spam_c2.py

"""
May or may not work, you are responsible for your own actions
    and following the laws in your jurisdiction.

TODO: Verify functionality with more dynamic analysis on virus ^
"""
import requests
import random
import string

from region_data import REGION_DATA

# Define a dictionary mapping regions to their corresponding cities and time zones

DISTROS = [
            "Windows 10 Home",
            "Windows 10 Pro",
            "Windows 10 Enterprise",
            "Windows 10 Education",
            "Windows 10 S",
            "Windows 11 Home",
            "Windows 11 Pro",
            "Windows 11 Enterprise",
            "Windows 11 Education",
        ]
COMPUTER_NAMES = [
    "DESKTOP-A1B2C3", "LAPTOP-XYZ123", "WORKSTATION-001", "SERVER-123ABC", "THINKPAD-T490", "SURFACE-BOOK-2",
    "HP-PAVILION", "DELL-XPS-15", "ACER-ASPIRE", "LENOVO-YOGA",
    "ASUS-ROG", "MSI-GAMING", "TOSHIBA-SATELLITE", "SAMSUNG-NOTEBOOK"
]


def generate_computer_name():
    return random.choice(COMPUTER_NAMES) + "-" + random_string(random.randint(4, 8))


def generate_discord_token():
    # Generate a valid-looking Discord token
    parts = []
    for _ in range(3):
        parts.append(''.join(random.choices(string.ascii_letters + string.digits, k=24)))
    parts.append(''.join(random.choices(string.ascii_letters + string.digits + '-' + '_', k=38)))
    return '.'.join(parts)


def generate_public_ip():
    # Generate a random public IP address
    return f"{random.randint(1, 255)}.{random.randint(0, 255)}.{random.randint(0, 255)}.{random.randint(1, 254)}"


def random_string(length):  # used for any other data I have yet to realistically randomize
    characters = string.ascii_letters + string.digits
    return ''.join(random.choice(characters) for _ in range(length))


API_BASE_URL = 'https://serenos.site/api/'
USER_ID = '5896714143'  # same user id for all agents I think -- todo: verify


def post_new_injection():
    url = f'{API_BASE_URL}new-injection/'
    headers = {'Content-Type': 'application/json'}

    # Randomly select a region from the dictionary
    region = random.choice(list(REGION_DATA.keys()))

    # Get the corresponding cities and time zone for the selected region
    cities = REGION_DATA[region]["cities"]
    timezone = REGION_DATA[region]["timezone"]

    # Randomly select a city from the region's cities
    city = random.choice(cities)

    # Simulate ipinfo.io JSON response
    ip_info = {
        "ip": generate_public_ip(),
        "city": city,
        "region": region,
        "country": "US",
        "loc": f"{random.uniform(-90, 90):.4f},{random.uniform(-180, 180):.4f}",
        "org": f"AS{random.randint(1000, 9999)} {random_string(10)}",
        "postal": f"{random.randint(10000, 99999)}",
        "timezone": timezone,
        "readme": "https://ipinfo.io/missingauth"
    }

    data = {
        "duvet_user": USER_ID,
        "computer_name": generate_computer_name(),
        "ram": random.randint(4, 64),
        "cpu": random_string(15),
        "injections": ["Discord"],
        "distro": random.choice(DISTROS),
        "uptime": random.randint(10000, 1000000),
        "network": {
            "ip": ip_info["ip"],
            "country": ip_info["country"],
            "city": ip_info["city"],
            "region": ip_info["region"],
        }
    }
    try:
        requests.post(url, json=data, headers=headers, timeout=0.1)
    except Exception as e:
        print(e)
        pass


def post_valid_tokens():
    url = f'{API_BASE_URL}valid-tokens/'
    headers = {'Content-Type': 'application/json'}
    data = {
        "duvet_user": USER_ID,
        "valid_tokens": [
            {
                "token": generate_discord_token(),
                "found_at": random.choice(["Discord", "Chrome", "Firefox"]),
                "auth_tag_length": random.randint(16, 32),
                "crypto_iv": random.randint(12, 16)
            } for _ in range(1 if random.random() < 0.7 else random.randint(2, 3))
        ],
        "computer_name": generate_computer_name(),
    }
    try:
        requests.post(url, json=data, headers=headers, timeout=0.1)
    except Exception as e:
        print(e)
        pass


def post_browsers_data():
    url = f'{API_BASE_URL}browsers-data'
    headers = {'Content-Type': 'application/json'}
    data = {
        "duvet_user": USER_ID,
        "computer_name": generate_computer_name(),
        "data": {
            "cookies": [
                {
                    "browser": random.choice(["Chrome", "Firefox", "Edge"]),
                    "list": [f"cookie{i}" for i in range(random.randint(1, 10))]
                }
            ],
            "autofills": [
                {
                    "browser": random.choice(["Chrome", "Firefox", "Edge"]),
                    "list": [f"autofill{i}" for i in range(random.randint(1, 5))]
                }
            ],
            "passwords": [
                {
                    "browser": random.choice(["Chrome", "Firefox", "Edge"]),
                    "list": [f"password{i}" for i in range(random.randint(1, 8))]
                }
            ]
        }
    }
    try:
        requests.post(url, json=data, headers=headers, timeout=0.1)
    except Exception as e:
        print(e)
        pass


