mirror of
https://github.com/MaorSabag/NaX
synced 2026-06-28 15:01:11 +00:00
MaorSabag
c0fc8d878b
Position-independent C2 beacon for Adaptix Framework with: - PIC shellcode beacon (PEB walk, FNV1a hashing) - BeaconGate API proxy + WFSO PoC sleepmask (extensible) - BOF execution with module stomping - Malleable C2 profiles with runtime switching - WinHTTP transport (proxy-aware) - Token manipulation (steal, impersonate, create) - TCP tunneling (SOCKS, lportfwd, rportfwd) - SMB pivoting - Stardust UDRL loader with module stomping
340 lines
10 KiB
Bash
Executable File
340 lines
10 KiB
Bash
Executable File
#!/bin/bash
|
|
# setup_nax.sh - Build and deploy NaX extenders to an Adaptix Server directory.
|
|
#
|
|
# Builds the 4 Go server plugins (agent, HTTP listener, SMB listener, service),
|
|
# deploys them to Server/extenders/, writes nax_root.conf so the agent plugin
|
|
# can find the NaX source tree at runtime, and registers them in profile.yaml.
|
|
#
|
|
# Usage:
|
|
# ./setup_nax.sh --server /path/to/Server
|
|
# ./setup_nax.sh --server /path/to/Server --action agent
|
|
# ./setup_nax.sh --server /path/to/Server --action prereqs
|
|
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
CYAN='\033[0;36m'
|
|
NC='\033[0m'
|
|
|
|
error_exit() { echo -e "${RED}[ERROR]${NC} $1"; exit 1; }
|
|
info_msg() { echo -e "${GREEN}[+]${NC} $1"; }
|
|
warning_msg() { echo -e "${YELLOW}[!]${NC} $1"; }
|
|
step_msg() { echo -e "${CYAN}[*]${NC} $1"; }
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
|
NAX_ROOT="$SCRIPT_DIR"
|
|
SERVER_DIR=""
|
|
ACTION="all"
|
|
GO_BIN=""
|
|
GOEXPERIMENT=""
|
|
|
|
## ========= [ argument parsing ] =========
|
|
|
|
while [[ $# -gt 0 ]]; do
|
|
case $1 in
|
|
--server)
|
|
SERVER_DIR="$(realpath "$2" 2>/dev/null || echo "$2")"
|
|
shift 2
|
|
;;
|
|
--action)
|
|
ACTION="$2"
|
|
shift 2
|
|
;;
|
|
-h|--help)
|
|
ACTION="help"
|
|
shift
|
|
;;
|
|
*)
|
|
error_exit "Unknown parameter: $1\nRun $0 --help for usage."
|
|
;;
|
|
esac
|
|
done
|
|
|
|
## ========= [ usage ] =========
|
|
|
|
if [ "$ACTION" = "help" ] || [ -z "$SERVER_DIR" ]; then
|
|
cat <<EOF
|
|
Usage: $0 --server <Server_directory> [--action <action>]
|
|
|
|
Required:
|
|
--server <dir> Path to Adaptix Server directory
|
|
(contains adaptixserver binary, extenders/, profile.yaml)
|
|
|
|
Optional:
|
|
--action <action> Action to perform (default: all)
|
|
|
|
Actions:
|
|
all Check prereqs + build all plugins + deploy + register
|
|
plugins Build and deploy all 4 plugins (skip prereq check)
|
|
agent Build and deploy agent plugin only
|
|
listener-http Build and deploy HTTP listener only
|
|
listener-smb Build and deploy SMB listener only
|
|
service Build and deploy nax_store service only
|
|
prereqs Check build prerequisites only
|
|
|
|
Examples:
|
|
$0 --server /opt/Server
|
|
$0 --server ../Server --action agent
|
|
$0 --server /opt/Server --action prereqs
|
|
EOF
|
|
[ "$ACTION" = "help" ] && exit 0
|
|
exit 1
|
|
fi
|
|
|
|
## ========= [ validate server directory ] =========
|
|
|
|
if [ ! -d "$SERVER_DIR" ]; then
|
|
error_exit "Server directory does not exist: $SERVER_DIR"
|
|
fi
|
|
|
|
if [ ! -f "$SERVER_DIR/adaptixserver" ] && [ ! -f "$SERVER_DIR/profile.yaml" ]; then
|
|
error_exit "Not an Adaptix Server directory (no adaptixserver or profile.yaml): $SERVER_DIR"
|
|
fi
|
|
|
|
EXTENDERS_DIR="$SERVER_DIR/extenders"
|
|
|
|
## ========= [ prerequisites check ] =========
|
|
|
|
check_prereqs() {
|
|
step_msg "Checking build prerequisites..."
