2 |
3 | # Prismatica (In Development)
4 |
5 | 
6 | 
7 | 
8 | 
9 |
10 | Prismatica is a modular C2 Interface hooked into the Diagon Command and Control Toolkit. There are multiple tools and components of the Prismatica Marketplace. All Prism Apps are built around the Emergence Fabric. To get started begin with [Emergence](https://github.com/Project-Prismatica/Emergence)
11 |
12 | ## Prismatica Application Marketplace
13 |
14 | - [Diagon](https://github.com/Project-Prismatica/Diagon) A Command and Control Toolkit
15 | - [Emergence](https://github.com/Project-Prismatica/Diagon) A Command and Control Toolkit
16 | - [Oculus](https://github.com/Project-Prismatica/Diagon) A Command and Control Toolkit
17 | - [Prism Launcher]() The package manager for Prism Apps (Releasing at WWHF)
18 | - [Prism Project Manager]() Project management, findigns, and reporting tool (Releasing at WWHF)
19 | - [Acheron](https://github.com/Acheron-VAF/Acheron) Acheron is a RESTful vulnerability assessment and management framework built around search and dedicated to terminal extensibility.
20 | - [Tiberium](https://github.com/0sm0s1z/Tiberium/releases) A Command and Control scanning tool
21 |
22 |
23 |
24 | 
25 |
--------------------------------------------------------------------------------
/default.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
13 |
14 | {% seo %}
15 |
16 |
17 |
18 | 
23 | Sorry, but the page you were trying to view does not exist — perhaps you can try searching for it below.
181 | 182 | 186 | 187 | 189 | 190 | 191 | 192 |The Prismatica project is dedicated to having your cake and eating it too.
179 | 180 |To get started with Prismatica you will need to spin up an Emergence server to bind
183 | 184 | 185 |Tempor velit sint sunt ipsum tempor enim ad qui ullamco. Est dolore anim ad velit duis dolore minim sunt aliquip amet commodo labore. Ut eu pariatur aute ea aute excepteur laborum. Esse ea esse excepteur minim mollit qui cillum excepteur ex dolore magna. Labore deserunt fugiat incididunt incididunt sint ea. Consequat dolore aute laboris quis proident quis non et est consectetur ex eiusmod sit culpa.
179 | 180 |Cupidatat ea do et in excepteur in. Ad nostrud ut est esse eu duis ea sunt eiusmod. Aliquip tempor veniam sint elit fugiat. Velit incididunt laboris amet incididunt labore dolore irure velit excepteur commodo deserunt laborum. Consectetur eu fugiat veniam veniam Lorem labore magna eiusmod. Ea occaecat reprehenderit pariatur consectetur minim labore ut aliquip.
181 | 182 | 183 |'+result.length+' Result(s) found
'); 39 | for (var item in result) { 40 | var ref = result[item].ref; 41 | if(store[ref].teaser){ 42 | var searchitem = 43 | ''+store[ref].excerpt.split(" ").splice(0,20).join(" ")+'...
'+ 52 | ''+store[ref].excerpt.split(" ").splice(0,20).join(" ")+'...
'+ 63 | ''+result.length+' Result(s) found
'); 492 | for (var item in result) { 493 | var ref = result[item].ref; 494 | if(store[ref].teaser){ 495 | var searchitem = 496 | ''+store[ref].excerpt.split(" ").splice(0,20).join(" ")+'...
'+ 505 | ''+store[ref].excerpt.split(" ").splice(0,20).join(" ")+'...
