pupy/client/sources-linux/buildenv.sh

557 lines
16 KiB
Bash
Executable File

#!/bin/sh
export XID=`id -u`
# VERSIONS /MAY/ BE UPDATED (In case of vulnerabilites)
OPENSSL_SRC="http://http.debian.net/debian/pool/main/o/openssl/openssl_1.0.2k.orig.tar.gz"
ZLIB_SRC="http://zlib.net/zlib-1.2.11.tar.gz"
SQLITE_SRC="http://www.sqlite.org/2016/sqlite-autoconf-3150200.tar.gz"
LIBFFI_SRC="http://http.debian.net/debian/pool/main/libf/libffi/libffi_3.2.1.orig.tar.gz"
PYTHON_SRC="https://www.python.org/ftp/python/2.7.13/Python-2.7.13.tgz"
PKGCONFIG_SRC="https://pkg-config.freedesktop.org/releases/pkg-config-0.29.1.tar.gz"
XZ_SRC="http://tukaani.org/xz/xz-5.2.2.tar.gz"
M4_SRC="https://ftp.gnu.org/gnu/m4/m4-1.4.18.tar.gz"
AUTOCONF_SRC="https://ftp.gnu.org/gnu/autoconf/autoconf-2.69.tar.gz"
AUTOMAKE_SRC="https://ftp.gnu.org/gnu/automake/automake-1.15.tar.gz"
# VERSIONS ARE IMPORTANT
MAKE_SRC="http://ftp.gnu.org/gnu/make/make-3.82.tar.gz"
GLIB_SRC="https://ftp.gnome.org/pub/gnome/sources/glib/2.32/glib-2.32.4.tar.xz"
DBUS_SRC="https://dbus.freedesktop.org/releases/dbus/dbus-1.2.12.tar.gz"
DBUS_GLIB_SRC="https://dbus.freedesktop.org/releases/dbus-glib/dbus-glib-0.88.tar.gz"
GOBJECT_INTROSPECTION="http://ftp.gnome.org/pub/gnome/sources/gobject-introspection/1.32/gobject-introspection-1.32.1.tar.xz"
PYGOBJECT="http://ftp.gnome.org/pub/GNOME/sources/pygobject/3.2/pygobject-3.2.2.tar.xz"
DBUS_PYTHON="https://dbus.freedesktop.org/releases/dbus-python/dbus-python-0.84.0.tar.gz"
if [ ! -d buildenv/downloads ]; then
mkdir -p buildenv/downloads
cd buildenv/downloads
for bin in "$MAKE_SRC" "$OPENSSL_SRC" "$ZLIB_SRC" "$SQLITE_SRC" "$LIBFFI_SRC" \
"$PYTHON_SRC" "$PKGCONFIG_SRC" "$GLIB_SRC" "$XZ_SRC" \
"$DBUS_SRC" "$DBUS_GLIB_SRC" "$GOBJECT_INTROSPECTION" \
"$PYGOBJECT" "$DBUS_PYTHON" "$M4_SRC" "$AUTOCONF_SRC" \
"$AUTOMAKE_SRC" ; do
wget -qc "$bin"
done
cd -
fi
if [ ! $XID -eq 0 ]; then
echo "[!] You need to become root to run rest of this script (uid=$XID)"
su -c "./$0 $XID"
exit
fi
XID="$1"
echo "USER XID: $XID"
if [ ! -f buildenv/lin32/.ready ]; then
debootstrap --arch i386 woody buildenv/lin32 http://archive.debian.org/debian >/dev/null
mkdir -p buildenv/lin32/usr/src
cp -vfp buildenv/downloads/* buildenv/lin32/usr/src/
mkdir -p buildenv/lin32/etc/ssl/certs
for file in /etc/ssl/certs/*.0; do
cat $file >buildenv/lin32/etc/ssl/certs/`basename "$file"`
done
cp /etc/ssl/certs/ca-* buildenv/lin32/etc/ssl/certs/
cat /etc/resolv.conf >buildenv/lin32/etc/resolv.conf
cat > buildenv/lin32/wrap.c <<EOF
#define _GNU_SOURCE
#include <sys/utsname.h>
static const
struct utsname pupy_utsname = {
.sysname = "Linux",
.nodename = "Pupy",
.release = "2.4.0",
.version = "2.4.0",
.machine = "i386",
.domainname = "Pupy",
} ;
int uname(struct utsname *buf) {
memcpy(buf, &pupy_utsname, sizeof(struct utsname));
return 0;
}
EOF
cat <<__CMDS__ > buildenv/lin32/deploy.sh
exec 1>/log.txt
set -x
export MAKEOPTS="-j 2"
export LC_ALL=C
useradd -u $XID -m pupy
export TERM=
export DEBIAN_FRONTEND=noninteractive
/bin/sh -c "apt-get --force-yes -y install gcc-3.0 make libc-dev \
perl m4 gettext libexpat1-dev flex bison file libstdc++2.10-dev \
