Commit Graph

119 Commits

Author SHA1 Message Date
Oleksii Shevchuk 4f1a508dd0 Fix migration (linux client) /w memfd 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 248094d89d Ensure pupy doesn't execute any shit from the system 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 29d7e1ad5b Properly set sys.executable from /proc/self/exe 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk ce50ea3230 Add workaround to make possible to close memfds after dlopen 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk fec8025de7 Add memfd sealing 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk f1bc5450c6 Request maximal amount of open files (because of memfd) and disable coredumps 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk bc62899b4f Prevent GC collection of modules and config 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 177fab2498 Reduce virtual size 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 4a02048666 Build pupymemexec and winpty with environment 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk fc585d60a6 Values are hardcoded 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk c005cf86de Fix invoking from non-shell 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 45ac2bf02e "Securely" pass environment 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk fc7d0253ec Reduce size by building shared openssl, removing dbus from client and so on 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk e6b227f36c Fix typo 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 1a02ac6150 Try to become root if possible 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 7309acdf19 Set non-dumpable property 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 86b1c20484 Fix build/work in lin32 environment 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 93497d75c8 Make DEFAULT_SAFE_PATH also "configurable" 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk a31537968c Setup "safe" environment 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 6bbee454ac Add memfd support (optional) for dlopen 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 6e38e209d5 Fix RTLD_NEXT in pthreads wokraround 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 8c35337379 Use pyuv instead of asyncoro 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 08d8688c8c Search any pywintypes27.dll 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk fcac5768cf Pypcap is broken 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 190fd92d09 Bump versions, fix build script 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 4207218055 Bump zlib version 2017-03-08 19:41:15 +02:00
Oleksii Shevchuk 480bc18df4 Add more deps to bundle builder 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 7a89fab238 Move pyaudio to bundle 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 891d7aed05 Build scandir to the bundle 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 128666a1e0 Remove libraries which are not required during non-interactive boot time 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 128ec9bc53 Fix builds. Add more packages to buildenv 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk ac73116fa3 Enable MemoryModule debug output if /DDEBUG passed 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 45ad9ccff6 Build python libraries from environments to zip bundles. Experemental 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk f84b41056c Bump versions 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 45d31a5dea Make compat sched calls static inline 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 6ef4ebd431 Avoid redifinition 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk e58c910493 Copy compatible headers after bootstrap 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 2ef3cc7cf8 Move make psutils clients built-in (Linux, Windows) 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 3d7d76bbef Add python-ptrace to standard package 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk cfbdc87758 ZSH doesn't support writing to UID 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 240c503769 Help setuptools to find MSVC for AMD64 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 0af2216ada Avoid "RuntimeError: dictionary changed size during iteration" 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk ecdedfe5dd Schedule debug build in build.sh (windows) 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 04b3eb0f2c Create buildenv script for linux client 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 8bfae8bb50 Rework pupy basic configuration
Improve compression:
[+] LMZA everywhere (uniformed)
[+] Config space 40690 -> 8192
[+] Compress payload libraries (libpython)
[+] Compress serialized objects (resources, bootloader, config)
[-] Windows build (Makefile) was removed

Improve cryptography/credentials default configuration
[+] Remove default secrets
[-] Android still there
[+] Add uniformed class to search proper credentials
[+] Generate all credentials on first launch
[+] Improve SSL -> CA/Client/Server + roles

Client default configuration
[+] Add stubbed site.py (to preserve pupy from search files on target device)

TODO:
[?] Test all that stuff?
[?] Rewrite all transport configs to honor roles
2017-03-08 19:41:14 +02:00
Oleksii Shevchuk d7214db8f9 Shrink paths 2017-03-08 19:41:14 +02:00
Oleksii Shevchuk 8dc9232450 Use LZMA instead of ZLib for resources 2017-03-08 19:40:25 +02:00
Oleksii Shevchuk e320af34ae Add initial IGD (UPnP) support 2017-03-08 19:40:25 +02:00
Oleksii Shevchuk 288aa030bf Ensure no duplicates in resources.zip 2017-03-08 19:40:24 +02:00
n1nj4sec f3fc9a5fca add ACCESS_NETWORK_STATE to template apk 2017-01-21 14:02:26 +01:00