byob - An open-source post-exploitation framework for stu

项目说明

!Banner

![license]()
![]()
![Co Status]()
<img alt="Discord" src="
![Tweet]()&url=)

Questions? Check out the docs or join our Discord support 服务端

__Disclaimer__: This project should be used for authorized testing or educational purposes only.

BYOB is an open-源码 post-exploitation 框架 for students, researchers and de. It includes features such as:

Command & control 服务端 with intuiti

Custom payload generator for multiple platforms

12 post-exploitation modules

It is designed to allow students and de to easily implement their own 代码 and add cool new
features *without* having to write a C2 服务端 or Remote Administration 工具 from scratch.

This project has 2 main parts: the original console-based application (/byob) and the web GUI (/web-gui).

Web GUI

Dashboard

A control panel for your C2 服务端 with a point-and-click interface for executing post-exploitation modules. The control panel includes an interactive map of 客户端 machines and a dashboard which allows efficient, intuiti of 客户端 machines.

!dashboard_preview

Payload Generator

The payload generator uses black magic in Docker containers & Wine servers to compile executable payloads for any platform/architecture you select. These payloads spawn reverse TCP shells with communication over the 网络 encrypted after generating a secure symmetric key using the Diffie-Hellman IKE.

!payloads_preview

Terminal Emulator

The web app includes an in-browser terminal emulator so you can still ha shell access even when using the web 界面.

!terminal_preview

Console Application

Client

![client]()

*Generate fully-undetectable clients with staged payloads, remote imports, and unlimited post-exploitation modules*

1) __Remote Imports__: remotely import third-party packages from the ser writing them
to the disk or downloading/installing them
2) __Nothing Written To The Disk__: clients ne anything to the disk - not e files (zero IO
system calls are made) because remote imports allow arbitrary 代码 to be
dynamically loaded into memory and directly imported into the currently running
process
3) __Zero Dependencies (Not E Itself)__: 客户端 runs with just the python standard library, remotely imports any non-standard
packages/modules from the 服务端, and can be compiled with a standalone python
interpreter into a portable binary executable formatted for any platform/architecture,
allowing it to run on anything, even when Python itself is missing on the target host
4) __Add New Features With Just 1 Click__: any python script, module, or package you copy to the ./byob/modules/ directory
automatically becomes remotely importable & directly usable by every 客户端 while
your command & control 服务端 is running
5) __Write Your Own Modules__: a basic module template is provided in ./byob/modules/ directory to make writing
your own modules a straight-forward, hassle-free process
6) __Run Unlimited Modules Without Bloating File Size__: use remote imports to add unlimited features without adding a single byte to the
client's file size
7) __Fully Updatable__: each 客户端 will periodically check the 服务端 for new content a for
remote import, and will dynamically update its in-memory resources
if anything has been added/removed
8) __Platform Independent__: e is written in Python (a platform-agnostic language) and the clients
generated can optionally be compiled into a portable executable (*Windows*) or
bundled into a standalone application (*macOS*)
9) __Bypass Firewalls__: clients connect to the command & control 服务端 TCP connections, which
will bypass most firewalls because the default filter configurations primarily
block incoming connections
10) __Counter-Measure Against Anti: avoids being analyzed by antivirus by blocking processes with names of known antivirus
products from spawning
11) __Encrypt Payloads To Prevent Analysis__: the main 客户端 payload is encrypted with a random 256-bit key which exists solely
in the payload stager which is generated along with it
12) __Prevent Re: by default, clients will abort execution if a machine or sandbox is detected

Modules

![modules]()

*Post-exploitation modules that are remotely importable by clients*

1) __Persistence__ (byob.modules.persistence): establish persistence on the host machine using 5 different methods
2) __Packet Sniffer__ (byob.modules.packetsniffer): run a packet sniffer on the host 网络 & upload .pcap file
3) __Escalate Pri (byob.modules.escalate): attempt UAC bypass to gain unauthorized administrator pri
4) __Port Scanner__ (byob.modules.portscanner): scan the local 网络 for other online devices & open ports
5) __Keylogger__ (byob.modules.keylogger): logs the user’s keystrokes & the window name entered
6) __Screenshot__ (byob.modules.screenshot): take a screenshot of current user’s desktop
7) __Outlook__ (byob.modules.outlook): read/search/upload emails from the local Outlook 客户端
8) __Process Control__ (byob.modules.process): list/search/kill/monitor currently running processes on the host
9) __iCloud__ (byob.modules.icloud): check for logged in iCloud account on macOS

Server

![server]()

*Command & control 服务端 with persistent 数据库 and console*

1) __Console-Based User-Interface__: streamlined console interface for controlling 客户端 host machines remotely via
reverse TCP shells which provide direct terminal access to the 客户端 host machines
2) __Persistent SQLite Database__: lightweight 数据库 that stores identifying information about 客户端 host machines,
allowing reverse TCP shell sessions to persist through disconnections of arbitrary
duration and enabling long-term reconnaissance
3) __客户端-Ser: all python packages/modules installed locally are automatically made a for clients
to remotely import without writing them to the disk of the target machines, allowing clients to use modules which require
packages not installed on the target machines

Core

![core]()

*Core 框架 modules used by the generator and the 服务端*

1) __Utilities__ (byob.core.util): miscellaneous utility functions that are used by many modules
2) __Security__ (byob.core.security): Diffie-Hellman IKE & 3 encryption modes (AES-256-OCB, AES-256-CBC, XOR-128)
3) __Loaders__ (byob.core.loaders): remotely import any package/module/scripts from the 服务端
4) __Payloads__ (byob.core.payloads): reverse TCP shell designed to remotely import dependencies, packages & modules
5) __Stagers__ (byob.core.stagers): generate unique payload stagers to prevent analysis & detection
6) __Generators__ (byob.core.generators): functions which all dynamically generate 代码 for the 客户端 generator
7) __DAO__ (byob.core.dao): handles interaction between command & control 服务端 and the SQLite 数据库
8) __Handler__ (byob.core.handler): HTTP POST request handler for remote file uploads to the 服务端

________________________________________________________________________________________________

To Do

*Contributors welcome! Feel free to issue pull-requests with any new features or impro you have come up with!*

1) __Remote Import Encryption__ - encryption for data streams of packages/modules being remotely imported (to maintain confidentiality/authenticity/integrity and prevent any remote 代码 execution arising from deserialization)
2) __Transport Types__ - add support for more transport types (HTTP/S, DNS, etc.)
3) __Bug Fixes__ - fix any bugs/issues

项目信息

开发语言：Python

Star 数：9504

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕An open-源码 post-exploitation 框架 for students, researchers and de.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。