libtool patch xutils xlibs-dev < /dev/null"
cd /
gcc -fPIC -o /wrap.so -shared /wrap.c
echo /wrap.so >/etc/ld.so.preload
mkdir /opt/static
ln -sf /usr/lib/gcc-lib/i386-linux/3.0.4/libgcc.a /opt/static/
ln -sf /usr/lib/libffi.a /opt/static/
ln -sf /usr/lib/libutil.a /opt/static/
ln -sf /usr/bin/gcc-3.0 /usr/bin/gcc
ln -sf /usr/bin/gcc-3.0 /usr/bin/cc
ln -sf /usr/X11R6/lib/libX11.so /usr/lib/
ln -sf /usr/X11R6/lib/libXss.a /usr/lib/
export CFLAGS="-Os -fPIC -pipe -L/opt/static" CXXFLAGS="-Os -fPIC -pipe" LDFLAGS="-s -O1 -fPIC -L/opt/static"
cd /usr/src
tar zxf make-3.82.tar.gz
cd /usr/src/make-3.82
./configure; make; make install
export PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin:/usr/X11R6/bin/
/bin/sh -c "apt-get --force-yes -y remove make << /dev/null"
cd /usr/src
tar zxf zlib-1.2.11.tar.gz
cd /usr/src/zlib-1.2.11
./configure --prefix=/usr --static; make; make install
cd /usr/src
tar zxf openssl_1.0.2k.orig.tar.gz
cd /usr/src/openssl-1.0.2k/
CC="gcc -Os -fPIC" ./Configure --prefix=/usr no-hw-xxx shared \
no-dso no-err no-krb5 no-hw no-asm no-ssl2 linux-generic32
make depend >/dev/null 2>/dev/null;
make; make install
cp libssl.so.1.0.0 /usr/lib/libssl.so
cp libcrypto.so.1.0.0 /usr/lib/libcrypto.so
mkdir -p /usr/lib/pkgconfig/
cp *.pc /usr/lib/pkgconfig/
cd /usr/lib
ldconfig -n .
ln -s /usr/lib/libssl.so /usr/lib/libssl.so.1
ln -s /usr/lib/libcrypto.so /usr/lib/libcrypto.so.1
cd /usr/src
tar zxf xz-5.2.2.tar.gz
cd /usr/src/xz-5.2.2
./configure --prefix=/usr; make; make install
cd /usr/src
tar zxf pkg-config-0.29.1.tar.gz
cd /usr/src/pkg-config-0.29.1
./configure --with-internal-glib --prefix=/usr
make install
cd /usr/src
tar zxf libffi_3.2.1.orig.tar.gz
cd /usr/src/libffi-3.2.1
./configure --enable-static --prefix=/usr
make install
cd /usr/src
tar zxf sqlite-autoconf-3150200.tar.gz
cd /usr/src/sqlite-autoconf-3150200
./configure --prefix=/usr --disable-static-shell --disable-dynamic-extensions
make; make install
cd /usr/src
tar zxf Python-2.7.13.tgz
cd /usr/src/Python-2.7.13
./configure --prefix=/usr \
--without-doc-strings --without-tsc \
--with-fpectl --with-ensurepip=install --with-signal-module \
--enable-ipv6 --enable-shared --enable-unicode=ucs4
make; make install
cd /usr/src
xz -d glib-2.32.4.tar.xz
tar xf glib-2.32.4.tar
cd /usr/src/glib-2.32.4
CFLAGS="\$CFLAGS -DPR_SET_NAME=15 -DPR_GET_NAME=16" ./configure \
--prefix=/usr --disable-xattr --disable-fam --disable-selinux --enable-static
make; make install
cd /usr/src
tar zxf dbus-1.2.12.tar.gz
cd /usr/src/dbus-1.2.12
./configure --prefix=/usr --disable-selinux --disable-libaudit \
--disable-dnotify --disable-inotify --disable-kqueue \
--disable-userdb-cache --enable-abstract-sockets
make; make install
cd /usr/src
tar zxf dbus-glib-0.88.tar.gz
cd /usr/src/dbus-glib-0.88
./configure --prefix=/usr
make; make install
cd /usr/src
xz -d gobject-introspection-1.32.1.tar.xz
tar xf gobject-introspection-1.32.1.tar
cd /usr/src/gobject-introspection-1.32.1
./configure --prefix=/usr --disable-tests
make; make install
cd /usr/src
tar zxf dbus-python-0.84.0.tar.gz
cd /usr/src/dbus-python-0.84.0
