz1XaW5kb3dzIEFyY2g9eDY0IFRpbWVzdGFtcD0xNzY5NTA1NjYw
User-Agent: Mozilla/5.0
Dnt: 1
Host: 127.0.0.1:8080
============================================================
[Server] Received GET /_/scs/mail-static/_/js/
============================================================
[Server] Extracted metadata (102 bytes):
[Server] BEACON-CHECKIN: Computer=DESKTOP-K5IEV4F User=Admin PID=38768 OS=Windows Arch=x64 Timestamp=1769505660
[Server] Generated challenge: DjjYXnXcLSpwGPzJqcdUfOsIlEy7sO0k
[Server] Sending task (32 bytes):
[Server] "DjjYXnXcLSpwGPzJqcdUfOsIlEy7sO0k"
[DEBUG] Raw HTTP response:
HTTP/1.1 200 OK
Content-Length: 832
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=31536000
X-XSS-Protection: 1; mode=block
Server: GSE
Alternate-Protocol: 443:quic,p=1
try()catch(e)(_DumpException(e))N(L.Oa(),"sy558");P(L.Oa(),"sy558");O(L.Oa(),"sy558");try()catch(e)(_DumpException(e))N(L.Oa(),"sy580");P(L.Oa(),"sy580");O(L.Oa(),"sy580")try(DjjYXnXcLSpwGPzJqcdUfOsIlEy7sO0kvar f2=function(a)(a=a.wa;return"application/chromium-bookmark-folder"==a||"application/chromium-root-folder"==a||"application/vnd.google-apps.folder"==a||"application/vnd.google-apps.photoalbum"==a||"application/vnd.google-apps.rollupphotoalbum"==a),g2=function(a)(return a.ra),s8d=function(a)(return a?hb(a,function(a)(return new UP(a)):[]),h2=function(a)(switch(a)(case "all":case "docs-images":case "docs-images-and-videos":case "docs-videos":case "documents":case "drawings":case "folders":case "forms":case "pdfs":case "presentations":case "sites":case "spreadsheets":case "tables":return!0)return!1); O(L.Oa(),"sy588")
127.0.0.1 - - [27/Jan/2026 17:21:00] "GET /_/scs/mail-static/_/js/ HTTP/1.1" 200 -
[DEBUG] POST request received!
[DEBUG] Raw HTTP request:
POST /mail/u/0/?ui=d3244c4707&hop=6928632&start=0 HTTP/1.1
Connection: Keep-Alive
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Cookie: OSID=MTQ4MzA=
User-Agent: Mozilla/5.0
Content-Length: 80
Host: 127.0.0.1:8080
VEFTSy1SRVNVTFQ6IFJldmVyc2VkT3V0cHV0PWswT3M3eUVsSXNPZlVkY3FKelBHd3BTTGNYblhZampE
============================================================
[Server] Received POST /mail/u/0/
============================================================
[Server] Extracted session ID (5 bytes):
[Server] 14830
[Server] Extracted task output (60 bytes):
[Server] TASK-RESULT: ReversedOutput=k0Os7yElIsOfUdcqJzPGwpSLcXnXYjjD
[Server] Original challenge: DjjYXnXcLSpwGPzJqcdUfOsIlEy7sO0k
[Server] Expected reversed: k0Os7yElIsOfUdcqJzPGwpSLcXnXYjjD
[Server] SUCCESS! Verified reversed challenge in output
[Server] Sending confirmation (74 bytes)
[DEBUG] Raw HTTP response:
HTTP/1.1 200 OK
Content-Length: 176
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
X-XSS-Protection: 1; mode=block
Server: GSE
W1tbImFwbSIsIkNPTkZJUk1FRDogVGFzayBjb21wbGV0ZWQgc3VjY2Vzc2Z1bGx5ISBSZWNlaXZlZCByZXZlcnNlZCBzdHJpbmcgY29ycmVjdGx5Il0sWyJjaSIsW11dLFsiY20iLFtdLFtdXV0sJ2RiYjg3OTZhODBkNDVlMWYnXQ==
127.0.0.1 - - [27/Jan/2026 17:21:00] "POST /mail/u/0/?ui=d3244c4707&hop=6928632&start=0 HTTP/1.1" 200 -
```
pingpong_agent.exe
```
============================================================
Ping Pong PoC Agent
============================================================
[Agent] Reading profile file: ..\profiles\gmail.profile
[Agent] Parsing profile from memory...
[Agent] Profile loaded: unnamed
[Agent] User-Agent: (none)
[Agent] ===== GET: Requesting tasks from server =====
[Agent] Metadata (102 bytes): "BEACON-CHECKIN: Computer=DESKTOP-K5IEV4F User=Admin PID=38768 OS=Windows Arch=x64 Timestamp=1769505660"
[Agent] Received task (32 bytes): "DjjYXnXcLSpwGPzJqcdUfOsIlEy7sO0k"
[Agent] Task string: "DjjYXnXcLSpwGPzJqcdUfOsIlEy7sO0k"
[Agent] Reversed task: "k0Os7yElIsOfUdcqJzPGwpSLcXnXYjjD"
[Agent] ===== POST: Sending task results to server =====
[Agent] Session ID (5 bytes): "14830"
[Agent] Task output (60 bytes): "TASK-RESULT: ReversedOutput=k0Os7yElIsOfUdcqJzPGwpSLcXnXYjjD"
[Agent] Server confirmation (74 bytes): "CONFIRMED: Task completed successfully! Received reversed string correctly"
[Agent] ===== Ping pong complete =====
[Agent] Successfully executed server task and reported results!
```
## References