Download/Upload Functions
havok87 opened this issue · comments
Describe the bug
Unable to download a remote file from attacker system onto device.
Unable to upload a local file to remote attacker system.
To Reproduce Download Issue
Steps to reproduce the behavior:
- Establish C2 connection
- Browse to /private/var/tmp on the iOS device
- issue command 'download /path/to/remote/file /private/var/tmp'
- See error 'downloadIssue1.png' and 'downloadIssue2.png'
![downloadIssue1](https://private-user-images.githubusercontent.com/1557990/334469455-cfabd8f0-3ec4-438a-8a0f-03a3912ea507.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Rz15voKUQdRfgI-zRwPWBrs2GwxS2v-AUv-Rl4Ic8Hs)
![downloadIssue2](https://private-user-images.githubusercontent.com/1557990/334469457-bc69a0a5-0321-4cf6-a6fd-c58cd7c1c9d0.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.y9dLEjjeIcBv2NYXsshYpdUVRlXCVqdrZbLi7MfmP7U)
To Reproduce Upload Issue
Steps to reproduce the behavior:
- Establish C2 connection
- Browse to /private/var/tmp on the iOS device
- issue command 'upload /private/var/tmp/journeys/ /Users/dre/Tools/SeaShell/'
- See error 'uploadIssue1.png' and 'uploadIssue2.png'
![uploadIssue1](https://private-user-images.githubusercontent.com/1557990/334469451-f49658e2-d501-4adf-beb2-fc032d6b09d9.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.QqQKgcao38CWPI-KCdbXiS51JBjEQClbFhjdJu_uVD0)
![uploadIssue2](https://private-user-images.githubusercontent.com/1557990/334469454-5589350b-7f9c-472d-8d4f-472ee3054501.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MjIyOTQ4MjcsIm5iZiI6MTcyMjI5NDUyNywicGF0aCI6Ii8xNTU3OTkwLzMzNDQ2OTQ1NC01NTg5MzUwYi03ZjljLTQ3MmQtOGQ0Zi00NzJlZTMwNTQ1MDEucG5nP1gtQW16LUFsZ29yaXRobT1BV1M0LUhNQUMtU0hBMjU2JlgtQW16LUNyZWRlbnRpYWw9QUtJQVZDT0RZTFNBNTNQUUs0WkElMkYyMDI0MDcyOSUyRnVzLWVhc3QtMSUyRnMzJTJGYXdzNF9yZXF1ZXN0JlgtQW16LURhdGU9MjAyNDA3MjlUMjMwODQ3WiZYLUFtei1FeHBpcmVzPTMwMCZYLUFtei1TaWduYXR1cmU9NTVjMDNmM2MwMTg2NDY0YTdjNTc4ZTgyNzJlNGQ5OGI3NmIyZGZkOWZiM2MwNDA0OWVjMTk1MjIyMzU2OTM4OCZYLUFtei1TaWduZWRIZWFkZXJzPWhvc3QmYWN0b3JfaWQ9MCZrZXlfaWQ9MCZyZXBvX2lkPTAifQ.0UbhDmkuqjHbzUU-u0c3Zae0wKEdBL7oIQoJEt7Oll8)
Expected behavior
The specified file on the remote attacker system should be downloaded into directory specified.
The specified file on the local system should be uploaded into directory specified on the remote attacker system.
Screenshots
downloadIssue1.png
downloadIssue2.png
uploadIssue1.png
uploadIssue2.png
Desktop (please complete the following information):
- OS: macOS 14.4.1
- M1 Max
Smartphone (please complete the following information):
- Device: iPhone 13 pro
- OS: iOS 16.6.1
@havok87 You are passing wrong arguments to download
and upload
commands, it should be:
download <remote_file> <local_path>
upload <local_file> <remote_path>
NOTE: remote_file
means file on the device and local_path
is the path on your PC
So, in your situation:
download /private/var/tmp/test /Users/dre/Tools/SeaShell/screencapture