https://github.com/lukebaggett/google_socks

A proof of concept demonstrating the use of Google Drive for command and control.
https://github.com/lukebaggett/google_socks

google-api google-drive penetration-testing python security

Last synced: 2 months ago
JSON representation

A proof of concept demonstrating the use of Google Drive for command and control.

• Host: GitHub
• URL: https://github.com/lukebaggett/google_socks
• Owner: lukebaggett
• Archived: true
• Created: 2016-08-22T17:52:46.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2018-07-19T19:54:07.000Z (almost 6 years ago)
• Last Synced: 2024-01-29T03:20:23.506Z (5 months ago)
• Topics: google-api, google-drive, penetration-testing, python, security
• Language: Python
• Size: 9.77 KB
• Stars: 81
• Watchers: 4
• Forks: 27
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Lists

• awesome-rat - **66**星
• awesome-rat - **66**星
• awesome-network-stuff - **66**星
• awesome-network-stuff - **66**星

README

        
This script is used to allow two sockets to communicate while relaying data through Google Drive.

Check out this [blog post](http://www.blackhillsinfosec.com/?p=5230) for more details.

### Setup Process

* Install needed python modules (see below)

* Run "python2 ./google_socks.py --setup" and follow the instructions

  * [Create a Google API Project](https://console.developers.google.com/projectcreate)

  * [Create OAuth client ID credentials for the project](https://console.developers.google.com/apis/credentials)

  * [Download the JSON for those credentials](https://console.developers.google.com/apis/credentials)

  * Move the credentials file to the google_socks directory and name it "client_secrets.json"

  * Next, the setup script will give you a Google link and ask for a secret

  * Follow the link, authorize the script to use the API, and receive the secret

  * Paste the secret back into the setup script's prompt

  * [Copy the provided python code into the google_socks.py file below "# PASTE NEW CREDENTIALS HERE"](https://github.com/lukebaggett/google_socks/blob/master/google_socks.py#L28)

  * [Enable the Google Drive API](https://console.developers.google.com/apis/api/drive.googleapis.com/overview)

  * All done!

* Read the help information here: "python ./google_socks.py -h"

### Needed Python Modules

    pip2 install google-auth google-auth-oauthlib google-auth-httplib2 python-dateutil google-api-python-client

### Help

    Usage: google_socks.py [options]

    

    Options:

      -h, --help  show this help message and exit

      --setup     Setup script with Drive App

      -c CREDS    Index of creds in credentials array to use (default: 0)

      -d          Delete files with names provided to -s and -r

      -l          Enable Socket Mode: Listener

      -i IP       Enable Socket Mode: Connect

      -p PORT     Port number for socket mode (default: 8000)

      -s SEND     Sending channel (default: 0)

      -r RECV     Receiving channel (default: 1)

      -P POLL     Poll every x seconds (default: 0)

      -j JITTER   Amount of randomness in polling (default: 1.0)

      -v          Enable verbose output

      --debug     Enable debug output

### Performance Tip

If you need to send data as fast as possible, set no polling (-P 0) or jitter (-j 0). If you get an error from going over the API rate limit, try raising your polling time little by little until you find a sweetspot. I found .2 seconds worked well.