873e52a2a1
- adapter.py: add completed_at field to C2TaskStatus dataclass - mythic.py: implement get_task() (GraphQL task query) and get_task_output() (response query + decode_response_text concat) - fake.py: deterministic state progression via per-instance call counter; get_task_output raises C2Error until completed - mapping.py: apply_task_to_simulation() idempotent output mapper (mapping_applied anchor prevents double-writes) - migration 0007: add mapping_applied BOOLEAN NOT NULL DEFAULT false to c2_task - c2_task model: mapping_applied column added - api/c2.py: GET /api/simulations/<id>/c2/tasks poll-on-read endpoint; refreshes incomplete tasks from C2, fetches output on completion, applies mapping, skips re-polling for completed tasks; best-effort (C2Error on individual task skipped, returns 200 with stale status) - 51 new tests (396 total); pytest/ruff/mypy all green Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
104 lines
2.4 KiB
Python
104 lines
2.4 KiB
Python
"""Abstract C2 adapter interface and shared dataclasses."""
|
|
from __future__ import annotations
|
|
|
|
import base64
|
|
import binascii
|
|
from abc import ABC, abstractmethod
|
|
from dataclasses import dataclass, field
|
|
from datetime import datetime
|
|
|
|
|
|
class C2Error(Exception):
|
|
"""Raised by adapters when the C2 returns an application-level error."""
|
|
|
|
|
|
@dataclass
|
|
class C2Health:
|
|
ok: bool
|
|
error: str | None = None
|
|
|
|
|
|
@dataclass
|
|
class C2Callback:
|
|
display_id: int
|
|
active: bool
|
|
host: str
|
|
user: str
|
|
domain: str
|
|
last_checkin: str # ISO-8601 string
|
|
|
|
|
|
@dataclass
|
|
class C2TaskStatus:
|
|
display_id: int
|
|
status: str
|
|
completed: bool
|
|
completed_at: datetime | None = field(default=None)
|
|
|
|
|
|
@dataclass
|
|
class C2TaskPage:
|
|
items: list[dict] # raw task dicts from Mythic
|
|
total: int
|
|
page: int
|
|
page_size: int
|
|
|
|
|
|
def decode_response_text(raw: str) -> str:
|
|
"""Decode a base64-encoded Mythic response_text field.
|
|
|
|
On binascii.Error (binary payload) returns "<binary> " + hex string
|
|
so execution_result never silently corrupts.
|
|
"""
|
|
try:
|
|
return base64.b64decode(raw).decode("utf-8")
|
|
except binascii.Error:
|
|
return "<binary> " + raw.encode().hex()
|
|
except UnicodeDecodeError:
|
|
raw_bytes = base64.b64decode(raw)
|
|
return "<binary> " + raw_bytes.hex()
|
|
|
|
|
|
class C2Adapter(ABC):
|
|
"""Thin interface over a C2 backend (Mythic or custom)."""
|
|
|
|
@abstractmethod
|
|
def test_connection(self) -> C2Health:
|
|
"""Verify that the C2 is reachable and the token is valid."""
|
|
...
|
|
|
|
@abstractmethod
|
|
def list_callbacks(self) -> list[C2Callback]:
|
|
"""Return active callbacks visible to this API token."""
|
|
...
|
|
|
|
@abstractmethod
|
|
def create_task(
|
|
self,
|
|
callback_display_id: int,
|
|
command: str,
|
|
params: str | None = None,
|
|
) -> int:
|
|
"""Issue a task and return its Mythic display_id."""
|
|
...
|
|
|
|
@abstractmethod
|
|
def get_task(self, task_display_id: int) -> C2TaskStatus:
|
|
"""Return current status of a task."""
|
|
...
|
|
|
|
@abstractmethod
|
|
def get_task_output(self, task_display_id: int) -> str:
|
|
"""Return decoded, concatenated output for a completed task."""
|
|
...
|
|
|
|
@abstractmethod
|
|
def list_callback_tasks(
|
|
self,
|
|
callback_display_id: int,
|
|
page: int = 1,
|
|
page_size: int = 25,
|
|
) -> C2TaskPage:
|
|
"""Return a paginated history of tasks for a callback."""
|
|
...
|