|
|
local missing=()
|
|
|
|
command -v x86_64-w64-mingw32-gcc >/dev/null 2>&1 || missing+=("mingw-w64")
|
|
command -v x86_64-w64-mingw32-g++ >/dev/null 2>&1 || missing+=("mingw-w64-g++")
|
|
command -v nasm >/dev/null 2>&1 || missing+=("nasm")
|
|
command -v python3 >/dev/null 2>&1 || missing+=("python3")
|
|
command -v objcopy >/dev/null 2>&1 || missing+=("binutils (objcopy)")
|
|
command -v strings >/dev/null 2>&1 || missing+=("binutils (strings)")
|
|
|
|
if [ -x /usr/local/go/bin/go ]; then
|
|
GO_BIN="/usr/local/go/bin/go"
|
|
elif command -v go >/dev/null 2>&1; then
|
|
GO_BIN="$(command -v go)"
|
|
else
|
|
missing+=("go")
|
|
fi
|
|
|
|
if [ ${#missing[@]} -gt 0 ]; then
|
|
error_exit "Missing prerequisites: ${missing[*]}\n Install: sudo apt install mingw-w64 nasm binutils python3 golang-go"
|
|
fi
|
|
|
|
info_msg "All prerequisites found"
|
|
info_msg " Go: $($GO_BIN version 2>/dev/null | head -1)"
|
|
info_msg " MinGW: $(x86_64-w64-mingw32-gcc --version 2>/dev/null | head -1)"
|
|
info_msg " NASM: $(nasm --version 2>/dev/null | head -1)"
|
|
}
|
|
|
|
## ========= [ GOEXPERIMENT auto-detection ] =========
|
|
|
|
detect_goexperiment() {
|
|
local server_bin="$SERVER_DIR/adaptixserver"
|
|
if [ ! -f "$server_bin" ]; then
|
|
warning_msg "adaptixserver binary not found - using default GOEXPERIMENT"
|
|
GOEXPERIMENT="jsonv2,greenteagc"
|
|
return
|
|
fi
|
|
|
|
local version_line
|
|
version_line=$(strings "$server_bin" 2>/dev/null | grep -m1 '^go[0-9].*X:')
|
|
|
|
if [ -z "$version_line" ]; then
|
|
warning_msg "Could not detect GOEXPERIMENT from adaptixserver - using default"
|
|
GOEXPERIMENT="jsonv2,greenteagc"
|
|
return
|
|
fi
|
|
|
|
GOEXPERIMENT="${version_line##*X:}"
|
|
info_msg "Detected GOEXPERIMENT=$GOEXPERIMENT (from $(basename "$server_bin"))"
|
|
}
|
|
|
|
## ========= [ find Go binary ] =========
|
|
|
|
find_go() {
|
|
if [ -n "$GO_BIN" ]; then
|
|
return
|
|
fi
|
|
if [ -x /usr/local/go/bin/go ]; then
|
|
GO_BIN="/usr/local/go/bin/go"
|
|
elif command -v go >/dev/null 2>&1; then
|
|
GO_BIN="$(command -v go)"
|
|
else
|
|
error_exit "Go compiler not found. Install Go and re-run."
|
|
fi
|
|
}
|
|
|
|
## ========= [ build + deploy functions ] =========
|
|
|
|
build_deploy_agent() {
|
|
local dest="$EXTENDERS_DIR/agent_nonameax"
|
|
mkdir -p "$dest" || error_exit "Failed to create $dest"
|
|
|
|
step_msg "Building agent_nonameax plugin..."
|
|
make -C "$NAX_ROOT/src_server" agent \
|
|
SERVER_DIR="$SERVER_DIR" \
|
|
GOEXPERIMENT="$GOEXPERIMENT" \
|
|
GO="$GO_BIN" \
|
|
|| error_exit "Failed to build agent plugin"
|
|
|
|
echo "$NAX_ROOT" > "$dest/nax_root.conf"
|
|
cp -r "$NAX_ROOT/src_server/agent_nonameax/pe_templates" "$dest/pe_templates" 2>/dev/null || true
|
|
info_msg "Agent deployed to $dest"
|
|
info_msg " nax_root.conf -> $NAX_ROOT"
|
|
}
|
|
|
|
build_deploy_listener_http() {
|
|
local dest="$EXTENDERS_DIR/listener_nonameax_http"
|
|
mkdir -p "$dest" || error_exit "Failed to create $dest"
|
|
|
|
step_msg "Building listener_nonameax_http plugin..."
|
|
make -C "$NAX_ROOT/src_server" listener \
|
|
SERVER_DIR="$SERVER_DIR" \
|
|
GOEXPERIMENT="$GOEXPERIMENT" \
|
|
GO="$GO_BIN" \
|
|
|| error_exit "Failed to build HTTP listener plugin"
|
|
|
|
info_msg "HTTP listener deployed to $dest"
|
|
}
|
|
|
|
build_deploy_listener_smb() {
|
|
local dest="$EXTENDERS_DIR/listener_nonameax_smb"
|
|
mkdir -p "$dest" || error_exit "Failed to create $dest"
|
|
|
|
step_msg "Building listener_nonameax_smb plugin..."
