utils

Documentation

Index

• Variables
• func AutoDeploy()
• func AutoDeploymentCLI()
• func CheckInitialPermissions() bool
• func ClearCloudEnvironment()
• func ClearDatabases()
• func CreateAWScredentialsFile(aws_access_key_id, aws_secret_access_key *string)
• func CreateDirectory(dirName string)
• func GetScanStatus(print bool) bool
• func Launcher(requests []ScanRequest)
• func LoadDynamoDBService() *dynamodb.Client
• func LoadEnv()
• func Min(a, b int) int
• func SendMessageSQS(svc *sqs.Client, payload string)
• func ServicesAvailability(print bool) bool
• func StopScan()
• func WriteCobaltStrikeBeacons(fileName string, beacons []CobaltStrikeBeaconStruct)
• func WriteCobaltStrikeBeaconsCSV(fileName string, beacons []CobaltStrikeBeaconStruct)
• func WriteCobaltStrikeTargets(fileName string, targets []CobaltStrikeStruct)
• func WriteCobaltStrikeTargetsCSV(fileName string, targets []CobaltStrikeStruct)
• func WriteResponses(fileName string, responses []ScanResponse)
• type CobaltStrikeBeaconStruct
  • func ScanDynamoForBeacons() (items []CobaltStrikeBeaconStruct)
• type CobaltStrikeStruct
  • func ScanDynamoForTargets() (items []CobaltStrikeStruct)
• type ScanRequest
  • func BatchTargets(filename string) (requests []ScanRequest)
• type ScanResponse
  • func ScanDynamoForResponses() (items []ScanResponse)
• type ScanSettings
• type ScanTargets
  • func LoadTargets(filename string) (targets ScanTargets)

Variables

var BatchSize int = 10

Lambda configurations

var BeaconHeadliner = []string{
	"uri",
	".http-get.uri",
	".http-post.uri",
	".http-get.client",
	".http-post.client",
	".user-agent",
	".watermark",
	".sleeptime",
	".jitter",
	".http-get.verb",
	".http-post.verb",
	".http-get.server.output",
	".post-ex.spawnto_x86",
	".post-ex.spawnto_x64",
	".maxdns",
	"dns_ssl",
	".dns_idle",
	".dns_sleep ",
	".pipename",
	".killdate_year",
	".killdate_month",
	".killdate_day",
	"shouldChunkPosts",
	".cryptoscheme",
	".proxy_type",
	".stage.cleanup",
	"CFGCaution",
	"killdate",
	"text_section",
	"cookieBeacon",
	"publickey",
	".spawto",
	"obfuscate_section",
	"process-inject-start-rwx",
	"process-inject-use-rwx",
	"process-inject-min_alloc",
	"process-inject-transform-x86",
	"process-inject-transform-x64",
	"process-inject-execute",
	"process-inject-allocation-method",
	"process-inject-stub",
	"host_header",
	"funk",
}

var Concurrency = 120

var Cyan = color.New(color.FgCyan).SprintFunc()

var DirName = "results/"

DynamoDB Outout directory

var Green = color.New(color.FgGreen).SprintFunc()

var IAMRoleName string = "pointer"

var LambdaFunction string = "pointer"

Autodeploy configurations

var LambdaMemory int32 = 3009

var LambdaTimeout int32 = 60

var Magenta = color.New(color.FgMagenta).SprintFunc()

var ReadCapacityUnits int64 = 40

var Red = color.New(color.FgRed).SprintFunc()

var SQSQueue string = "pointer"

var TableBeacons string = "Beacons"

var TableResponses string = "Responses"

var TableTargets string = "Targets"

DynamoDB table names

var TargetHeadliner = []string{
	"ip",
	"probability",
	"jarm",
	"certificate",
	"ports",
	"responses",
	"beacons",
}

var White = color.New(color.FgWhite).SprintFunc()

var WriteCapacityUnits int64 = 40

var Yellow = color.New(color.FgYellow).SprintFunc()

Functions

func AutoDeploy

func AutoDeploy()

func AutoDeploymentCLI

func AutoDeploymentCLI()

func CheckInitialPermissions

func CheckInitialPermissions() bool

func ClearCloudEnvironment

func ClearCloudEnvironment()

func ClearDatabases

func ClearDatabases()

func CreateAWScredentialsFile

func CreateAWScredentialsFile(aws_access_key_id, aws_secret_access_key *string)

func CreateDirectory

func CreateDirectory(dirName string)

func GetScanStatus

func GetScanStatus(print bool) bool

func Launcher

func Launcher(requests []ScanRequest)

func LoadDynamoDBService

func LoadDynamoDBService() *dynamodb.Client

func LoadEnv

func LoadEnv()

func Min

func Min(a, b int) int

func SendMessageSQS

func SendMessageSQS(svc *sqs.Client, payload string)

func ServicesAvailability

func ServicesAvailability(print bool) bool

func StopScan

func StopScan()

func WriteCobaltStrikeBeacons

func WriteCobaltStrikeBeacons(fileName string, beacons []CobaltStrikeBeaconStruct)

func WriteCobaltStrikeBeaconsCSV

func WriteCobaltStrikeBeaconsCSV(fileName string, beacons []CobaltStrikeBeaconStruct)

func WriteCobaltStrikeTargets

func WriteCobaltStrikeTargets(fileName string, targets []CobaltStrikeStruct)

func WriteCobaltStrikeTargetsCSV

func WriteCobaltStrikeTargetsCSV(fileName string, targets []CobaltStrikeStruct)

func WriteResponses

func WriteResponses(fileName string, responses []ScanResponse)

Types

type CobaltStrikeBeaconStruct

type CobaltStrikeBeaconStruct struct {
	Uri          string
	BeaconConfig map[string]string
}

func ScanDynamoForBeacons

func ScanDynamoForBeacons() (items []CobaltStrikeBeaconStruct)

type CobaltStrikeStruct

type CobaltStrikeStruct struct {
	Ip          string
	Ports       []string
	Responses   map[string]string
	Jarm        string
	Certificate string
	Beacons     []string
	Probability float32
}

func ScanDynamoForTargets

func ScanDynamoForTargets() (items []CobaltStrikeStruct)

type ScanRequest

type ScanRequest struct {
	PacketId int          `json:"packet_id"`
	Setting  ScanSettings `json:"scan_settings"`
	Targets  ScanTargets  `json:"scan_targets"`
}

func BatchTargets

func BatchTargets(filename string) (requests []ScanRequest)

type ScanResponse

type ScanResponse struct {
	PacketId int    `json:"packet_id"`
	Time     string `json:"time"`
	Ports    int    `json:"ports"`
	Services int    `json:"services"`
	Beacons  int    `json:"beacons"`
}

func ScanDynamoForResponses

func ScanDynamoForResponses() (items []ScanResponse)

type ScanSettings

type ScanSettings struct {
	Ports           []int `json:"ports"`
	HttpBeaconDelay int   `json:"http_beacon_delay"`
	HttpDelay       int   `json:"http_delay"`
	PortDelay       int   `json:"port_delay"`
	Concurrency     int   `json:"concurrency"`
}

type ScanTargets

type ScanTargets struct {
	Ips []string `json:"ips"`
}

func LoadTargets

func LoadTargets(filename string) (targets ScanTargets)