./configure --prefix=/usr
make; make install
cd /usr/src
xz -d pygobject-3.2.2.tar.xz
tar xf pygobject-3.2.2.tar
cd /usr/src/pygobject-3.2.2
./configure --disable-glibtest --disable-cairo \
--prefix=/usr --enable-static
make -k
rm -f ./gi/_glib/.libs/libpyglib-gi-2.0-python.so{,.0,.0.0.0}
ln -s libpyglib-gi-2.0-python.a ./gi/_glib/.libs/libpyglib-gi-2.0-python.so
ln -s libpyglib-gi-2.0-python.a ./gi/_glib/.libs/libpyglib-gi-2.0-python.so.0
ln -s libpyglib-gi-2.0-python.a ./gi/_glib/.libs/libpyglib-gi-2.0-python.so.0.0.0
rm -f ./gi/_gi.la ./gi/_gobject/_gobject.la ./gi/_glib/_glib.la
rm -f ./gi/.libs/_gi.la ./gi/_gobject/.libs/_gobject.la ./gi/_glib/.libs/_glib.la
make -k
make install
cp -vrf /compat/* /usr/include/
cat >>/usr/include/pthread.h <<__EOF__
#ifndef __pthread_condattr_setclock__
#define __pthread_condattr_setclock__
#define _GNU_SOURCE
#include <dlfcn.h>
#ifndef RTLD_NEXT
#define RTLD_NEXT ((void *) -1l)
#endif
static int (*_pthread_condattr_setclock) (pthread_condattr_t *attr, clockid_t clock_id) = NULL;
static inline
int pthread_condattr_setclock(pthread_condattr_t *attr, clockid_t clock_id) {
if (_pthread_condattr_setclock == -1) return -1;
if (_pthread_condattr_setclock == NULL) _pthread_condattr_setclock = dlsym(
RTLD_NEXT, "pthread_condattr_setclock");
if (_pthread_condattr_setclock == NULL) {
_pthread_condattr_setclock = -1;
return -1;
}
}
#endif
__EOF__
python -OO -m pip install -q six packaging appdirs
python -OO -m pip install -q \
rpyc pycryptodome pyaml rsa netaddr tinyec pyyaml ecdsa \
paramiko pylzma pydbus python-ptrace psutil scandir \
scapy impacket colorama pyOpenSSL \
--upgrade --no-binary :all:
/bin/sh -c "apt-get --force-yes -y remove m4 << /dev/null"
cd /usr/src
tar zxf m4-1.4.18.tar.gz
cd /usr/src/m4-1.4.18
./configure --prefix=/usr; make; make install
cd /usr/src
tar zxf autoconf-2.69.tar.gz
cd /usr/src/autoconf-2.69
./configure --prefix=/usr; make; make install
cd /usr/src
tar zxf automake-1.15.tar.gz
cd /usr/src/automake-1.15
./configure --prefix=/usr; make; make install
CFLAGS="-O2 -pipe -DCLOCK_MONOTONIC=1 -UHAVE_PTHREAD_COND_TIMEDWAIT_MONOTONIC -U_FILE_OFFSET_BITS" \
python -OO -m pip install -q pyuv --no-binary :all:
cd /usr/lib/python2.7
find -name "*.py" | python -m compileall -qfi -
find -name "*.py" | python -OO -m compileall -qfi -
find -name "*.so" | while read f; do strip \$f; done
cd /
rm -rf /usr/src
apt-get clean
ldconfig
__CMDS__
mkdir -p buildenv/lin32/proc
mkdir -p buildenv/lin32/dev
mount -t proc proc buildenv/lin32/proc
mount -t devtmpfs devtmpfs buildenv/lin32/dev
cp -vfr compat buildenv/lin32/
chroot buildenv/lin32 /bin/bash -x /deploy.sh
umount buildenv/lin32/proc
umount buildenv/lin32/dev
touch buildenv/lin32/.ready
fi
if [ ! -f buildenv/lin64/.ready ]; then
debootstrap --no-check-gpg --arch amd64 etch buildenv/lin64 http://archive.debian.org/debian >/dev/null
mkdir -p buildenv/lin64/usr/src
cp -vfp buildenv/downloads/* buildenv/lin64/usr/src/
mkdir -p buildenv/lin64/etc/ssl/certs
for file in /etc/ssl/certs/*.0; do
cat $file >buildenv/lin64/etc/ssl/certs/`basename "$file"`
done
cp /etc/ssl/certs/ca-* buildenv/lin64/etc/ssl/certs/
