Skip to content

Commit

Permalink
Verion 0.3.0 (Dwarven Blacksmith) released
Browse files Browse the repository at this point in the history
This commit changes default settings and versioning, for a more
suitable configuration.
  • Loading branch information
Ziconius committed Jun 26, 2019
1 parent e3d0661 commit 2be707d
Show file tree
Hide file tree
Showing 6 changed files with 38 additions and 34 deletions.
2 changes: 1 addition & 1 deletion FudgeC2/Controller.py
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ def start_controller(listener_management):
# -- functionality. Passing in the user "admin" which as a hardcoded value.
# --
# -- Note: If 'admin' if not a existing admin account this will fail.
LM.create_listener("hardcoded http listener", "http", 5000, True)
LM.create_listener("hardcoded http listener", "http", 5000, False)
LM.create_listener("hardcoded https listener", "https", 8080, False) # This requires TLS certs before starting.
# LM.create_listener("hardcoded https listener 2", "http",1234, True)

Expand Down
1 change: 0 additions & 1 deletion FudgeC2/Implant/ImplantGenerator.py
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,6 @@ class ImplantGenerator:
$kni = "=="
}
return $kni
}
'''

Expand Down
2 changes: 1 addition & 1 deletion FudgeC2/ServerApp/templates/auth/LoginPage.html
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ <h2>FudgeC2</h2>
<button type="submit" class="btn btn-primary" id="btn2">Login</button>
{% if error %} <div class="text-danger font-weight-bold"><br><p>{{ error }}</p></div>{% endif %}
</form>
<div class="text-muted mt-4 "><br><p>Version 0.3 (Dwarven Blacksmith)</p></div>
<div class="text-muted mt-4 "><br><p>Version 0.3.0 (Dwarven Blacksmith)</p></div>
</div>
</div></div>
</body>
Expand Down
4 changes: 2 additions & 2 deletions FudgeC2/Storage/settings.py
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
class Settings:
# If the database does not exist it will be created in Storage/<name>.sql
database_name = "____fudge.sql"
database_name = "fudge_c2.sql"
# The port which FudgeC2 will run on. This will remove the port from available listener ports.
server_app_port = 5001
# For Flask implemented HTTPS set value to 'adhoc'. For HTTP set value to None
server_app_ssl = None # 'adhoc'
# This should be set to False for any non-development/testing deployments.
server_app_debug = True
server_app_debug = False
# Cert & key file names used for TLS connections. These should be PEM formatted.
# Files will be stored in: '<install dir>/FudgeC2/Storage'.
tls_listener_cert = "server.crt"
Expand Down
61 changes: 33 additions & 28 deletions release.md
Original file line number Diff line number Diff line change
@@ -1,35 +1,18 @@
## Active Development
Below is an high-level overview of the on-going development to increase functionality, and reliability of Fudge. This is broken down into release cycles, which are focused around core functionality changes.


---
Release 0.3 _(Dwarven Blacksmith)_
Release cross-protocol implant communications using HTTP/HTTPS
**Release 0.4 _(Tauren Herbalist)_**

C2 Server:
- [x] Capture and log returning protocol
- [x] Add certificate/key path and name into options
- [x] Improve error checking + logging

Web App:
- [x] Allow multiple protocols + port to be selected
- [ ] Provide feedback if listener channel is in use, or not running when creating an implant

Implant
- [x] Implement random protocol selection for callback
- [x] Ensure C2 certificates are present
- [x] Implement function/variable name randomisation in implant

---
Release 0.4 _(Tauren Herbalist)_
Review how data is captured from listeners and web app
Review how data is captured from listeners and webapp
- [ ] Improve logging across web application
- [ ] Add user action logs
- [ ] Review Database.py and create common format for readability and maintainability
- [ ] Add check to look for latest version of FudgeC2 - Notify user of updates.

---
Release 0.5 _(Goblin Sapper)_
**Release 0.5 _(Goblin Sapper)_**

Create further obfuscation and jinja templatework
C2 Server
- [ ] Add function name randomisation for all functions
Expand All @@ -39,7 +22,8 @@ Create further obfuscation and jinja templatework
- [ ] Add text/comments for unobfuscated implant

---
Release 0.6 _(Worgen Shaman)_
**Release 0.6 _(Worgen Shaman)_**

Review and improve all database content & create export functionality
- [ ] Define what data should be exported and sent to clients
- [ ] Build suitable encryption
Expand All @@ -52,31 +36,54 @@ Web App


---
Release 7 _(Undead Alchemist)_
**Release 0.7 _(Undead Alchemist)_**

Create export viewer
- [ ] _Actions undefined at this stage_

---
Release 0.8 _(Unnamed)_
**Release 0.8 _(Unnamed)_**

Create DNS listener
- [ ] _Actions undefined at this stage_

---
Release 0.9 _(Unnamed)_
**Release 0.9 _(Unnamed)_**

Further implement builtin keywords implants
- [ ] _Actions undefined at this stage_

---
Release 1.0 _(Unnamed)_
**Release 1.0 _(Unnamed)_**

Review and improve web application performance and output
- [ ] _Actions undefined at this stage_
- [ ] Provide feedback if listener channel is in use, or not running when creating an implant



---
## Released Versions
Below is a list of all versions which are now tagged with release, and can be found:

---
Release 0.3 _(Dwarven Blacksmith)_
Release cross-protocol implant communications using HTTP/HTTPS

C2 Server:
- [x] Capture and log returning protocol
- [x] Add certificate/key path and name into options
- [x] Improve error checking + logging

Web App:
- [x] Allow multiple protocols + port to be selected

Implant
- [x] Implement random protocol selection for callback
- [x] Ensure C2 certificates are present
- [x] Implement function/variable name randomisation in implant


---
Release 0.2 _(Human Grunt)_ **Released**
#### Implant Manager Web App
Expand All @@ -97,8 +104,6 @@ Release 0.2 _(Human Grunt)_ **Released**
- [x] Deploy HTTPS listener
- [x] Allow C2 to run on untrusted cert. (Deploying own certs instead - untrusted cannot be used.)



##### Controller
- [x] Check for `fudge.db` in the working dir, if not configure new setup.
- [x] Code refactor Controller to boot server & listener
Expand Down
2 changes: 1 addition & 1 deletion version.txt
Original file line number Diff line number Diff line change
@@ -1 +1 @@
0.2.1
0.3.0

0 comments on commit 2be707d

Please sign in to comment.