|
|
make -C "$NAX_ROOT/src_server" listener-smb \
|
|
SERVER_DIR="$SERVER_DIR" \
|
|
GOEXPERIMENT="$GOEXPERIMENT" \
|
|
GO="$GO_BIN" \
|
|
|| error_exit "Failed to build SMB listener plugin"
|
|
|
|
info_msg "SMB listener deployed to $dest"
|
|
}
|
|
|
|
build_deploy_service() {
|
|
local dest="$EXTENDERS_DIR/service_nax_store"
|
|
mkdir -p "$dest" || error_exit "Failed to create $dest"
|
|
|
|
step_msg "Building nax_store service plugin..."
|
|
make -C "$NAX_ROOT/src_server" service \
|
|
SERVER_DIR="$SERVER_DIR" \
|
|
GOEXPERIMENT="$GOEXPERIMENT" \
|
|
GO="$GO_BIN" \
|
|
|| error_exit "Failed to build service plugin"
|
|
|
|
info_msg "Service deployed to $dest"
|
|
}
|
|
|
|
build_deploy_all() {
|
|
build_deploy_agent
|
|
build_deploy_listener_http
|
|
build_deploy_listener_smb
|
|
build_deploy_service
|
|
}
|
|
|
|
## ========= [ profile.yaml registration ] =========
|
|
|
|
add_to_profile() {
|
|
local yaml="$SERVER_DIR/profile.yaml"
|
|
if [ ! -f "$yaml" ]; then
|
|
warning_msg "profile.yaml not found - skipping auto-registration"
|
|
return
|
|
fi
|
|
|
|
local entries=(
|
|
"extenders/agent_nonameax/config.yaml"
|
|
"extenders/listener_nonameax_http/config.yaml"
|
|
"extenders/listener_nonameax_smb/config.yaml"
|
|
"extenders/service_nax_store/config.yaml"
|
|
)
|
|
local changed=false
|
|
|
|
for entry in "${entries[@]}"; do
|
|
if ! grep -qF "$entry" "$yaml"; then
|
|
sed -i "/^ extenders:/a\\ - \"$entry\"" "$yaml"
|
|
info_msg "Registered $entry in profile.yaml"
|
|
changed=true
|
|
fi
|
|
done
|
|
|
|
if [ "$changed" = false ]; then
|
|
info_msg "NaX extenders already registered in profile.yaml"
|
|
fi
|
|
}
|
|
|
|
## ========= [ summary ] =========
|
|
|
|
print_summary() {
|
|
echo ""
|
|
info_msg "Done!"
|
|
echo "================================================================"
|
|
echo " Action: $ACTION"
|
|
echo " NaX Source: $NAX_ROOT"
|
|
echo " Server: $SERVER_DIR"
|
|
echo " GOEXPERIMENT: ${GOEXPERIMENT:-n/a}"
|
|
echo " Go: ${GO_BIN:-n/a}"
|
|
echo ""
|
|
echo " Deployed extenders:"
|
|
[ -f "$EXTENDERS_DIR/agent_nonameax/agent_nonameax.so" ] && echo " - agent_nonameax"
|
|
[ -f "$EXTENDERS_DIR/listener_nonameax_http/listener_nonameax_http.so" ] && echo " - listener_nonameax_http"
|
|
[ -f "$EXTENDERS_DIR/listener_nonameax_smb/listener_nonameax_smb.so" ] && echo " - listener_nonameax_smb"
|
|
[ -f "$EXTENDERS_DIR/service_nax_store/nax_store.so" ] && echo " - service_nax_store"
|
|
echo ""
|
|
echo " Restart adaptixserver to load the new extenders."
|
|
echo "================================================================"
|
|
}
|
|
|
|
## ========= [ main dispatch ] =========
|
|
|
|
case $ACTION in
|
|
all)
|
|
check_prereqs
|
|
detect_goexperiment
|
|
step_msg "Full install: all 4 plugins"
|
|
build_deploy_all
|
|
add_to_profile
|
|
print_summary
|
|
;;
|
|
plugins)
|
|
find_go
|
|
detect_goexperiment
|
|
step_msg "Building all 4 plugins (skipping prereq check)"
|
|
build_deploy_all
|
|
add_to_profile
|
|
print_summary
|
|
;;
|
|
agent)
|
|
find_go
|
|
detect_goexperiment
|
|
build_deploy_agent
|
|
add_to_profile
|
|
print_summary
|
|
;;
|
|
listener-http)
|
|
find_go
|
|
detect_goexperiment
|
|
build_deploy_listener_http
|
|
add_to_profile
|
|
print_summary
|
|
;;
|
|
listener-smb)
|
|
find_go
|
|
detect_goexperiment
|
|
build_deploy_listener_smb
|
|
add_to_profile
|
|
print_summary
|
|
;;
|
|
service)
|
|
find_go
|
|
detect_goexperiment
|
|
build_deploy_service
|
|
add_to_profile
|
|
print_summary
|
|
;;
|
|
prereqs)
|
|
check_prereqs
|
|
detect_goexperiment
|
|
;;
|
|
*)
|
|
error_exit "Unknown action: $ACTION\nRun $0 --help for usage."
|
|
;;
|
|
esac
|