Agent KB_blueprints - grisuno/LazyOwn GitHub Wiki

Subsystem: blueprints

lazyc2/blueprints/init.py

lazyc2/blueprints/addons.py

  • Doc: LazyAddon creator blueprint for the C2 dashboard.
  • Layer: presentation
  • Language: py
  • Symbols:
    • init_addons_bp (function, line 69) def init_addons_bp(base_dir)
    • _store (function, line 81) def _store()
    • _csrf_policy (function, line 87) def _csrf_policy()
    • csrf_protect (function, line 96) def csrf_protect(view)
    • _issue_csrf (function, line 120) def _issue_csrf(response, policy)
    • _issue_map (function, line 149) def _issue_map(issues)
    • _form_context (function, line 164) def _form_context(draft, issues)
    • _render_create (function, line 193) def _render_create(draft, issues)
    • _draft_from_document (function, line 216) def _draft_from_document(document)
    • list_addons (function, line 263) def list_addons()
    • create_addon (function, line 277) def create_addon()
    • view_addon (function, line 321) def view_addon(name)
    • delete_addon (function, line 345) def delete_addon(name)
    • wrapper (function, line 110) def wrapper()
  • Depends on: core/logging.py, lazyc2/addon_creator.py, lazyc2/blueprints/session_auth.py, lazyc2/extensions/decoy.py, lazyc2/security/csrf.py
  • Imported by: lazyc2/blueprints/__init__.py, tests/test_addon_creator.py, tests/test_security_hardening_v5.py

lazyc2/blueprints/api.py

lazyc2/blueprints/api_v1.py

  • Doc: Versioned REST API (/api/v1) for the LazyOwn C2 server.
  • Layer: presentation
  • Language: py
  • Symbols:
    • _sessions_dir (function, line 38) def _sessions_dir()
    • _db (function, line 43) def _db()
    • _error (function, line 60) def _error(message, status)
    • health (function, line 65) def health()
    • targets (function, line 76) def targets()
    • results (function, line 108) def results()
    • campaigns (function, line 141) def campaigns()
    • _webhooks_path (function, line 166) def _webhooks_path()
    • _read_webhooks (function, line 170) def _read_webhooks()
    • webhooks_list (function, line 180) def webhooks_list()
    • webhooks_register (function, line 191) def webhooks_register()
    • webhooks_delete (function, line 228) def webhooks_delete(index)
  • Depends on: core/logging.py, core/safe_exec.py, lazyc2/blueprints/api.py, modules/beacon_history.py, modules/db.py
  • Imported by: lazyc2/blueprints/__init__.py, tests/test_api_v1.py

lazyc2/blueprints/auth.py

  • Doc: Authentication and authorisation blueprint for the LazyOwn C2 server.
  • Layer: presentation
  • Language: py
  • Symbols:
    • _rbac_available (function, line 87) def _rbac_available()
    • _get_rbac_store (function, line 92) def _get_rbac_store()
    • _get_rbac_user_obj (function, line 104) def _get_rbac_user_obj(flask_user)
    • _get_tenant_manager (function, line 114) def _get_tenant_manager()
    • register (function, line 128) def register()
    • login (function, line 187) def login()
    • mfa_setup (function, line 232) def mfa_setup()
    • mfa_qr (function, line 305) def mfa_qr(username)
    • mfa_verify (function, line 327) def mfa_verify()
    • profile (function, line 371) def profile()
    • logout (function, line 396) def logout()
    • admin_users (function, line 415) def admin_users()
    • admin_set_role (function, line 432) def admin_set_role(user_id)
    • admin_reset_mfa (function, line 454) def admin_reset_mfa(user_id)
    • admin_delete_user (function, line 466) def admin_delete_user(user_id)
    • admin_tenants (function, line 484) def admin_tenants()
    • admin_create_tenant (function, line 504) def admin_create_tenant()
    • admin_switch_tenant (function, line 523) def admin_switch_tenant(tenant_id)
    • Role (class, line 38) class Role(Enum)
    • require_role (function, line 59) def require_role(role)
    • valid_roles (method, line 51) def valid_roles(cls)
    • decorator (function, line 69) def decorator(view)
    • wrapper (function, line 71) def wrapper()
  • Depends on: cli/commands/enum.py, core/logging.py, lazyc2/__init__.py, lazyc2/extensions/decoy.py, lazyc2/extensions/users.py, modules/lazy_rbac.py
  • Imported by: lazyc2/blueprints/__init__.py, lazygui/services/teamserver_backend.py, static/js/socket.io-4.0.0.min.js, static/js/socket.io-4.3.2.min.js