'+ 516 | 'x
'; 27 | head.appendChild(div.childNodes[1]); 28 | } 29 | 30 | if ( options ) { 31 | $.extend( settings, options ); 32 | } 33 | 34 | return this.each(function(){ 35 | var selectors = [ 36 | 'iframe[src*="player.vimeo.com"]', 37 | 'iframe[src*="youtube.com"]', 38 | 'iframe[src*="youtube-nocookie.com"]', 39 | 'iframe[src*="kickstarter.com"][src*="video.html"]', 40 | 'object', 41 | 'embed' 42 | ]; 43 | 44 | if (settings.customSelector) { 45 | selectors.push(settings.customSelector); 46 | } 47 | 48 | var ignoreList = '.fitvidsignore'; 49 | 50 | if(settings.ignore) { 51 | ignoreList = ignoreList + ', ' + settings.ignore; 52 | } 53 | 54 | var $allVideos = $(this).find(selectors.join(',')); 55 | $allVideos = $allVideos.not('object object'); // SwfObj conflict patch 56 | $allVideos = $allVideos.not(ignoreList); // Disable FitVids on this video. 57 | 58 | $allVideos.each(function(count){ 59 | var $this = $(this); 60 | if($this.parents(ignoreList).length > 0) { 61 | return; // Disable FitVids on this video. 62 | } 63 | if (this.tagName.toLowerCase() === 'embed' && $this.parent('object').length || $this.parent('.fluid-width-video-wrapper').length) { return; } 64 | if ((!$this.css('height') && !$this.css('width')) && (isNaN($this.attr('height')) || isNaN($this.attr('width')))) 65 | { 66 | $this.attr('height', 9); 67 | $this.attr('width', 16); 68 | } 69 | var height = ( this.tagName.toLowerCase() === 'object' || ($this.attr('height') && !isNaN(parseInt($this.attr('height'), 10))) ) ? parseInt($this.attr('height'), 10) : $this.height(), 70 | width = !isNaN(parseInt($this.attr('width'), 10)) ? parseInt($this.attr('width'), 10) : $this.width(), 71 | aspectRatio = height / width; 72 | if(!$this.attr('id')){ 73 | var videoID = 'fitvid' + count; 74 | $this.attr('id', videoID); 75 | } 76 | $this.wrap('').parent('.fluid-width-video-wrapper').css('padding-top', (aspectRatio * 100)+'%'); 77 | $this.removeAttr('height').removeAttr('width'); 78 | }); 79 | }); 80 | }; 81 | // Works with either jQuery or Zepto 82 | })( window.jQuery || window.Zepto ); -------------------------------------------------------------------------------- /docs/_site/assets/js/plugins/jquery.greedy-navigation.js: -------------------------------------------------------------------------------- 1 | /* 2 | GreedyNav.js - https://github.com/lukejacksonn/GreedyNav 3 | Licensed under the MIT license - http://opensource.org/licenses/MIT 4 | Copyright (c) 2015 Luke Jackson 5 | */ 6 | 7 | $(document).ready(function() { 8 | var $btn = $("nav.greedy-nav .greedy-nav__toggle"); 9 | var $vlinks = $("nav.greedy-nav .visible-links"); 10 | var $hlinks = $("nav.greedy-nav .hidden-links"); 11 | 12 | var numOfItems = 0; 13 | var totalSpace = 0; 14 | var closingTime = 1000; 15 | var breakWidths = []; 16 | 17 | // Get initial state 18 | $vlinks.children().outerWidth(function(i, w) { 19 | totalSpace += w; 20 | numOfItems += 1; 21 | breakWidths.push(totalSpace); 22 | }); 23 | 24 | var availableSpace, numOfVisibleItems, requiredSpace, timer; 25 | 26 | function check() { 27 | // Get instant state 28 | availableSpace = $vlinks.width() - $btn.width(); 29 | numOfVisibleItems = $vlinks.children().length; 30 | requiredSpace = breakWidths[numOfVisibleItems - 1]; 31 | 32 | // There is not enough space 33 | if (requiredSpace > availableSpace) { 34 | $vlinks 35 | .children() 36 | .last() 37 | .prependTo($hlinks); 38 | numOfVisibleItems -= 1; 39 | check(); 40 | // There is more than enough space 41 | } else if (availableSpace > breakWidths[numOfVisibleItems]) { 42 | $hlinks 43 | .children() 44 | .first() 45 | .appendTo($vlinks); 46 | numOfVisibleItems += 1; 47 | check(); 48 | } 49 | // Update the button accordingly 50 | $btn.attr("count", numOfItems - numOfVisibleItems); 51 | if (numOfVisibleItems === numOfItems) { 52 | $btn.addClass("hidden"); 53 | } else { 54 | $btn.removeClass("hidden"); 55 | } 56 | } 57 | 58 | // Window listeners 59 | $(window).resize(function() { 60 | check(); 61 | }); 62 | 63 | $btn.on("click", function() { 64 | $hlinks.toggleClass("hidden"); 65 | $(this).toggleClass("close"); 66 | clearTimeout(timer); 67 | }); 68 | 69 | $hlinks 70 | .on("mouseleave", function() { 71 | // Mouse has left, start the timer 72 | timer = setTimeout(function() { 73 | $hlinks.addClass("hidden"); 74 | $btn.toggleClass("close"); 75 | }, closingTime); 76 | }) 77 | .on("mouseenter", function() { 78 | // Mouse is back, cancel the timer 79 | clearTimeout(timer); 80 | }); 81 | 82 | check(); 83 | }); 84 | -------------------------------------------------------------------------------- /docs/_site/assets/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Project-Prismatica/Prismatica/dc9d7e4de53b394a3001dde661d0ef492ca76416/docs/_site/assets/logo.png -------------------------------------------------------------------------------- /docs/_site/blog/getting-started/index.html: -------------------------------------------------------------------------------- 1 | 2 | 8 | 9 | 10 | 11 | 12 |The Prismatica project is dedicated to having your cake and eating it too.
