package exploitpack;

import java.awt.Color;

import java.awt.Toolkit;

import java.io.BufferedReader;

import java.io.File;

import java.io.FileNotFoundException;

import java.io.FileReader;

import java.io.IOException;

import java.io.InputStream;

import java.io.InputStreamReader;

import java.io.OutputStream;

import java.nio.file.Paths;

import java.util.ArrayList;

import java.util.List;

import java.util.logging.Level;

import java.util.logging.Logger;

import javax.swing.*;

import javax.swing.tree.DefaultMutableTreeNode;

import javax.swing.tree.DefaultTreeModel;

import org.fife.ui.autocomplete.*;

import org.fife.ui.rsyntaxtextarea.RSyntaxTextArea;

import org.fife.ui.rsyntaxtextarea.SyntaxConstants;

import org.fife.ui.rtextarea.RTextScrollPane;

/**

*

* @author jsacco

*/

public class ClientsideWizard2 extends javax.swing.JFrame {

RSyntaxTextArea textArea = new RSyntaxTextArea(20, 60);

Exploit exploit = new Exploit();

/**

* Creates new form Notepad

*

* @param selected

*/

public ClientsideWizard2(Exploit selected) {

exploit = selected;

initComponents();

int lebar = this.getWidth() / 2;

int tinggi = this.getHeight() / 2;

int x = (Toolkit.getDefaultToolkit().getScreenSize().width / 2) - lebar;

int y = (Toolkit.getDefaultToolkit().getScreenSize().height / 2) - tinggi;

this.setLocation(x, y);

this.setVisible(true);

setDefaultCloseOperation(ClientsideWizard2.DISPOSE_ON_CLOSE);

getContentPane().setBackground(Color.WHITE);

setIconImage(Toolkit.getDefaultToolkit().getImage(getClass().getResource("/exploitpack/resources/bug.png")));

textArea.setSyntaxEditingStyle(SyntaxConstants.SYNTAX_STYLE_PYTHON);

textArea.setCodeFoldingEnabled(true);

jPanel1.add(new RTextScrollPane(textArea));

jLabel4.setText(exploit.getModuleName());

// A CompletionProvider is what knows of all possible completions, and

// analyzes the contents of the text area at the caret position to

// determine what completion choices should be presented. Most instances

// of CompletionProvider (such as DefaultCompletionProvider) are designed

// so that they can be shared among multiple text components.

CompletionProvider provider = createCompletionProvider();

// An AutoCompletion acts as a "middle-man" between a text component

// and a CompletionProvider. It manages any options associated with

// the auto-completion (the popup trigger key, whether to display a

// documentation window along with completion choices, etc.). Unlike

// CompletionProviders, instances of AutoCompletion cannot be shared

// among multiple text components.

AutoCompletion ac = new AutoCompletion(provider);

ac.install(textArea);

pack();

setLocationRelativeTo(null);

if (new File("exploits/rockyou").exists()) {

jLabel1.setIcon(new javax.swing.ImageIcon(getClass().getResource("/exploitpack/resources/uppro.png"))); // NOI18N

}

}

/**

* Create a simple provider that adds some Java-related completions.

*/

private CompletionProvider createCompletionProvider() {

// A DefaultCompletionProvider is the simplest concrete implementation

// of CompletionProvider. This provider has no understanding of

// language semantics. It simply checks the text entered up to the

// caret position for a match against known completions. This is all

// that is needed in the majority of cases.

DefaultCompletionProvider provider = new DefaultCompletionProvider();

// Add completions for all Java keywords. A BasicCompletion is just

// a straightforward word completion.

provider.addCompletion(new BasicCompletion(provider, "abstract"));

provider.addCompletion(new BasicCompletion(provider, "assert"));

provider.addCompletion(new BasicCompletion(provider, "break"));

provider.addCompletion(new BasicCompletion(provider, "case"));

// ... etc ...

provider.addCompletion(new BasicCompletion(provider, "transient"));

provider.addCompletion(new BasicCompletion(provider, "try"));

provider.addCompletion(new BasicCompletion(provider, "void"));

provider.addCompletion(new BasicCompletion(provider, "volatile"));

provider.addCompletion(new BasicCompletion(provider, "while"));

// Add a couple of "shorthand" completions. These completions don't

// require the input text to be the same thing as the replacement text.

provider.addCompletion(new ShorthandCompletion(provider, "sysout",

"System.out.println(", "System.out.println("));

provider.addCompletion(new ShorthandCompletion(provider, "syserr",

"System.err.println(", "System.err.println("));

return provider;

}

/**

* This method is called from within the constructor to initialize the form.

* WARNING: Do NOT modify this code. The content of this method is always

* regenerated by the Form Editor.

