search

looCiprian / GC2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or Microsoft SharePoint Document.
GNU General Public License v3.0
536 stars 108 forks source link

shell #2

Closed solradmin closed 2 years ago

solradmin commented 2 years ago

This is a great project that can bypass traffic detection. Does the shell support Windows?

Thank you very much looCiprian!

looCiprian commented 2 years ago

Hi! Thank you very much😉 Yes, you can cross-compile the project for the desired architecture and platform OS. Here an example.

The project has been tested on Windows with the build-in Microsoft Defender enabled and it was not detected by the AV.

looCiprian commented 2 years ago

Hi! Try to add the -v option in order to enable verbose mode, and see if there are some errors. Once started, the program will add a new sheet on the spreadsheet, inside the new sheet you can write your commands.

Also take a look a the demo

solradmin commented 2 years ago

I'm sorry, I didn't see that a new shell would generate a new worksheet, which led me to think that it was not successfully launched. I am now going to hard code the parameters in the code. But I have a problem. Sheet api and drive api can be passed in as strings, but how to pass in json key. Looking forward to your reply.

Dear looCiprian.

looCiprian commented 2 years ago

To hardcode data you should read the README.md (you can also hardcode the parameters in the code, so you will upload only the executable on the target machine (look at comments in root.go and authentication.go)). As described in the code the JSON can be stored as a string but needs to be escaped. You can try this (I didn't use it)

solradmin commented 2 years ago

Hi! I have successfully fulfilled my needs. thank you for your reply! In this holiday season, I wish you and your family a Merry Christmas. Can I add you on Telegram / LINE / Facebook / WhatsApp

Later, I may learn golang to add more features to this project. I am thinking about how to perform feature processing on the files generated by this project, so as not to collect the features of this file.