cassanof/pantegana

A nearly undetectable reverse HTTPS Botnet+RAT C2 Handler and Client written in Go

Pantegana - A Botnet RAT Made With Go

FOR EDUCATIONAL AND RESEARCH USE ONLY

Usage of Pantegana for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program.

   ___            _                               
  / _ \__ _ _ __ | |_ ___  __ _  __ _ _ __   __ _ 
 / /_)/ _` | '_ \| __/ _ \/ _` |/ _` | '_ \ / _` |
/ ___/ (_| | | | | ||  __/ (_| | (_| | | | | (_| |
\/    \__,_|_| |_|\__\___|\__, |\__,_|_| |_|\__,_|
                          |___/                   

Features:

• Pretty and clean interactive shell (using grumble)
• Cross-platform payload client (Windows, Linux, OSX)
• HTTPS covert channel for communications
• Undetected by AVs (behavioral AVs might detect it if its not running on port 443)
• Direct command execution (not using bash or sh)
• Multiple sessions handling
• File Upload/Download
• System fingerprinting
• Gracefully closing sessions server-side on client-side crash

TODO:

• Full Windows and OSX integration (currently it's partial)
• bash/cmd/psh shell dropping
• TOR routing?
• Implement Twitter-Transfer-Protocol (ttp)

Building:

Requires Go 1.16 and up
To build the program you will also need openssl.

By default the client is set to dial 127.0.0.1:1337.
To change that, you can edit the config object in to your liking (./main/client/main.go)

When running make you will need to specify any external IP or domain to include in the SSL certificate.
This ip would be the public ip of the C2 server where the pantegana server binary would run.
If you don't know the public ip of your server: run curl ip.me, and you will be prompted with the ip.
This is done to prevent people stealing your binary and using it with malicious intent.
Example: make IP=1.1.1.1 DOMAIN=example.com.
By default the Makefile sets IP=127.0.0.1 and DOMAIN=localhost. If you want to keep that you can just omit the variables in the make command.
Example: make
You will find your client and server builds in the out directory.

Check Makefile for additional build/running options

Obfuscation of the client

There is a build option that allows the client to be obfuscated to reduce detection.
In order to do that, you will need to install garble with: go install mvdan.cc/garble@latest
and run the make build-client-nix-garble option.

pantegana's Issues

no build EXE

mkdir -p cert; \
        openssl genrsa -out ./cert/ca.key 2048; \
        openssl req -new -x509 -days 3650 -key ./cert/ca.key -subj "/C=US/ST=Hawaii/L=The Sewers/O=Pantegana, Inc./CN=Pantegana Root CA" -out ./cert/ca.crt; \
        openssl req -newkey rsa:2048 -nodes -keyout ./cert/server.key -subj "/C=US/ST=Hawaii/L=The Sewers/O=Pantegana, Inc./CN=h4ck3r.shop" -out ./cert/server.csr; \
        openssl x509 -req -extfile <(printf "subjectAltName=DNS:h4ck3r.com,IP:112.69.2.8") -days 3650 -in ./cert/server.csr -CA ./cert/ca.crt -CAkey ./cert/ca.key -CAcreateserial -out ./cert/server.crt; 
Generating RSA private key, 2048 bit long modulus (2 primes)
................+++++
...................................................+++++
e is 65537 (0x010001)
Generating a RSA private key
.............+++++
..................................................+++++
writing new private key to './cert/server.key'
-----
Signature ok
subject=C = US, ST = Hawaii, L = The Sewers, O = "Pantegana, Inc.", CN = h4ck3r.com
Getting CA Private Key
mkdir -p out;
cd ./client/; \
        go generate; \
        sed -i "/^package main/c\package client" cert.go; \
        cd ../main/client/; \
        CGO_ENABLED=0 GOARCH=amd64 go build -ldflags="-s -w" -o client.bin; \
        mv client.bin /home/kali/SOFT/pantegana/out/client.bin;
go: downloading github.com/emersion/go-autostart v0.0.0-20210130080809-00ed301c8e9a
mkdir -p out;
cd ./client/; \
        go generate; \
        sed -i "/^package main/c\package client" cert.go; \
        cd ../main/client/; \
        GOOS=windows GOARCH=amd64 go build -o client.exe; \
        mv client.exe /home/kali/SOFT/pantegana/out/client.exe;
# github.com/elleven11/pantegana/client
../../client/persistence.go:26:22: c.Persistence.Disable undefined (type *autostart.App has no field or method Disable)
../../client/persistence.go:37:18: c.Persistence.IsEnabled undefined (type *autostart.App has no field or method IsEnabled)
../../client/persistence.go:42:23: c.Persistence.Enable undefined (type *autostart.App has no field or method Enable)
note: module requires Go 1.16
mv: cannot stat 'client.exe': No such file or directory
make: *** [Makefile:51: build-client-win] Error 1

Contact

Hey, I tried to reach you via twitter to no response. Do you have XMPP/Jabber? I'd love to talk about hiring you if you're interested.