Skip to content

Commit 3e1c716

Browse files
its-a-featureits-a-feature
committed
v3.1.0
1 parent d6d05b1 commit 3e1c716

File tree

174 files changed

+19159
-29812
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

174 files changed

+19159
-29812
lines changed

‎CHANGELOG.MD

+49
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,55 @@ All notable changes to this project will be documented in this file.
44
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
55
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
66

7+
## [3.1.0]
8+
9+
### Changed
10+
11+
- Added new build step option for skipped steps (useful if you have conditional builds)
12+
- Added new "Split Tasking view" as a callback dropdown option for viewing tasking
13+
- Updated Graphing library (react-flow)
14+
- Updated UI to React18
15+
- Can now sort by last checkin time on active callbacks page
16+
- New "PushC2" style available for egress C2 Profiles
17+
- Updated with Websocket C2 profile
18+
- Uses gRPC connections between C2 Docker container and Mythic
19+
- New `TypedArray` parameter type available for commands, build parameters, and c2 profile parameters
20+
- Useful for generic BoF/COFF style tasking where you need data and a type associated with it
21+
- Data passed down as an array of tuples: `[ [type, value], [type, value] ]`
22+
- PayloadType Commands need to supply a TypedArray Parsing Function to handle freeform input for typed array values
23+
- ex: `my_bof -bof_args int:5 char*:testing wstring:"this is my string"` into proper array of arrays
24+
- New "Host File Through C2" option available for all payloads and files via globe icon
25+
- Up to the C2 profile to support the RPC call from Mythic and make the file available though
26+
- Updated with `http` and `websocket` C2 profiles
27+
- Shift+Tab will cycle backwards through options on the tasking CLI
28+
- Event feed format changed and is now also searchable
29+
- "alerts" keyword in responses from agents now allow setting a source, level (info, warning, debug)
30+
- New `send_webhook` boolean field to indicate sending a custom webhook notification (even if the level isn't warning)
31+
- New `webhook_alert` dictionary field for custom data to your webhook that's _not_ displayed to the user in the event log
32+
- `alert` string field is what's displayed to the user in the event log
33+
- Mythic-cli updated to allow options for setting the main UI to listen on IPv4, IPv6, or both
34+
- Agents can now more easily support multiple C2 profiles and have it reflected in the UI
35+
- Still only one instance of each c2 profile, but that will change in future releases
36+
- Updated callback's "update_info" and "checkin" actions so that callbacks can update their own metadata
37+
- New "Interactive" tasking type available to allow follow-on input in a PTY format
38+
- Browser view has limitations compared to a full PTY/TTY since it's still in your browser (supports ASNI colors)
39+
- Non-ANSI color sequence control sequences are ignored in the browser
40+
- Use the new supported_ui_feature `SupportedUIFeatures: []string{"task_response:interactive"},` to enable this for your task in the UI
41+
- With MythicRPC you can open an "interactive" port with your task which you can connect to with a terminal for full PTY support
42+
- *NOTE* _ALL_ output is still captured and stored in Mythic and viewable in the UI for the task, so be careful about long-running jobs that dump out a lot of data
43+
- Inputs from the Web UI will appear as "tasks" that you can search. Inputs via the opened port will _not_ appear as tasks.
44+
- Your issued tasks will auto-expand, so it should reduce a click for tasks that finish immediately (help, clear, script_only)
45+
- File Search page updated to have `Bin` and `Strings` views available without needing to expand the dropdown
46+
- Updated `github.com/MythicMeta/MythicContainer` golang package and `mythic_container` PyPi packages
47+
- New database migrations so that you don't have to blow away the database between updates
48+
- Updated user login notification to be debug level (no UI popup)
49+
- Allow dynamic port binding with MythicRPCProxyStart
50+
- specify a LocalPort of 0 for Socks/Interactive ports and the next lowest available port will be used and returned
51+
- Allow dynamic port closing with MythicRPCProxyStop
52+
- specify a LocalPort of 0 for Socks/Interactive ports and Mythic will look up the port based on taskID and port type
53+
- Updated ProxyPorts to track "deleted" status so that they're never actually deleted and can be restarted if needed
54+
- Allows for a better tracking of which callbacks had/have which ports open
55+
756
## [3.0.1-rc46] - 2023-08-22
857

