f14ae7fc75
refactor SMB beacon to static pipe name with persistent handles
...
- Remove random pipe name suffix (_XXXX) — pipe name is now static
from listener config, identity is via UUID in protocol
- Refactor SmbSend to persistent handle model: pipe created once,
stays open for session lifetime with TasksRead flag alternating
between read (Call 1) and write (Call 2) phases
- Refactor Pivot::Exchange to use stored child handle directly
instead of closing and reconnecting via CreateFileA each cycle
- Make pipename optional in link command — auto-resolved from
SMB listener config (SmbPipeName set during Generate)
- PIPE_UNLIMITED_INSTANCES handles multiple beacons on same host
- Error recovery: disconnect + recreate pipe on failure
2026-04-05 16:22:03 +05:30
e6aadb4c21
add pipe name to agent info display and clean up all debug prints
2026-04-05 16:22:03 +05:30
4e99a5a3ea
fix P2P pipe collision: append random suffix to pipe name per instance
2026-04-05 16:22:03 +05:30
f02d029b38
generate unique runtime UUID for SMB beacons to support same-binary reuse
2026-04-05 16:22:03 +05:30
6289ae8e1e
fix SMB exit hanging on pipe wait and ensure link command visibility
2026-04-05 16:22:03 +05:30
74ef6207f2
add SMB-to-SMB pivot chaining (P2P beacon relay)
2026-04-05 16:22:03 +05:30
3e722e30d5
add SMB named-pipe listener and pivot support (link/unlink)
...
Author: pain05
2026-04-05 16:22:03 +05:30
0ef2c17b62
fix: fork pipe name configuration not working
...
- Add cmd_config_forkpipe to config subcommands in ax_config.axs
- Add KH_FORK_PIPE_NAME to Makefile DEFS for compile-time configuration
- Fix string format in pl_agent.go (remove incorrect L prefix)
The ForkPipe field is CHAR* (narrow string), not WCHAR*.
This allows users to set custom fork pipe names via UI or runtime config.
2026-04-05 16:22:03 +05:30
d19c704ad8
add jmp gadget to cfg exception and remove async arg in bof
2026-03-16 14:27:54 -03:00
7e8ab73d82
fix CFG and exit; pass the syscall and bypass to postexsc; update jitter and sleep in UI
2026-03-13 14:57:10 -03:00
289e5c0676
sleep and jitter UI update
2026-03-10 14:02:26 -03:00
77e67abd6d
v0.2
2026-02-18 11:39:38 -03:00
d4f0130e81
Merge branch 'features' into Ax-functions-support
2026-02-16 09:20:18 -03:00
a3503404b3
closing task for after postex_poll
2026-02-12 15:06:59 -03:00
133d3390ca
.
2026-02-12 06:47:29 -03:00
3e287544d6
.
2026-02-12 06:44:13 -03:00
ada68b9dd8
Added functionality for support BOFs Ax function
2026-02-05 02:09:03 +02:00
0d48990d5e
fix some issues in token, fix socks heap leak, and fix config command and beaconinfo
2026-02-04 01:12:13 -03:00
1ffe10c391
fix mem leak and corrupt fs pwd
2026-02-03 23:43:35 -03:00
5451d8c4e9
any fix, new modules in src_modules etc
2026-02-03 13:58:37 -03:00
076ab032a7
remove thrash code
2026-02-01 06:32:22 -03:00
f7c33228cb
updated info in doc, added another infos to info command
2026-02-01 06:16:23 -03:00
87d1f0143e
fix cfg, added hvci, testsigned, dse
2026-02-01 06:00:08 -03:00
a3c97ce689
fix base64url format
2026-01-30 01:33:42 -03:00
9f2f4635e7
features updates
2026-01-29 23:28:03 -03:00
c21c398fb5
added new beacon apis
2026-01-27 23:03:30 -08:00
0f45328c3d
removed not used codes
2026-01-27 23:03:04 -08:00
a0489bed5c
fixed to get ipaddress
2026-01-27 23:02:33 -08:00
aee596dd1f
include folder refact
2026-01-26 02:44:06 -08:00
ecd716ee22
fixed BOF API Proxy build
2026-01-26 02:43:06 -08:00
5b93ddb679
kp
2026-01-25 18:42:04 -03:00
f8e72dc2d8
added config bof api proxy to config command and increased window UI build length
2026-01-24 14:58:54 -03:00
3814d41a1c
updated checkin for send more informations like guardrails, cfg status and worktime
2026-01-24 14:56:16 -03:00
96f5d0d83d
fixed Timer obf with access violation because non return keywork
2026-01-24 14:54:37 -03:00
c3f23f2468
removed create process and library random retrieve
2026-01-24 14:48:36 -03:00
f053826ed8
added BofApiProxy for config command
2026-01-24 14:22:36 -03:00
edac386f9e
remove inject, postex and anothers unused tasks
2026-01-24 14:21:09 -03:00
e093648621
fix memory leak and added object free
2026-01-23 17:42:55 -03:00
4137dcca20
http malleable: server(header/cookie/body) client(parameter/header/cookie/body) base64 encode/decode
2026-01-20 05:54:27 -03:00
56ee1034a4
removed thrash socket code
2025-12-19 09:54:16 -03:00
76a534ae44
refact download/tunnels
2025-12-19 09:52:48 -03:00
856c7d39ba
refact download/tunnels
2025-12-19 09:52:07 -03:00
2822083a64
save bckp
2025-12-15 07:20:17 -03:00
bd921dc0bb
fix make file and setup kharon
2025-12-13 06:20:24 -03:00
ea90679ac7
refact and base64 unified fnc
2025-12-13 05:26:43 -03:00
1de1b91260
os version + internal ip
2025-12-13 05:25:45 -03:00
46fb995b38
added sub command id field into jobs and pwsh in ps command
2025-12-13 05:25:17 -03:00
86a4beb52a
powershell + script command
2025-12-13 05:24:32 -03:00
8f7fc587a6
injection stomp to enum config
2025-12-09 12:32:13 -03:00
01f85da86d
added stomp to config
2025-12-09 12:31:47 -03:00
jaytiwari05