MythicAgents / poseidon

Poseidon is a Golang agent targeting Linux and macOS
Other
118 stars 32 forks source link

keylog produces output that is not compatible with Mythic #31

Closed kulinacs closed 1 year ago

kulinacs commented 1 year ago

When using the most recent mythic version, the keylogger does not produce output that Mythic understands.

image

The issue appears to be Poseidon attempting to send a keylog message instead of a task response message here:

https://github.com/MythicAgents/poseidon/blob/master/Payload_Type/poseidon/agent_code/keylog/keystate/keystate.go#L106 https://github.com/MythicAgents/poseidon/blob/master/Payload_Type/poseidon/agent_code/keylog/keystate/keystate.go#L114

its-a-feature commented 1 year ago

I just made a push that should sort it out - poseidon wasn't reporting keylogs within a keylog key and instead was just returning that data. Should all be good now