lazyc2/blueprints/beacon.py

  • Doc: Beacon communication blueprint for the LazyOwn C2 server.
  • Layer: presentation
  • Language: py
  • Symbols:
    • init_beacon_bp (function, line 35) def init_beacon_bp(commands, results, commands_history, connected_clients, encrypt_fn, decrypt_fn, config...
    • _fire_hooks (function, line 72) def _fire_hooks(event, context)
    • _trigger_cred_reuse (function, line 91) def _trigger_cred_reuse(context)
    • send_command (function, line 111) def send_command(client_id)
    • receive_result (function, line 131) def receive_result(client_id)
    • issue_command (function, line 245) def issue_command()
    • _run (function, line 97) def _run()
  • Depends on: core/logging.py, modules/conditional_hooks.py, modules/credential_reuse.py, modules/state_manager.py
  • Imported by: lazyc2/blueprints/__init__.py

lazyc2/blueprints/operations.py

  • Doc: Operations blueprint — tasks, CVEs, notes, and event management.
  • Layer: presentation
  • Language: py
  • Symbols:
    • task_detail (function, line 33) def task_detail(task_id)
    • get_tasks (function, line 48) def get_tasks()
    • tasks (function, line 57) def tasks()
    • edit_task (function, line 66) def edit_task(task_id)
    • cves (function, line 92) def cves()
    • cve_detail (function, line 117) def cve_detail(cve_id)
    • edit_cve (function, line 132) def edit_cve(cve_id)
    • edit_notes (function, line 158) def edit_notes()
    • get_notes (function, line 173) def get_notes()
    • view_note (function, line 182) def view_note()
    • event_config (function, line 192) def event_config()
    • event_config_view (function, line 198) def event_config_view()
    • events (function, line 218) def events()
  • Depends on: lazyc2/blueprints/session_auth.py, lazyc2/extensions/decoy.py, lazyc2/extensions/storage.py
  • Imported by: lazyc2/blueprints/__init__.py

lazyc2/blueprints/phishing.py

  • Doc: Phishing blueprint for the LazyOwn C2 server.
  • Layer: presentation
  • Language: py
  • Symbols:
    • _get_config (function, line 43) def _get_config(key, default)
    • create_short_url (function, line 49) def create_short_url()
    • track_interaction (function, line 89) def track_interaction(short_url)
    • update_short_url (function, line 125) def update_short_url(short_url)
    • redirect_to_file (function, line 151) def redirect_to_file(short_url)
    • webserver_report (function, line 174) def webserver_report(filename)
    • download_files (function, line 192) def download_files(filename)
  • Depends on: core/logging.py, lazyc2/extensions/short_urls.py, lazyc2/security/validators.py, modules/security_sanitizers.py, utils.py
  • Imported by: lazyc2/blueprints/__init__.py

lazyc2/blueprints/session_auth.py

  • Doc: Session-based authentication gate for operator dashboard blueprints.
  • Layer: presentation
  • Language: py
  • Symbols:
    • require_operator_session (function, line 20) def require_operator_session(blueprint, login_endpoint)
    • _guard (function, line 36) def _guard()
  • Imported by: lazyc2/blueprints/addons.py, lazyc2/blueprints/operations.py