Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Requests] Encryption support. #15

Closed
ghost opened this issue Apr 16, 2019 · 2 comments
Closed

[Feature Requests] Encryption support. #15

ghost opened this issue Apr 16, 2019 · 2 comments
Assignees
Labels
enhancement New feature or request

Comments

@ghost
Copy link

ghost commented Apr 16, 2019

Description

I would like for the platypus listener to support encryption such as AES or SSL.
Describe your problem here

The Platypus server currently does not support encryption which means the commands are send in cleartext over the network.

Reproduce

  1. go run platypus.go
  2. Run 0.0.0.0 8080
    ...
  3. Encrypt [hash of listener] /path/to/ssl.crt /path/to/ssl.key

Expected behavior

The entire connection has end to end encryption

Current behavior

The connection can be eavesdropped by anyone using a wire sniffer.

Screenshots/Terminal log

Environments

  • OS: Ubuntu 18.04.1 LTS
  • Version: 1.1.0
@WangYihang
Copy link
Owner

Got it, nice idea, I will add this idea into TODO list. thank you so much!

@WangYihang WangYihang added the enhancement New feature or request label Apr 17, 2019
@WangYihang WangYihang self-assigned this Apr 17, 2019
@WangYihang
Copy link
Owner

This feature was supported in the latest version, namely v1.4.1.
Now, Platypus will start two different listeners by default,

  • 13338 for raw reverse shell listener, which provides an Upgrade Button on the client. It will upgrade the client to the TLS encrypted channel.
  • 13337 for the private encrypted channel.

Demostration

encrypted2

As you can see, the data is encrypted via TLS3.

image

Thank you for requesting this feature, feel free to try it and leave some feedback. @ghost

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant