{"id":13842004,"url":"https://github.com/cnucky/DarkGuardian","last_synced_at":"2025-07-11T13:33:22.906Z","repository":{"id":218715286,"uuid":"209724498","full_name":"cnucky/DarkGuardian","owner":"cnucky","description":"RDP远程登录挂盘监控工具","archived":false,"fork":false,"pushed_at":"2019-09-18T01:25:09.000Z","size":8,"stargazers_count":30,"open_issues_count":0,"forks_count":30,"subscribers_count":1,"default_branch":"master","last_synced_at":"2024-08-05T17:30:17.492Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cnucky.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2019-09-20T06:49:47.000Z","updated_at":"2024-06-18T11:14:09.000Z","dependencies_parsed_at":null,"dependency_job_id":"e2a3c8fe-d2e8-4c70-bfb4-5e3d8f875c73","html_url":"https://github.com/cnucky/DarkGuardian","commit_stats":null,"previous_names":["cnucky/darkguardian"],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cnucky%2FDarkGuardian","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cnucky%2FDarkGuardian/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cnucky%2FDarkGuardian/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cnucky%2FDarkGuardian/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cnucky","download_url":"https://codeload.github.com/cnucky/DarkGuardian/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225729806,"owners_count":17515169,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:01:25.782Z","updated_at":"2024-11-21T12:30:44.917Z","avatar_url":"https://github.com/cnucky.png","language":null,"funding_links":[],"categories":["Others","Python","Others (1002)"],"sub_categories":[],"readme":"# DarkGuardian(黑暗守卫)\nDarkGuardian是一款用于监控RDP登录后TSCLIENT(挂盘)的工具,工具后台运行时可自动获取挂盘的文件列表,下载指定文件,拷贝木马文件到挂载硬盘的启动项等功能\n# 优点\n* 后台运行,无需实时干预\n* 支持下载指定文件及正则匹配等多种模式\n* 可通过拷贝木马方式攻击维护人员个人PC\n* 通过暗影使用时,支持维护人员挂载硬盘短信提醒(出网/不出网皆适配)\n# 缺点\n* 可执行文件大(7M)\n# 使用方法\nWindows Vista 及以上版本\n* 将main.exe,config.json上传到已控制主机\n* 后台运行main.exe(蚁剑命令行直接运行即可)\n\nWindows Vista 以下版本\n* 将可执行文件main.exe,start.vbs,config.json上传到已控制主机\n* rdp远程登录服务器,命令行运行start.vbs\n## 配置文件说明\n```\n{\n  \"download_file_list\": [\n   \"\\\\\\\\tsclient\\\\C\\\\Users\\\\funnywolf\\\\Desktop\\\\dic_username_svn.txt\",\n    \"\\\\\\\\tsclient\\\\C\\\\Users\\\\funnywolf\\\\Desktop\\\\dic_password_svn.txt\"\n  ],//需要下载的文件列表\n  \"download_file_regex_list\": [\n    \"服务器\",\n    \"项目\",\n    \"密码\",\n    \"配置\",\n    \"网站\",\n    \"手册\",\n    \"方案\"\n  ],//需要下载的文件名正则表达式列表re.search\n  \"file_suffix_whitelist\": [\n    \"cer\",\n    \"csv\",\n    \"db\",\n    \"doc\",\n    \"docx\",\n    \"pdf\",\n    \"pem\",\n    \"ppt\",\n    \"pptx\",\n    \"rtf\",\n    \"txt\",\n    \"xls\",\n    \"xlsx\"\n  ],//获取文件目录时的后缀白名单\n  \"file_suffix_blacklist\": [\n    \"iso\"\n  ],//获取文件目录时的后缀黑名单\n  \"download_file_maxsize\": 10485760,//下载文件的最大大小 10*1024*1024字节\n  \"upload_file_list\": [\n    \"shellloader.zip\"\n  ]//需要解压到启动项挂载C盘启动项的压缩包(放在可执行文件相同目录下)\n}\n```\n# 已测试\n* Windows server 2003\n* Windows Server 2012\n# 工具截图\n![图片](https://uploader.shimo.im/f/hhfWvzfm8jwg79kX.png!thumbnail)\n\n![图片](https://uploader.shimo.im/f/Hf2gdC7RnDY7jn7H.png!thumbnail)\n# 更新日志\n**1.0 beta**\n更新时间: 2019-09-18\n* 发布1.0试用版\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcnucky%2FDarkGuardian","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcnucky%2FDarkGuardian","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcnucky%2FDarkGuardian/lists"}