*/

@SuppressWarnings("unchecked")

// <editor-fold defaultstate="collapsed" desc="Generated Code">//GEN-BEGIN:initComponents

private void initComponents() {

jTextField3 = new javax.swing.JTextField();

jTextField5 = new javax.swing.JTextField();

jLabel1 = new javax.swing.JLabel();

jSeparator1 = new javax.swing.JSeparator();

jButton1 = new javax.swing.JButton();

jButton2 = new javax.swing.JButton();

jLabel2 = new javax.swing.JLabel();

jPanel1 = new javax.swing.JPanel();

jLabel3 = new javax.swing.JLabel();

jLabel4 = new javax.swing.JLabel();

jScrollPane1 = new javax.swing.JScrollPane();

jTextArea1 = new javax.swing.JTextArea();

jTextField3.setText("jTextField1");

jTextField5.setText("jTextField1");

setDefaultCloseOperation(javax.swing.WindowConstants.EXIT_ON_CLOSE);

setTitle("Exploit Pack - Exploit Wizard");

setResizable(false);

addWindowListener(new java.awt.event.WindowAdapter() {

public void windowOpened(java.awt.event.WindowEvent evt) {

formWindowOpened(evt);

}

});

jLabel1.setIcon(new javax.swing.ImageIcon(getClass().getResource("/exploitpack/resources/up.png"))); // NOI18N

jButton1.setText("Close");

jButton1.addActionListener(new java.awt.event.ActionListener() {

public void actionPerformed(java.awt.event.ActionEvent evt) {

jButton1ActionPerformed(evt);

}

});

jButton2.setText("Execute");

jButton2.addActionListener(new java.awt.event.ActionListener() {

public void actionPerformed(java.awt.event.ActionEvent evt) {

jButton2ActionPerformed(evt);

}

});

jLabel2.setText("Before running your exploit you can do any last minute change here:");

jPanel1.setLayout(new java.awt.BorderLayout());

jLabel3.setText("Exploit selected for execution:");

jLabel4.setFont(new java.awt.Font("Cantarell", 1, 14)); // NOI18N

jLabel4.setText("jLabel4");

jTextArea1.setBackground(java.awt.Color.black);

jTextArea1.setColumns(20);

jTextArea1.setForeground(java.awt.Color.green);

jTextArea1.setRows(5);

jTextArea1.setText("Click on execute to run your exploit..\n");

jScrollPane1.setViewportView(jTextArea1);

javax.swing.GroupLayout layout = new javax.swing.GroupLayout(getContentPane());

getContentPane().setLayout(layout);

layout.setHorizontalGroup(

layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)

.addGroup(layout.createSequentialGroup()

.addContainerGap()

.addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)

.addComponent(jSeparator1)

.addComponent(jScrollPane1)

.addComponent(jPanel1, javax.swing.GroupLayout.DEFAULT_SIZE, javax.swing.GroupLayout.DEFAULT_SIZE, Short.MAX_VALUE)

.addGroup(layout.createSequentialGroup()

.addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)

.addComponent(jLabel2)

.addGroup(layout.createSequentialGroup()

.addComponent(jLabel3)

.addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)

.addComponent(jLabel4)))

.addGap(0, 0, Short.MAX_VALUE))

.addGroup(javax.swing.GroupLayout.Alignment.TRAILING, layout.createSequentialGroup()

.addGap(0, 2, Short.MAX_VALUE)

.addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)

.addComponent(jLabel1, javax.swing.GroupLayout.Alignment.TRAILING)

.addGroup(javax.swing.GroupLayout.Alignment.TRAILING, layout.createSequentialGroup()

.addComponent(jButton2)

.addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)

.addComponent(jButton1)))))

.addContainerGap())

);

layout.setVerticalGroup(

layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)

.addGroup(layout.createSequentialGroup()

.addGap(0, 0, 0)

.addComponent(jLabel1)

.addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)

.addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.BASELINE)

.addComponent(jLabel3)

.addComponent(jLabel4))

.addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)

.addComponent(jLabel2)

.addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)

.addComponent(jPanel1, javax.swing.GroupLayout.PREFERRED_SIZE, 516, javax.swing.GroupLayout.PREFERRED_SIZE)

.addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)

.addComponent(jScrollPane1, javax.swing.GroupLayout.DEFAULT_SIZE, 105, Short.MAX_VALUE)

.addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)

.addComponent(jSeparator1, javax.swing.GroupLayout.PREFERRED_SIZE, 10, javax.swing.GroupLayout.PREFERRED_SIZE)

.addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)

.addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.BASELINE)

.addComponent(jButton1)

.addComponent(jButton2))

.addContainerGap())

);

getAccessibleContext().setAccessibleName("Exploit Pack - Reverse Shell");

pack();

setLocationRelativeTo(null);

}// </editor-fold>//GEN-END:initComponents

private void jButton1ActionPerformed(java.awt.event.ActionEvent evt) {//GEN-FIRST:event_jButton1ActionPerformed

dispose();

}//GEN-LAST:event_jButton1ActionPerformed

private void jButton2ActionPerformed(java.awt.event.ActionEvent evt) {//GEN-FIRST:event_jButton2ActionPerformed

FileReader fstream = null;

try {

// TODO add your handling code here:

final Thread exploitThread;

List<String> config = new ArrayList<>();

// Read config file

fstream = new FileReader("output/" + "config" + ".ep");

BufferedReader in = new BufferedReader(fstream);

