update

Author: Sevenqin

README.md

@@ -0,0 +1,28 @@
+This is a simple AWD Framework. You should rewrite the attack method in Payload class by yourself.
+In your payload, you should upload a shell to a specified host,and return the shell path and password. That's all
+
+# TO DO
+1. ~~hot load when modified (finished)~~
+2. ~~zoo.php to replace the simple.php => templates/zoo.php.temp~~
+3. add unittest
+4. trash flow, how to get the path automatic or       => modules/sitemap
+5. ~~add keyboard event like ctrl+c to stop the current command execution (finished)~~
+6. add wget or curl method to download shell from the ccserver, if "echo | base64 -d >> shell.php" method can not be used.
+7. ~~make this framework compatitable to the POCSuite modules(Give UP)~~
+8. make good use of all kinds of templates, not limited to zoo.php.temp(in modules/auxiliary/*)
+9. add colorful cmd output (finished)~
+10. add autocomplete integration  (finished)~
+
+
+# Usage
+```shell
+pip install -r requirements.txt
+
+python kittyrun.py
+```
+To maintain your shell, you should open a new window,and deep into modules/monitor and run `python zookeeper.py`
+
+if you want to send flag to the awd platform,you should rewite the flag function which is in modules/flag/flag.py
+
+This is framework is based on requests multitheads, which is blocked.
+Considering to refactor it,with aiohttp asyncio, welcome to send issue,requirements. sevenqsh@gmail.com

__init__.py

@@ -0,0 +1,60 @@
+{
+    "shellLocations": [
+        "/admin/echo_config.php",
+        "/admin/echo_config1.php",
+        "/admin/echo_config2.php",
+        "/admin/echo_config3.php"
+    ],
+    "webRoot": "/var/www/html",
+    "flagCommand": "curl http://192.168.100.222/get-flag",
+    "phpFunction": "system",
+    "bindAddress": "192.168.3.1",
+    "bindPort": 4444,
+    "salt": "yangge^_^",
+    "targets": [
+        "192.168.129.70",
+        "192.168.129.72",
+        "192.168.129.74",
+        "192.168.129.76",
+        "192.168.129.78",
+        "192.168.129.80",
+        "192.168.129.82",
+        "192.168.129.84",
+        "192.168.129.86",
+        "192.168.129.88",
+        "192.168.129.90",
+        "192.168.129.92",
+        "192.168.129.94",
+        "192.168.129.96",
+        "192.168.129.98",
+        "192.168.129.100",
+        "192.168.129.102",
+        "192.168.129.104",
+        "192.168.129.106",
+        "192.168.129.108",
+        "192.168.129.110",
+        "192.168.129.112",
+        "192.168.129.114",
+        "192.168.129.116",
+        "192.168.129.118",
+        "192.168.129.120",
+        "192.168.129.122",
+        "192.168.129.124",
+        "192.168.129.126",
+        "192.168.129.128",
+        "192.168.129.130",
+        "192.168.129.132",
+        "192.168.129.134",
+        "192.168.129.136"
+    ],
+    "shellType": "php",
+    "ccServer": {
+        "port": 20000
+    },
+    "headers": {
+        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X Metar 1.0"
+    },
+    "timeout": 15,
+    "poolSize": 32,
+    "defaultHorse": "zoo.php"
+}

configuration.json

@@ -0,0 +1,81 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+
+import os
+import json
+import logging
+import requests
+import threadpool
+
+# from modules.encrypt.rsatool import rsatool
+from modules.sitemap.mapper import loadmap
+
+class Configuration(object):
+    #path: the location of the config file
+    def __init__(self, path='configuration.json'):
+        self.load(path)
+
+    # save current configuration to json file as default
+    def save(self):
+        tmpConfig = {}
+        for k in self._config:
+            tmpConfig[k] = getattr(self,k)
+        if os.access(self._path, os.W_OK):
+            try:
+                with open(self._path, 'w') as conf:
+                    conf.write(json.dumps(tmpConfig, indent=4))
+                    self._config = tmpConfig
+                    logging.debug('Configuration Saved')
+            except:
+                logging.error('Saving Configuration Failed')
+        else:
+            logging.error('Configuration File occupied')
+
+    def getConfig(self):
+        return self._config
+
+    def addTarget(self, target):
+        if not target in getattr(self,'targets'):
+            getattr(self,'targets').append(target)
+    
+    def removeTarget(self, target):
+        while target in getattr(self,'targets'):
+            getattr(self,'targets').remove(target)
+
+    def addShell(self, uri):
+        while not uri in getattr(self,'shellLocations'):
+            getattr(self,'shellLocations').append(uri)
+    
+    def removeShell(self, uri):
+        while uri in getattr(self,'shellLocations'):
+            getattr(self,'shellLocations').remove(uri)
+
+    def load(self, path):
+        self._path = os.path.join(os.path.split(os.path.realpath(__file__))[0],path)
+        if os.access(self._path, os.R_OK):
+            with open(self._path,'r') as conf:
+                try:
+                    config = json.loads(conf.read())
+                    self._config = config
+                    for k,v in config.items():
+                        setattr(self,k,v)
+                    pool = threadpool.ThreadPool(getattr(self,'poolSize',16))
+                    setattr(self, 'pool', pool)
+                    setattr(self, 'sitemap', loadmap())
+                    logging.debug('Configuration file loaded')
+                except:
+                    logging.error('Configuration file format error: ' + self._path)
+        else:
+            logging.error('Load configuration error: ' + self._path)
+
+    def reload(self):
+        self.load(self._path)
+        self.pool = threadpool.ThreadPool(getattr(self,'poolSize',16))
+        self.sitemap = loadmap()
+
+
+
+configuration = Configuration()
+
+if __name__ == '__main__':
+    print(configuration.sitemap)