Implement optional RC4 encryption between client and trojan

chrisallenlane / wash

`wash` is a framework for creating and interfacing with trojans that can establish a "web shell" on a compromised web server. It is designed with penetration testers in mind, and thus is highly versatile and extensible.

GNU General Public License v3.0

28 stars 7 forks source link

Implement optional RC4 encryption between client and trojan #53

Open chrisallenlane opened 11 years ago

chrisallenlane commented 11 years ago

This will require just a few changes:

To the client. (Add a crypto <select>)
To wash.crypto
To the trojan chassis (ERB)
To the JSON spec files

These links may be helpful:

https://gist.github.com/2185197
http://code.google.com/p/arc4-js/
https://github.com/cotdp/php-rc4