String stringToAppend;

while ((stringToAppend = in.readLine()) != null) {

config.add(stringToAppend);

}

jTextArea1.setText("");

jTextArea1

.append("New client-side exploit file created\n");

jTextArea1

.append("Files are usually alocated at path: exploits/code/output/\n");

String pythonpath = config.get(0);

String nmappath = config.get(1);

String ScannerOptions = config.get(2);

String serverPort = config.get(3);

String userName = config.get(4);

String userEmail = config.get(5);

String userWeb = config.get(6);

String runModule = pythonpath + " " + Paths.get(".").toAbsolutePath().normalize().toString() + "/exploits/code/" + exploit.getCodeName();

exploitThread = new Thread("exploitThread") {

@Override

public void run() {

try {

String line;

OutputStream stdin = null;

InputStream stderr = null;

InputStream stdout = null;

// launch EXE and grab stdin/stdout and stderr

Process process = Runtime.getRuntime().exec(runModule);

stdin = process.getOutputStream();

stderr = process.getErrorStream();

stdout = process.getInputStream();

// "write" the parms into stdin

//stdin.write(line.getBytes());

stdin.flush();

stdin.close();

jTextArea1.append("Output messages from your exploit:\n");

// clean up if any output in stdout

BufferedReader brCleanUp

= new BufferedReader(new InputStreamReader(stdout));

while ((line = brCleanUp.readLine()) != null) {

jTextArea1.append(line + "\n");

}

brCleanUp.close();

// clean up if any output in stderr

brCleanUp

= new BufferedReader(new InputStreamReader(stderr));

while ((line = brCleanUp.readLine()) != null) {

jTextArea1.append(line + "\n");

}

brCleanUp.close();

} catch (Exception e) {

e.printStackTrace();

}

}

};

exploitThread.start();

} catch (FileNotFoundException ex) {

Logger.getLogger(ClientsideWizard2.class.getName()).log(Level.SEVERE, null, ex);

} catch (IOException ex) {

Logger.getLogger(ClientsideWizard2.class.getName()).log(Level.SEVERE, null, ex);

} finally {

try {

fstream.close();

} catch (IOException ex) {

Logger.getLogger(ClientsideWizard2.class.getName()).log(Level.SEVERE, null, ex);

}

}

}//GEN-LAST:event_jButton2ActionPerformed

private void formWindowOpened(java.awt.event.WindowEvent evt) {//GEN-FIRST:event_formWindowOpened

// TODO add your handling code here:

try {

String filename = "exploits/code/" + exploit.getCodeName();

// Read file

FileReader fstream = new FileReader(filename);

BufferedReader in = new BufferedReader(fstream);

String stringToAppend;

while ((stringToAppend = in.readLine()) != null) {

textArea.append(stringToAppend + "\n");

}

// Close the output stream

in.close();

} catch (IOException ex) {

Logger.getLogger(MainFrame.class.getName()).log(Level.SEVERE, null, ex);

}

}//GEN-LAST:event_formWindowOpened

/**

* @param exploit

*/

public static void main(Exploit exploit) {

/* Set the Nimbus look and feel */

//<editor-fold defaultstate="collapsed" desc=" Look and feel setting code (optional) ">

/* If Nimbus (introduced in Java SE 6) is not available, stay with the default look and feel.

* For details see http://download.oracle.com/javase/tutorial/uiswing/lookandfeel/plaf.html

*/

try {

for (javax.swing.UIManager.LookAndFeelInfo info : javax.swing.UIManager.getInstalledLookAndFeels()) {

if ("Nimbus".equals(info.getName())) {

javax.swing.UIManager.setLookAndFeel(info.getClassName());

break;

}

}

} catch (ClassNotFoundException | InstantiationException | IllegalAccessException | javax.swing.UnsupportedLookAndFeelException ex) {

java.util.logging.Logger.getLogger(ClientsideWizard2.class.getName()).log(java.util.logging.Level.SEVERE, null, ex);

}

//</editor-fold>

/* Create and display the form */

java.awt.EventQueue.invokeLater(new Runnable() {

public void run() {

try {

String laf = UIManager.getSystemLookAndFeelClassName();

UIManager.setLookAndFeel(laf);

} catch (ClassNotFoundException | InstantiationException | IllegalAccessException | UnsupportedLookAndFeelException e) {

/* Never happens */ }

new ClientsideWizard2(exploit).setVisible(true);

}

});

}

// Variables declaration - do not modify//GEN-BEGIN:variables

private javax.swing.JButton jButton1;

private javax.swing.JButton jButton2;

private javax.swing.JLabel jLabel1;

private javax.swing.JLabel jLabel2;

private javax.swing.JLabel jLabel3;

private javax.swing.JLabel jLabel4;

private javax.swing.JPanel jPanel1;

private javax.swing.JScrollPane jScrollPane1;

private javax.swing.JSeparator jSeparator1;

private javax.swing.JTextArea jTextArea1;

private javax.swing.JTextField jTextField3;

private javax.swing.JTextField jTextField5;

// End of variables declaration//GEN-END:variables

}