iinsertNameHere / Pilotica

A Postexploitation HTTP Command and Control Framework

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Agent Recommendations

ldarkpiratel opened this issue · comments

Hi,

I am also a hobbyist developer. And I would like to be added to this repo to contribute to it if you wouldn't mind. I think the simplicity of the backend as tremendous potential.

First off, for the agent, you should not have a monolithic structure. I think the structs can be set aside for better readability. You should avoid running OS commands directly. They tend to open cmd.exe or powershell (exec.Command actually opens cmd.exe) which is bad OPSEC, I may be able to help with that if you allow me.

Second, we can expand some more and transform the Agent into shellcode using tools like Donut or sRDI. This way we can just do a shellcode loader/injector and go beyond by downloading the shellcode from a server and not have it hardcoded into the loader/injector.

I think I would be of help in the Agent side, don't really understand much of Flask so I'm not gonna touch any of your Python code. Although I would want to add some more stuff like helper scripts and simple handlers.

Again, it's up to you and what you choose to do, I'm just a poor-man's developer lol.

Hey man, i have not been working on this Projekt in a while, witch is why I have not respond as quickly. Your ideas sound great. Please feel free to make some changes to the Projekt!