159 | 160 |To get started with Prismatica you will need to spin up an Emergence server to bind
163 | 164 |The Prismatica project is dedicated to having your cake and eating it too. 291 | 292 |
293 |Diagon is the default C2 toolset of Prismatica Project. The primary implant for Diagon is Gryffindor a JavaScript-based implant that leverages Windows Scripting Host (WSH) for execution. Gryffindor also has the capability to load and execute arbitrary .NET assemblies through the DotNetToJScript project.
166 | 167 |
Gryffindor includes custom WSH, COM, and .NET post-exploitation capabilities however the implant also supports the ability to InvokeAssembly for futher post exploitation capability. Gryffindor includes two core .NET assembly frameworks actualized through DotNetToJScript:
===========================
179 | Gryffindor Commands:
180 | ===========================
181 | help - Show this information
182 | cat - Show file contents
183 | type - Show file contents
184 | cd - Change directory
185 | ls - Show directory contents
186 | dir - Show directory contents
187 | die - Exit session
188 | kill - Exit session
189 | set - Modify payload settings
190 | - interval <ms>
191 | - sleep <ms>
192 | - jitter <percent>
193 | show - Display payload information
194 | - settings <ms>
195 | upload - Upload a file to the target system
196 | download - Download a remote file from the target system
197 | spawn - Instantiate a new session on the target system
198 | - Example Usage: spawn <target-ip> <user> <password>
199 | WMIExecute - Instantiate a new session on the target system
200 | - Example Usage: WMIExecute <target-ip> <cmd> <user> <password>
201 | hashdump - Use Mimikatz to dump SAM hashes
202 | InvokeAssembly - Run an payload from within a loaded .NET assembly (Defaults:SharpSploit)
203 | - Example Usage: InvokeAssembly -Entry SharpSploit.Execution.Shell -Module ShellExecute -Args ('calc.exe','','','')
204 | LoadAssembly - Load an arbitrary .NET assembly payload
205 | type -
206 | Other commands sent to Gryffindor are executed in the Windows cmd.exe shell.
207 | ===========================
208 | Before establishing remote access to a target system it is important to instantiate a listener for the implant to connect into. Click on the headphones icon to access the listeners panel. Next, click start listener to instantiate a basic http listener in Oculus.
212 | 213 |
As seen above Diagon provides a direct staging command; however, standalone .js payloads can be generated as seen below.
216 | 217 |Click on the factory icon to open the backdoor factory modal window. Generated payloads will appear in the current user’s home/.prismatica directory on both Windows and Linux operating systems.
219 | 220 |
Learn more about C2 architecture and concepts
247 | 248 |Project Prismatica is built around the concept of Emergence. Explore the Emergence API!
278 | 279 |Everything you wanted to know about Gryffindor and Diagon
309 | 310 |The Prismatica project is dedicated to having your cake and eating it too. 356 | 357 |
358 |Project Prismatica is a focused framework for Command and Control that is dedicated to extensibility. Our core objective is to provide a convenient platform with modular Transports, Backends, and Implants to enable rapid retooling opportunities and enhance Red Team operations.
232 | 233 |Prismatica was designed from the ground up to be flexible, modular, and extensible. While the system does have core C2 components, extending and integrating 0-day capabilities has never been easier! Watch the Security Weekly episode below to learn how to make a python implant that takes advantage of all of Prismatica’s capability in under 15 minutes.
267 | 268 |Prismatica supports multiple users operating from Linux, Windows, and MacOS systems to enable red teams to maximize their efficency while on engagements. When handling large numbers of agents filtering numerous filtering options are available to enhance OnNet target interaction.
304 | 305 |Prismatica includes a Backdoor Factory to enable the rapid development and deployment of implants. The default Prismatica implant, Gryffindor, is written in WSH JavaScript and leverages .NET Post-Exploitation libraries through DotNetToJScript.
339 | 340 |Prismatica is fully open source and open API. The C2 UI (Diagon) and primary implant (Gryffindor) are not intended to be the ONLY way to interface with Prismatica, but simply one option. Checkout the documentation for developer information
374 | 375 |It is the golden age of C2! As a result of the major strides that have been recently accomplished by the information security community there are now more implant frameworks than ever! One downside of this incredible opportunity is the drift in terminology. This page discusses C2 concepts as they relate to the Prismatica Project.
179 | 180 |Learn more about C2 architecture and concepts
215 | 216 |Project Prismatica is built around the concept of Emergence. Explore the Emergence API!
246 | 247 |Everything you wanted to know about Gryffindor and Diagon
277 | 278 |The Prismatica project is dedicated to having your cake and eating it too. 284 | 285 |
286 |The Prismatica project is dedicated to having your cake and eating it too. 307 | 308 |
309 |The Prismatica project is dedicated to having your cake and eating it too. 338 | 339 |
340 |The Prismatica project is dedicated to having your cake and eating it too. 369 | 370 |
371 |
235 |
236 | 
266 |
267 | 
255 |
256 | 
292 |
293 | 
362 |
363 |