{"id":13539807,"url":"https://github.com/IMcPwn/browser-backdoor","last_synced_at":"2025-04-02T06:31:33.594Z","repository":{"id":43895187,"uuid":"59925578","full_name":"IMcPwn/browser-backdoor","owner":"IMcPwn","description":"BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener","archived":false,"fork":false,"pushed_at":"2022-08-14T02:18:44.000Z","size":257,"stargazers_count":347,"open_issues_count":21,"forks_count":98,"subscribers_count":28,"default_branch":"master","last_synced_at":"2024-05-21T15:24:48.353Z","etag":null,"topics":["backdoor","electron","javascript-backdoor"],"latest_commit_sha":null,"homepage":"","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/IMcPwn.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-05-29T04:03:32.000Z","updated_at":"2024-02-17T15:21:36.000Z","dependencies_parsed_at":"2022-08-14T03:30:24.117Z","dependency_job_id":null,"html_url":"https://github.com/IMcPwn/browser-backdoor","commit_stats":null,"previous_names":["carletonstuberg/browser-backdoor"],"tags_count":26,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/IMcPwn%2Fbrowser-backdoor","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/IMcPwn%2Fbrowser-backdoor/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/IMcPwn%2Fbrowser-backdoor/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/IMcPwn%2Fbrowser-backdoor/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/IMcPwn","download_url":"https://codeload.github.com/IMcPwn/browser-backdoor/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246768013,"owners_count":20830590,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["backdoor","electron","javascript-backdoor"],"created_at":"2024-08-01T09:01:32.163Z","updated_at":"2025-04-02T06:31:28.586Z","avatar_url":"https://github.com/IMcPwn.png","language":"Ruby","funding_links":[],"categories":["\u003ca id=\"1233584261c0cd5224b6e90a98cc9a94\"\u003e\u003c/a\u003e渗透\u0026\u0026offensive\u0026\u0026渗透框架\u0026\u0026后渗透框架","\u003ca id=\"783f861b9f822127dba99acb55687cbb\"\u003e\u003c/a\u003e工具"],"sub_categories":["\u003ca id=\"80301821d0f5d8ec2dd3754ebb1b4b10\"\u003e\u003c/a\u003ePayload\u0026\u0026远控\u0026\u0026RAT","\u003ca id=\"b6efee85bca01cde45faa45a92ece37f\"\u003e\u003c/a\u003e后门\u0026\u0026添加后门"],"readme":"BrowserBackdoor [![Build Status](https://travis-ci.org/IMcPwn/browser-backdoor.svg?branch=master)](https://travis-ci.org/IMcPwn/browser-backdoor) [![Code Climate](https://codeclimate.com/github/IMcPwn/browser-backdoor/badges/gpa.svg)](https://codeclimate.com/github/IMcPwn/browser-backdoor) [![License](https://img.shields.io/badge/license-MIT-orange.svg)](https://github.com/IMcPwn/browser-backdoor/blob/master/LICENSE)\n===================\n\n [![Screenshots](https://github.com/IMcPwn/browser-backdoor/wiki/images/BbsConsole.png)](https://github.com/IMcPwn/browser-backdoor/wiki/Screenshots)\n\nBrowserBackdoor is an [Electron](https://github.com/electron/electron) application that uses a JavaScript WebSocket Backdoor to connect to the listener.\n\nBrowserBackdoorServer is a [WebSocket](https://en.wikipedia.org/wiki/WebSocket) server that listens for incoming WebSocket connections\nand creates a command-line interface for sending commands to the remote system.\n\nThe JavaScript backdoor in BrowserBackdoor can be used on all browsers that support WebSockets.\nIt will not have access to the Electron API of the host computer unless the BrowserBackdoor Client application is used.\n\nSome things you can do if you have access to the Electron API:\n\n1. [Open new browser windows that can point to any website.](http://electron.atom.io/docs/api/shell/#shellopenexternalurl-options) (already built-in. See: [server/modules/openURL.js](https://github.com/IMcPwn/browser-backdoor/blob/master/server/modules/openURL.js)).