mirror of
https://github.com/MrAle98/sliver
synced 2026-06-08 11:54:46 +00:00
moloch--
109 lines
3.2 KiB
Go
109 lines
3.2 KiB
Go
package jobs
|
|
|
|
/*
|
|
Sliver Implant Framework
|
|
Copyright (C) 2019 Bishop Fox
|
|
|
|
This program is free software: you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation, either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
import (
|
|
"context"
|
|
"crypto/tls"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"time"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
"github.com/bishopfox/sliver/client/console"
|
|
"github.com/bishopfox/sliver/protobuf/clientpb"
|
|
)
|
|
|
|
// HTTPSListenerCmd - Start an HTTPS listener
|
|
func HTTPSListenerCmd(cmd *cobra.Command, con *console.SliverConsoleClient, args []string) {
|
|
domain, _ := cmd.Flags().GetString("domain")
|
|
lhost, _ := cmd.Flags().GetString("lhost")
|
|
lport, _ := cmd.Flags().GetUint32("lport")
|
|
disableOTP, _ := cmd.Flags().GetBool("disable-otp")
|
|
pollTimeout, _ := cmd.Flags().GetString("long-poll-timeout")
|
|
pollJitter, _ := cmd.Flags().GetString("long-poll-jitter")
|
|
website, _ := cmd.Flags().GetString("website")
|
|
persistent, _ := cmd.Flags().GetBool("persistent")
|
|
letsEncrypt, _ := cmd.Flags().GetBool("lets-encrypt")
|
|
disableRandomize, _ := cmd.Flags().GetBool("disable-randomized-jarm")
|
|
|
|
longPollTimeout, err := time.ParseDuration(pollTimeout)
|
|
if err != nil {
|
|
con.PrintErrorf("%s\n", err)
|
|
return
|
|
}
|
|
longPollJitter, err := time.ParseDuration(pollJitter)
|
|
if err != nil {
|
|
con.PrintErrorf("%s\n", err)
|
|
return
|
|
}
|
|
|
|
cert, key, err := getLocalCertificatePair(cmd)
|
|
if err != nil {
|
|
con.Println()
|
|
con.PrintErrorf("Failed to load local certificate %s\n", err)
|
|
return
|
|
}
|
|
|
|
con.PrintInfof("Starting HTTPS %s:%d listener ...\n", domain, lport)
|
|
https, err := con.Rpc.StartHTTPSListener(context.Background(), &clientpb.HTTPListenerReq{
|
|
Domain: domain,
|
|
Website: website,
|
|
Host: lhost,
|
|
Port: lport,
|
|
Secure: true,
|
|
Cert: cert,
|
|
Key: key,
|
|
ACME: letsEncrypt,
|
|
Persistent: persistent,
|
|
EnforceOTP: !disableOTP,
|
|
LongPollTimeout: int64(longPollTimeout),
|
|
LongPollJitter: int64(longPollJitter),
|
|
RandomizeJARM: !disableRandomize,
|
|
})
|
|
con.Println()
|
|
if err != nil {
|
|
con.PrintErrorf("%s\n", err)
|
|
} else {
|
|
con.PrintInfof("Successfully started job #%d\n", https.JobID)
|
|
}
|
|
}
|
|
|
|
func getLocalCertificatePair(cmd *cobra.Command) ([]byte, []byte, error) {
|
|
certPath, _ := cmd.Flags().GetString("cert")
|
|
keyPath, _ := cmd.Flags().GetString("key")
|
|
if certPath == "" && keyPath == "" {
|
|
return nil, nil, nil
|
|
}
|
|
cert, err := ioutil.ReadFile(certPath)
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
key, err := ioutil.ReadFile(keyPath)
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
|
|
if _, err := tls.X509KeyPair(cert, key); err != nil {
|
|
return nil, nil, fmt.Errorf("- could not parse cert or key (encrypted keys are not supported): %s", err.Error())
|
|
}
|
|
return cert, key, nil
|
|
}
|