cat /etc/resolv.conf >buildenv/lin64/etc/resolv.conf
cat > buildenv/lin64/wrap.c <<EOF
#define _GNU_SOURCE
#include <sys/utsname.h>
static const
struct utsname pupy_utsname = {
.sysname = "Linux",
.nodename = "Pupy",
.release = "2.4.0",
.version = "2.4.0",
.machine = "x86_64",
.domainname = "Pupy",
} ;
int uname(struct utsname *buf) {
memcpy(buf, &pupy_utsname, sizeof(struct utsname));
return 0;
}
EOF
cat <<__CMDS__ > buildenv/lin64/deploy.sh
exec 1>/log.txt
set -x
export LC_ALL=C
export MAKEOPTS="-j 2"
useradd -u $XID -m pupy
export TERM=
export DEBIAN_FRONTEND=noninteractive
/bin/sh -c "apt-get --force-yes -y install build-essential make libc-dev \
perl m4 gettext libexpat1-dev flex bison file libtool patch xutils \
libx11-dev libxss-dev < /dev/null"
cd /
gcc -fPIC -o /wrap.so -shared /wrap.c
echo /wrap.so >/etc/ld.so.preload
mkdir /opt/static
ln -sf /usr/lib/gcc/x86_64-linux-gnu/4.1.2/libgcc.a /opt/static
ln -sf /usr/lib/libffi.a /opt/static/
export CFLAGS="-Os -fPIC -pipe -L/opt/static" CXXFLAGS="-Os -fPIC -pipe" LDFLAGS="-s -O1 -fPIC -L/opt/static"
cd /usr/src
tar zxf make-3.82.tar.gz
cd /usr/src/make-3.82
./configure; make; make install
export PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin:/usr/X11R6/bin/
/bin/sh -c "apt-get --force-yes -y remove make << /dev/null"
cd /usr/src
tar zxf zlib-1.2.11.tar.gz
cd /usr/src/zlib-1.2.11
./configure --prefix=/usr --static; make; make install
cd /usr/src
tar zxf openssl_1.0.2k.orig.tar.gz
cd /usr/src/openssl-1.0.2k/
CC="gcc -Os -fPIC" ./Configure --prefix=/usr no-hw-xxx shared \
no-dso no-err no-krb5 no-hw no-asm no-ssl2 linux-generic64
make depend >/dev/null 2>/dev/null
make; make install
cp libssl.so.1.0.0 /usr/lib/libssl.so
cp libcrypto.so.1.0.0 /usr/lib/libcrypto.so
mkdir -p /usr/lib/pkgconfig/
cp *.pc /usr/lib/pkgconfig/
cd /usr/lib
ldconfig -n .
ln -s /usr/lib/libssl.so /usr/lib/libssl.so.1
ln -s /usr/lib/libcrypto.so /usr/lib/libcrypto.so.1
cd /usr/src
tar zxf xz-5.2.2.tar.gz
cd /usr/src/xz-5.2.2
./configure --prefix=/usr; make; make install
cd /usr/src
tar zxf pkg-config-0.29.1.tar.gz
cd /usr/src/pkg-config-0.29.1
./configure --with-internal-glib --prefix=/usr
make install
cd /usr/src
tar zxf libffi_3.2.1.orig.tar.gz
cd /usr/src/libffi-3.2.1
./configure --enable-static --prefix=/usr
make install
cd /usr/src
tar zxf sqlite-autoconf-3150200.tar.gz
cd /usr/src/sqlite-autoconf-3150200
./configure --prefix=/usr --disable-static-shell --disable-dynamic-extensions
make; make install
cd /usr/src
tar zxf Python-2.7.13.tgz
cd /usr/src/Python-2.7.13
./configure --prefix=/usr \
--without-doc-strings --without-tsc \
--with-fpectl --with-ensurepip=install --with-signal-module \
--enable-ipv6 --enable-shared --enable-unicode=ucs4
make; make install
cd /usr/src
xz -d glib-2.32.4.tar.xz
tar xf glib-2.32.4.tar
cd /usr/src/glib-2.32.4
CFLAGS="\$CFLAGS -DPR_SET_NAME=15 -DPR_GET_NAME=16" ./configure \
--prefix=/usr --disable-xattr --disable-fam --disable-selinux --enable-static
make; make install
cd /usr/src
tar zxf dbus-1.2.12.tar.gz
cd /usr/src/dbus-1.2.12
./configure --prefix=/usr --disable-selinux --disable-libaudit \