958
### Changed

‎LICENSE

+75-2
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
2929
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
3030

3131

32-
## Licenses for other projects used:
32+
# Licenses for other projects used:
3333

3434
## arrgv - https://github.com/astur/arrgv
3535
MIT License
@@ -55,6 +55,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
5555
SOFTWARE.
5656

5757
## https://pkg.go.dev/golang.org/x/mod/semver?tab=licenses
58+
5859
Copyright (c) 2009 The Go Authors. All rights reserved.
5960

6061
Redistribution and use in source and binary forms, with or without
@@ -81,4 +82,76 @@ LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
8182
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
8283
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
8384
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
84-
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
85+
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
86+
87+
## https://github.com/IonicaBizau/anser/blob/master/LICENSE
88+
89+
The MIT License (MIT)
90+
91+
Copyright (c) 2012-22 Ionică Bizău <[email protected]> (https://ionicabizau.net)
92+
93+
Permission is hereby granted, free of charge, to any person obtaining a copy
94+
of this software and associated documentation files (the "Software"), to deal
95+
in the Software without restriction, including without limitation the rights
96+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
97+
copies of the Software, and to permit persons to whom the Software is
98+
furnished to do so, subject to the following conditions:
99+
100+
The above copyright notice and this permission notice shall be included in all
101+
copies or substantial portions of the Software.
102+
103+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
104+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
105+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
106+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
107+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
108+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
109+
SOFTWARE.
110+
111+
## https://github.com/rubenv/sql-migrate/blob/v1.5.2/LICENSE
112+
113+
MIT License
114+
115+
Copyright (C) 2014-2021 by Ruben Vermeersch <[email protected]>
116+
117+
Permission is hereby granted, free of charge, to any person obtaining a copy
118+
of this software and associated documentation files (the "Software"), to deal
119+
in the Software without restriction, including without limitation the rights
120+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
121+
copies of the Software, and to permit persons to whom the Software is
122+
furnished to do so, subject to the following conditions:
123+
124+
The above copyright notice and this permission notice shall be included in all
125+
copies or substantial portions of the Software.
126+
127+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
128+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
129+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
130+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
131+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
132+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
133+
SOFTWARE.
134+
135+
## https://github.com/rubenv/sql-migrate/blob/master/LICENSE
136+
137+
MIT License
138+
139+
Copyright (C) 2014-2021 by Ruben Vermeersch <[email protected]>
140+
141+
Permission is hereby granted, free of charge, to any person obtaining a copy
142+
of this software and associated documentation files (the "Software"), to deal
143+
in the Software without restriction, including without limitation the rights
144+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
145+
copies of the Software, and to permit persons to whom the Software is
146+
furnished to do so, subject to the following conditions:
147+
148+
The above copyright notice and this permission notice shall be included in all
149+
copies or substantial portions of the Software.
150+
151+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
152+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
153+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
154+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
155+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
156+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
157+
SOFTWARE.

‎MythicReactUI/CHANGELOG.MD

+15
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,21 @@ All notable changes to this project will be documented in this file.
44
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
55
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
66

7+
## [0.1.16] - 2023-10-02
8+
9+
### Changed
10+
11+
- Updated to React18
12+
- Updated graphing library to react-flow
13+
- Updated to incorporate TypedArray fields
14+
- Updated File search table
15+
- Updated graphs to support multiple egress channels
16+
- Updated event feed view and made event feed searchable
17+
- Updated to support shift+tab doing a backwards cycle for commands and parameters
18+
- Added new task_response:interactive view for interactive tasking
19+
- Updated to support filtering on last checkin
20+
- Added split-tasking view as a callback dropdown option
21+
722
## [0.1.15-rc38] - 2023-07-20
823

924
### Changed

‎MythicReactUI/Dockerfile

+3-2
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,13 @@
1-
FROM node:19-alpine
1+
FROM node:20-alpine
22

33
WORKDIR /app
44

55
COPY . .
66

77
# ==== BUILD =====
88
# Install dependencies (npm ci makes sure the exact versions in the lockfile gets installed)
9-
RUN npm ci
9+
RUN npm install --legacy-peer-deps
10+
#RUN npm ci
1011

1112
# ==== RUN =====
1213
CMD npm run react-start

0 commit comments

Comments
 (0)