twittor - A fully featured backdoor that uses Twitter as a C

项目说明

Twittor
====
A stealthy Python based backdoor that uses Twitter (Direct Messages) as a command and control 服务端
This project has been inspired by Gcat which does the same but using a Gmail account.

Setup
=====
For this to work you need:

Install the dependencies:

This repo contains two files:

In both files, edit the access token part and add the ones that you pre generated:

You're probably going to want to compile into an executable using Pyinstaller
In order to remove the console when compiling with Pyinstaller, the flags will help. Just saying.

Usage
=====

In order to run the 客户端, launch the script.

You'll then get into an 'interactive' shell which offers few commands that are:

The output is the MAC address which is used to uniquely identifies the system but also gives you OS information the implant is running on. In that case a Linux box.

Here we are telling to execute , the script then outputs the that we can use to retrieve the output of that command

Command to use in that case is followed by the jobid from the command.

In order to retrieve new bots/command outputs but also force the 客户端 to refresh the results, use the command.

This will send a request and wait 10 seconds for them to answer.
Direct messages will then be parsed - Bot list will be refreshed but also the command list, including new command outputs.

As I said earlier, (previous) commands will be retrieved from older direct messages (limit is 200) and you can actually retrieve/see them by using the command

This option might be handy in order to retrieve a meterpreter session and this article becomes really useful.

Generate your meterpreter shellcode, like:

Extract the shellcode and send it to the specified bot using the command!

Et voilà!

Open a beer and enjoy your reverse meterpreter shell.

Contributing and/or questions?
=====

Project is entirely open 源码 and released under MIT license.
I mostly wanted to create a PoC after Twitter decided to remove the 140 characters limit for the Direct Messages.
Few stuff should be added such as Encryption (Adding AES on top of it).
"Messages" are using a dictionary data structure and the whole command is only base64 encoded.
Fork the project, contribute, submit pull requests, and have fun.

If you find a bug, open an issue on Github and/or ping me on Twitter.

Again, feel free to check the Gcat amazing project from byt3bl33d3r that inspired me a lot.

项目信息

开发语言：Python

Star 数：811

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A fully featured backdoor that uses Twitter as a C&C 服务端 展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。