--disable-dnotify --disable-inotify --disable-kqueue \
--disable-userdb-cache --enable-abstract-sockets
make; make install
cd /usr/src
tar zxf dbus-glib-0.88.tar.gz
cd /usr/src/dbus-glib-0.88
./configure --prefix=/usr
make; make install
cd /usr/src
xz -d gobject-introspection-1.32.1.tar.xz
tar xf gobject-introspection-1.32.1.tar
cd /usr/src/gobject-introspection-1.32.1
./configure --prefix=/usr --disable-tests
make; make install
cd /usr/src
tar zxf dbus-python-0.84.0.tar.gz
cd /usr/src/dbus-python-0.84.0
./configure --prefix=/usr
make; make install
cd /usr/src
xz -d pygobject-3.2.2.tar.xz
tar xf pygobject-3.2.2.tar
cd /usr/src/pygobject-3.2.2
./configure --disable-glibtest --disable-cairo \
--prefix=/usr --enable-static
make -k
rm -f ./gi/_glib/.libs/libpyglib-gi-2.0-python.so{,.0,.0.0.0}
ln -s libpyglib-gi-2.0-python.a ./gi/_glib/.libs/libpyglib-gi-2.0-python.so
ln -s libpyglib-gi-2.0-python.a ./gi/_glib/.libs/libpyglib-gi-2.0-python.so.0
ln -s libpyglib-gi-2.0-python.a ./gi/_glib/.libs/libpyglib-gi-2.0-python.so.0.0.0
rm -f ./gi/_gi.la ./gi/_gobject/_gobject.la ./gi/_glib/_glib.la
rm -f ./gi/.libs/_gi.la ./gi/_gobject/.libs/_gobject.la ./gi/_glib/.libs/_glib.la
make -k
make install
python -OO -m pip install -q six packaging appdirs
python -OO -m pip install -q \
rpyc pycryptodome pyaml rsa netaddr tinyec pyyaml ecdsa \
paramiko pylzma pydbus python-ptrace psutil scandir \
scapy impacket colorama pyOpenSSL \
--upgrade --no-binary :all:
/bin/sh -c "apt-get --force-yes -y remove m4 << /dev/null"
cd /usr/src
tar zxf m4-1.4.18.tar.gz
cd /usr/src/m4-1.4.18
./configure --prefix=/usr; make; make install
cd /usr/src
tar zxf autoconf-2.69.tar.gz
cd /usr/src/autoconf-2.69
./configure --prefix=/usr; make; make install
cd /usr/src
tar zxf automake-1.15.tar.gz
cd /usr/src/automake-1.15
./configure --prefix=/usr; make; make install
python -OO -m pip install -q pyuv --no-binary :all:
cd /usr/lib/python2.7
find -name "*.py" | python -m compileall -qfi -
find -name "*.py" | python -OO -m compileall -qfi -
find -name "*.so" | while read f; do strip \$f; done
cd /
rm -rf /usr/src
apt-get clean
ldconfig
__CMDS__
mkdir -p buildenv/lin64/proc
mkdir -p buildenv/lin64/dev
mount -t proc proc buildenv/lin64/proc
mount -t devtmpfs devtmpfs buildenv/lin64/dev
chroot buildenv/lin64 /bin/bash -x /deploy.sh
umount buildenv/lin64/proc
umount buildenv/lin64/dev
touch buildenv/lin64/.ready
fi
echo "[+] Creating bundles"
TEMPLATES=`readlink -f ../../pupy/payload_templates`
cd buildenv/lin64/usr/lib/python2.7
zip -y \
-x "*.a" -x "*.o" -x "*.whl" -x "*.txt" -x "*.py" -x "*.pyc" \
-x "*test/*" -x "*tests/*" -x "*examples/*" \
-x "*.egg-info/*" -x "*.dist-info/*" \
-x "idlelib/*" -x "lib-tk/*" -x "tk*" -x "tcl*" \
-r9 ${TEMPLATES}/linux-amd64.zip . >/dev/null
cd -
cd buildenv/lin32/usr/lib/python2.7
zip -y \
-x "*.a" -x "*.o" -x "*.whl" -x "*.txt" -x "*.py" -x "*.pyc" \
-x "*test/*" -x "*tests/*" -x "*examples/*" \
-x "*.egg-info/*" -x "*.dist-info/*" \
-x "idlelib/*" -x "lib-tk/*" -x "tk*" -x "tcl*" -x "*.la" \
-r9 ${TEMPLATES}/linux-x86.zip . >/dev/null
cd -
echo "[+] We are done"