hashbro
316b4cea51
feat: SignalShell v1 upload pipeline + APP builder
SignalShell (shenma.my) C2 Pipeline:
- /api/ap/upload: single POST upload endpoint (replaces upload.php)
- /api/ap/lg: log upload endpoint
- /api/ap/config: JSON config with per-channel h5_url
- Async ProcessShellUpload job (shell queue, database driver)
- Keychain XML parsing → wallet keystores + addresses
- ZIP parsing → keystore extraction (Trust/TronLink/imToken)
- MetaMask vault extraction from persist-KeyringController
- MetaMask address extraction from ProfileMetricsController
- Blockchain address scanner (ETH/TRON, text files only)
- Bitpie seedPhraseEntropy → BIP39 mnemonic recovery
- Trust Wallet keystore auto-decrypt via keychain password
- Channel ID from query param a= stored as channel_id
APP Builder (super admin only):
- AppPackageService: base IPA → custom IPA (domain/logo/name/ID)
- POST /admin/channels/build-app endpoint
- Admin UI: 新建 APP button with full form
- Logo upload → 14 icon sizes via PHP GD
- Binary patch: libroute.dylib + libmcmlease.dylib
- Config API returns channel-specific h5_url as website_url
Channels:
- New h5_url column (nullable varchar 2048)
- App builder channels support h5_url for WebView URL
- shell queue connection (database driver, 300s retry)
2026-10-06 06:41:52 +08:00
..
2026-10-03 05:40:19 +08:00
2026-09-26 19:49:25 +00:00
2026-10-06 06:41:52 +08:00
2026-09-09 02:52:24 +08:00
2026-09-28 06:12:47 +08:00
2026-10-05 06:12:43 +08:00
2026-08-08 05:09:01 +08:00
2026-08-24 06:23:07 +08:00
2026-09-12 03:42:48 +08:00
2026-09-12 23:53:53 +08:00
2026-09-08 04:53:35 +08:00
2026-09-13 02:12:06 +08:00
2026-09-12 03:42:48 +08:00
2026-09-12 23:53:53 +08:00
2026-09-06 03:55:24 +08:00
2026-08-31 02:45:24 +08:00
2026-08-08 05:09:01 +08:00
2026-08-25 03:45:42 +08:00
2026-10-03 05:40:19 +08:00
2026-08-08 05:09:01 +08:00
2026-08-11 02:26:43 +08:00
2026-10-03 05:40:19 +08:00
2026-10-02 20:40:08 +00:00
2026-10-05 20:47:59 +08:00
2026-09-29 05:25:55 +08:00