60 lines
2.1 KiB
Python
60 lines
2.1 KiB
Python
#!/usr/bin/python3
|
|
|
|
import ssl
|
|
import websocket
|
|
import json
|
|
import requests
|
|
import urllib3
|
|
import threading
|
|
import base64
|
|
import sys
|
|
import argparse
|
|
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
|
|
|
|
# Requests a rtl shellcode request. Check API docs for more information
|
|
|
|
def readerThread(ws):
|
|
while True:
|
|
response = ws.recv()
|
|
jdata = json.loads(response)
|
|
if 'task' in jdata and 'access' in jdata :
|
|
if jdata['access'] == True:
|
|
taskID = jdata['task']
|
|
if taskID == 59:
|
|
print("Badgers Removed:", jdata)
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser(description='This is a sample script to use Brute Ratel Server API!!!')
|
|
parser.add_argument('-u', type=str, required=True, help="Brute Ratel username", metavar='')
|
|
parser.add_argument('-p', type=str, required=True, help="Brute Ratel user's password", metavar='')
|
|
parser.add_argument('-s', type=str, required=True, help="Brute Ratel server host and port. Eg: 127.0.0.1:8443", metavar='')
|
|
parser.add_argument('-b', type=str, required=False, help="Badger IDs to remove seperated by comma with no space", metavar='')
|
|
args = parser.parse_args()
|
|
if not args.b:
|
|
print("Error: Need Badger ID '-b' to send command to the badger")
|
|
sys.exit(0)
|
|
|
|
user = args.u
|
|
password = args.p
|
|
server = args.s
|
|
badgerList = args.b.split(',')
|
|
print("Removing: ", badgerList)
|
|
loginData = json.dumps({'creds':{'user':user,'pass':password}})
|
|
response = requests.post('https://'+server+'/', data=loginData, verify=False)
|
|
jdata = json.loads(response.text)
|
|
if 'token' in jdata:
|
|
cookie = jdata['token']
|
|
print("[+] Auth Success. Cookie:", cookie)
|
|
ws = websocket.WebSocket(sslopt={"cert_reqs": ssl.CERT_NONE})
|
|
ws.connect("wss://"+server)
|
|
ws.send(json.dumps({'creds': { 'token': cookie, 'user': user }, 'task':0}))
|
|
threading.Thread(target=readerThread, args=(ws,)).start()
|
|
apiRequest = json.dumps({
|
|
'bgr_list': badgerList,
|
|
'task': 59
|
|
})
|
|
ws.send(apiRequest)
|
|
|
|
if __name__ == "__main__":
|
|
main()
|