darkr4y/geacon

Practice Go programming and implement CobaltStrike's Beacon in Go

geacon's Issues

cannot find package "geacon/cmd/config" in any of

cmd\main.go:6:2: cannot find package "geacon/cmd/config" in any of:
D:\Program Files\Go\src\geacon\cmd\config (from $GOROOT)
C:\Users\shley\go\src\geacon\cmd\config (from $GOPATH)
cmd\main.go:7:2: cannot find package "geacon/cmd/crypt" in any of:
D:\Program Files\Go\src\geacon\cmd\crypt (from $GOROOT)
C:\Users\shley\go\src\geacon\cmd\crypt (from $GOPATH)
cmd\main.go:8:2: cannot find package "geacon/cmd/packet" in any of:
D:\Program Files\Go\src\geacon\cmd\packet (from $GOROOT)
C:\Users\shley\go\src\geacon\cmd\packet (from $GOPATH)
cmd\main.go:9:2: cannot find package "geacon/cmd/util" in any of:
D:\Program Files\Go\src\geacon\cmd\util (from $GOROOT)
C:\Users\shley\go\src\geacon\cmd\util (from $GOPATH)

Refeneces for implementing more fuctions.

Where are these references can be found if more functions are intended to be implementing, such as the command "Net view" ?
That is also, how can the consts defined below be extended?
const (
CMD_TYPE_SLEEP = 4
CMD_TYPE_SHELL = 78
CMD_TYPE_UPLOAD_START = 10
CMD_TYPE_UPLOAD_LOOP = 67
CMD_TYPE_DOWNLOAD = 11
CMD_TYPE_EXIT = 3
CMD_TYPE_CD = 5
CMD_TYPE_PWD = 39
CMD_TYPE_FILE_BROWSE = 53
)

panic: crypto/rsa: message too long for RSA public key size

when run compile geacon file,i get the error.
cs4.0, centos7

Public usage

https://blog.netlab.360.com/blackrota-an-obfuscated-backdoor-written-in-go-en/

How to compile on Linux?

Hello can u provide some instructions how to compile BeaconTool.jar from sources?

-[~/Desktop/Github/geacon]
└─$ mvn compile
Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 0.043 s
[INFO] Finished at: 2023-01-26T01:12:04-07:00
[INFO] ------------------------------------------------------------------------
[ERROR] The goal you specified requires a project to execute but there is no POM in this directory (/home/host/Desktop/Github/geacon). Please verify you invoked Maven from the correct directory. -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MissingProjectException

Keys are generated with with insufficient entropy

RandomInt seeds prng with insufficient entropy at each invocation

func RandomInt(min, max int) int {
	rand.Seed(time.Now().UnixNano())
	return min + rand.Intn(max-min)
}

RandomAESKey uses the non-cryptoprahically random prng to generate keys:

func RandomAESKey() {
        config.GlobalKey = make([]byte,16)
        _, err := rand.Read(config.GlobalKey[:])
        if err != nil {
                panic(err)
        }
}

If RandomInt has been called prior to RandomAESKey, the prng will be seeded with the unix time of that invocation. However, if it has not been called prior, it will generate the same bytes every time:

Package rand implements pseudo-random number generators.

Random numbers are generated by a Source. Top-level functions, such as Float64 and Int, use a default shared Source that produces a deterministic sequence of values each time a program is run. Use the Seed function to initialize the default Source if different behavior is required for each run. The default Source is safe for concurrent use by multiple goroutines, but Sources created by NewSource are not.

Mathematical interval notation such as [0, n) is used throughout the documentation for this package.

For random numbers suitable for security-sensitive work, see the crypto/rand package.

HTTPS beacon error

If it is https beacon, httpRequest.Post and httpRequest.Post will report an error indicating that the SSL certificate is invalid. But this problem has been solved, just add an init() function to http.go and set "httpRequest.EnableInsecureTLS(true)"