\n\n2. [Change and read the clipboard.](http://electron.atom.io/docs/api/clipboard/#clipboard) (already built-in. See: [server/modules/readClipboard.js](https://github.com/IMcPwn/browser-backdoor/blob/master/server/modules/readClipboard.js) and [server/modules/writeClipboard.js](https://github.com/IMcPwn/browser-backdoor/blob/master/server/modules/writeClipboard.js)).\n\n3. [Access cross-platform Operating System notifications and the tray on OS X and Windows.](http://electron.atom.io/docs/api/tray/#tray)\n\n4. [Take screenshots.](http://electron.atom.io/docs/api/desktop-capturer/#desktopcapturer) (already built-in. See: [server/modules/screenshot.js](https://github.com/IMcPwn/browser-backdoor/blob/master/server/modules/screenshot.js)).\n\n5. [Execute arbitrary system commands.](http://stackoverflow.com/a/28394895) (already built-in. See: [server/modules/execCmd.js](https://github.com/IMcPwn/browser-backdoor/blob/master/server/modules/execCmd.js))\n\n6. [Run at startup.](https://www.npmjs.com/package/auto-launch) (already built-in. See: [client/main.js](https://github.com/IMcPwn/browser-backdoor/blob/master/client/main.js) and [server/modules/manageStartup.js](https://github.com/IMcPwn/browser-backdoor/blob/master/server/modules/manageStartup.js)).\n\nSupport\n===================\n\nIf you find an issue with the program please use the issue tracker: https://github.com/IMcPwn/browser-backdoor/issues\n\nWiki\n===================\nScreenshots are avaliable on the Wiki!\nhttps://github.com/IMcPwn/browser-backdoor/wiki/Screenshots\n\nMore information will be added to it soon.\n\nUsage\n===================\nThe client application will run in the background and provide no user interface while running.\nTo check that it's running, quit it, or enable/disable system startup press Command (OS X) OR Control (Windows/Linux) + Alt + \\ or whatever you configured the shortcut as in client/main.js.\n\nThe server application's usage can be accessed by typing help in the command line.\n\nInstalling\n===================\n\nRequirements for client:\n- Latest Node.js and npm\n\nRequirements for server:\n- Ruby 2.1+ and the gems in the Gemfile\n\nBrowserBackdoor Client is supported on all devices supported by Electron.\nCurrently that is [Windows 32/64, OS X 64, and Linux 32/64](https://github.com/electron-userland/electron-packager#supported-platforms).\n\nBrowserBackdoorServer has been tested on Ubuntu 14.04, Debian 8, and Kali Linux.\nIt should work on any similar Linux operating system.\n\nTo install anything, first, clone the repository. All the rest of the commands shown assume you are in the root of the repository.\n\n```sh\ngit clone https://github.com/IMcPwn/browser-backdoor\ncd browser-backdoor\n```\n\nHow to install and run the BrowserBackdoor client application:\n\n```sh\ncd client\nnpm install\n#\n# Configure index.html and main.js before the next command.\n#\nnpm start\n```\n\nHow to build client executables (see [here](https://github.com/electron-userland/electron-packager) for more information):\n```sh\ncd client\nnpm install electron-packager -g\nelectron-packager . --all\n```\n\nHow to run BrowserBackdoorServer:\n\n```sh\ncd server\ngem install bundler\nbundle install\n#\n# Configure config.yml before the next command\n#\nruby bbsconsole.rb\n```\n\nLicense\n===================\nMIT\n\nDisclaimer\n===================\nThis is a personal development project, please do not use it for nefarious purposes.\nThe author bears no responsibility for any misuse of the program.\n\nContact\n===================\nThis program is made by IMcPwn .\n\nContact information such as email, twitter, and other methods of contact are avaliable here: https://imcpwn.com\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FIMcPwn%2Fbrowser-backdoor","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FIMcPwn%2Fbrowser-backdoor","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FIMcPwn%2Fbrowser-backdoor/lists"}