phoenixc2/phoenixc2

Command & Control-Framework created for collaboration in python3

phoenixc2's Issues

render payload options using jinja

markdown editor for operations

Markdown editor is already installed in the js files, just needs to be imported and initialize, if a user wants to create or edit the description for his operation.

remove external js files for if their functions aren't used by other templates than the their corresponding template

add creation/editing for credentials

device modal showing infos and possible executable tasks

Modal showing information about the selected device and the actions which can be executed like sending commands, viewing the file system, downloading, executing modules, etc...

Unable to create a stager in Chrome Ubuntu

Description

I'm unsure whether its browser related, using Chrome Version 113.0.5672.92 (Official Build) (64-bit) on an Azure Ubuntu Linux VM but I'm unable to create a stager. It seems to just say a name is required but there is no option to do this in the UX.

Reproduction

Steps to reproduce the behavior:

1. Go to 'Stagers' in menu
2. Click on 'Create a new stager'
3. Select the listener name
4. Then there is no option to select the type of stager or to input the name
5. Error message 'Name is required' occurs when you click create

Expected behavior

Ability to select stager type and name the stager available in the UX.

Screenshots/Output (Optional)

Client Desktop:

• OS: Azure Ubuntu Linux VM
• Browser Chrome Version 113.0.5672.92 (Official Build) (64-bit)
• Version of the Framework 1.01

bypasses page with ability to manage chains or run single bypasses on a payload

Page similar to the modules page where you can view all bypasses but also create chains which act as persistent ways of adding the same bypasses to a payloadd

Operations test missing

Test for listing with fronted & json
Add simulation of creation changing adding users deleting

can't create stager

Can't create a stagers
When I try, "name is required"
But where I can write it???

whats the username and password

upon executing it gives a key and says it created a super user
i dont know whats the user name and password

working image upload preview for operations

Basically the same functionality as for users profile picture preview just needs to be ported to the operations page

edit for stagers

Stager edit function needs to be updated to the new attributes and payload options of the stager model, to fill into the edit form.

add frontend submodule as plugin from the phoenix-frontend repo

user editing in the frontend

Ability to edit users, like their name, password and profile picture

implement function to switch payload and show its options in the creation modal

Function which takes the value from the payload select input, and renders the corresponding form with the options of the payload into the creation modal and edit modal, where the payload is already defined.

"Name is required" when trying to create stager

Description

Cant create new stager because there is no name input.

Reproduction

Steps to reproduce the behavior:

1. Go to 'Stagers'
2. Click on 'Create a new stager'
3. Click on 'Create'
4. See error

Expected behavior

Option to enter a name

Screenshots/Output (Optional)

Fix XSS Vulnerability in almost all pages

The frontend is not defended against XSS.
Possible solutions:

• Escape all input
• Escape all output
• Add security headers