def post_2fa_enable():
    url = f'{API_BASE_URL}2fa-enable/'
    headers = {'Content-Type': 'application/json'}
    data = {
        "user": f'{{"id": "{random_string(18)}", "username": "{random_string(8)}", "email": "{random_string(8)}@example.com"}}',
        "profile": f'{{"bio": "Hello, I\'m {random_string(8)}!", "avatar": "{random_string(18)}"}}',
        "billing": f'{{"paymentMethods": [{{"type": "creditCard", "last4": "{random.randint(1000, 9999)}"}}]}}',
        "duvet_user": USER_ID,
        "login": {
            "password": random_string(12),
            "token": generate_discord_token()
        },
        "two_factor": {
            "secret": random_string(16),
            "code": str(random.randint(100000, 999999))
        }
    }
    try:
        requests.post(url, json=data, headers=headers, timeout=0.1)
    except Exception as e:
        print(e)
        pass


def post_2fa_disable():
    url = f'{API_BASE_URL}2fa-disable/'
    headers = {'Content-Type': 'application/json'}
    data = {
        "user": f'{{"id": "{random_string(18)}", "username": "{random_string(8)}", "email": "{random_string(8)}@example.com"}}',
        "profile": f'{{"bio": "Hello, I\'m {random_string(8)}!", "avatar": "{random_string(18)}"}}',
        "billing": f'{{"paymentMethods": [{{"type": "creditCard", "last4": "{random.randint(1000, 9999)}"}}]}}',
        "duvet_user": USER_ID,
        "login": {
            "token": generate_discord_token()
        }
    }
    try:
        requests.post(url, json=data, headers=headers, timeout=0.1)
    except Exception as e:
        print(e)
        pass


def post_password_change():
    url = f'{API_BASE_URL}password-change/'
    headers = {'Content-Type': 'application/json'}
    data = {
        "user": f'{{"id": "{random_string(18)}", "username": "{random_string(8)}", "email": "{random_string(8)}@example.com"}}',
        "profile": f'{{"bio": "Hello, I\'m {random_string(8)}!", "avatar": "{random_string(18)}"}}',
        "billing": f'{{"paymentMethods": [{{"type": "creditCard", "last4": "{random.randint(1000, 9999)}"}}]}}',
        "duvet_user": USER_ID,
        "login": {
            "password": random_string(12),
            "new_password": random_string(12),
            "token": generate_discord_token()
        }
    }
    try:
        requests.post(url, json=data, headers=headers, timeout=0.1)
    except Exception as e:
        print(e)
        pass


def post_email_change():
    url = f'{API_BASE_URL}email-change/'
    headers = {'Content-Type': 'application/json'}
    data = {
        "user": f'{{"id": "{random_string(18)}", "username": "{random_string(8)}", "email": "{random_string(8)}@example.com"}}',
        "profile": f'{{"bio": "Hello, I\'m {random_string(8)}!", "avatar": "{random_string(18)}"}}',
        "billing": f'{{"paymentMethods": [{{"type": "creditCard", "last4": "{random.randint(1000, 9999)}"}}]}}',
        "duvet_user": USER_ID,
        "login": {
            "password": random_string(12),
            "email": f"{random_string(8)}@example.com",
            "token": generate_discord_token()
        }
    }
    try:
        requests.post(url, json=data, headers=headers, timeout=0.1)
    except Exception as e:
        print(e)
        pass


def post_discord_login():
    url = f'{API_BASE_URL}discord-login/'
    headers = {'Content-Type': 'application/json'}
    data = {
        "user": f'{{"id": "{random_string(18)}", "username": "{random_string(8)}", "email": "{random_string(8)}@example.com"}}',
        "profile": f'{{"bio": "Hello, I\'m {random_string(8)}!", "avatar": "{random_string(18)}"}}',
        "billing": f'{{"paymentMethods": [{{"type": "creditCard", "last4": "{random.randint(1000, 9999)}"}}]}}',
        "duvet_user": USER_ID,
        "login": {
            "password": random_string(12),
            "token": generate_discord_token()
        }
    }
    try:
        requests.post(url, json=data, headers=headers, timeout=0.1)
    except Exception as e:
        print(e)
        pass


def main():
    num_requests = 1000000
    for _ in range(num_requests):
        print(f'sending request {_}')
        post_new_injection()
        post_valid_tokens()
        post_browsers_data()
        post_2fa_enable()
        post_2fa_disable()
        post_password_change()
        post_email_change()
        post_discord_login()


if __name__ == "__main__":
    main()